Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
File:                     mwpFcttA2K06pRQevZHpAo51NjE.mft (raw, json)
Hash identifier:          5Jbf7Ww/9NONqOkun4G+F8BD6PYnPYpF/RrcqJtI2HM=
Subject key identifier:   21:F3:5B:B0:FA:BC:F9:B0:58:D3:4B:31:BE:76:ED:51:4D:B9:CD:E4
Authority key identifier: 9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
Certificate issuer:       /CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Certificate serial:       01984966AFEC01DC7C7ECE463411B795B332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
Manifest number:          0787
Signing time:             Sun 27 Jul 2025 01:02:03 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:03 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:03 +0000
Files and hashes:         1: LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa (hash: 0hquK8SkvqQbNfKEbYjZG0icP/g4QwK+sH8IO5xeaXI=)
                          2: mwpFcttA2K06pRQevZHpAo51NjE.crl (hash: UYbWXrto2KKCkji8utwKnSTGRgxmyQ+MJd2C+SAj5co=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:af:ec:01:dc:7c:7e:ce:46:34:11:b7:95:b3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
        Validity
            Not Before: Jul 27 01:02:03 2025 GMT
            Not After : Jul 28 01:02:03 2025 GMT
        Subject: CN=21f35bb0fabcf9b058d34b31be76ed514db9cde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:61:05:8a:94:ce:fd:00:10:1c:c8:d0:5c:a9:
                    d5:97:a4:08:29:df:f1:d3:a5:cf:86:28:4c:d7:7e:
                    67:7f:38:f7:31:17:3f:49:af:10:39:6b:99:3d:da:
                    9d:e1:db:3a:6b:97:f8:d8:7e:bb:09:41:64:07:76:
                    39:d2:f8:91:fc:a5:7f:36:d5:35:8f:be:24:f7:e7:
                    c1:76:2b:03:4d:54:f7:ef:55:fe:35:55:dc:0a:1c:
                    49:a1:35:fd:64:e6:31:20:91:17:60:7c:2a:d4:c5:
                    53:2a:32:63:25:19:dd:48:b5:d3:99:2f:30:40:39:
                    82:64:8b:f7:5b:15:ad:ff:86:3b:af:3a:eb:a0:44:
                    94:3b:77:98:5a:14:a2:81:27:d0:de:55:fe:fd:08:
                    48:42:d4:13:2e:79:5c:27:41:8e:a4:cb:a6:d7:fd:
                    ed:bb:de:76:e0:e0:d1:00:a6:88:65:9e:7c:16:fc:
                    9d:85:bc:4f:78:c5:bd:ac:ed:6c:33:e3:a1:ec:2b:
                    a0:16:4e:31:d1:c9:55:45:b8:19:0f:c6:ce:10:45:
                    54:83:11:58:7b:bb:36:bc:36:6f:fa:45:36:97:65:
                    65:da:8a:8a:a9:d3:03:a1:5d:dc:5d:72:7b:3a:69:
                    69:26:86:4e:83:32:90:a4:e3:0f:05:eb:ef:9e:75:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:5B:B0:FA:BC:F9:B0:58:D3:4B:31:BE:76:ED:51:4D:B9:CD:E4
            X509v3 Authority Key Identifier:
                keyid:9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:97:88:b8:a7:94:d2:ae:7e:08:1e:8c:9d:6b:ea:a9:67:86:
         12:83:4d:34:ab:49:8c:c7:9b:94:26:02:18:e0:ed:85:4b:b0:
         ce:ec:ce:af:20:da:0d:2d:bb:17:d7:b4:a7:1f:c8:80:59:4f:
         de:5e:7f:86:7c:aa:ec:03:98:35:48:62:85:67:2c:84:fc:ec:
         ff:65:17:07:8c:99:ee:a9:6b:ec:42:df:a1:df:04:12:e5:03:
         de:ef:86:b8:67:fa:43:a2:b1:76:ec:50:89:54:c4:5b:f3:0e:
         f1:2e:cd:89:1b:cb:d0:f5:14:4d:b6:b1:54:42:11:e1:b8:a6:
         13:3d:7d:26:cd:cf:9e:51:8a:53:66:c4:a7:1a:33:03:96:4a:
         80:5b:ab:91:91:8b:37:b8:fe:70:57:f4:10:c2:f3:6d:92:3c:
         8f:3a:30:01:f3:5d:7e:d1:4e:22:58:05:fc:62:20:92:5c:ae:
         0f:f6:70:40:d0:07:cc:8b:36:5a:9b:c6:a5:18:f4:9c:40:41:
         79:48:09:a4:02:d1:0c:ac:16:19:a8:48:e0:19:23:69:46:c7:
         81:65:3b:06:bf:94:dc:b0:7b:f8:82:1c:c7:9d:f8:b4:dc:f4:
         70:cf:1e:42:22:28:0c:73:1e:5e:a7:fd:c5:ef:ca:9d:6d:20:
         ec:41:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:25 2025 by rpki-client