Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          8xjcWf/H5NyzuYVmgvUJmOu7marMk73KZHcWGnUpWMU=
Subject key identifier:   12:19:0F:0D:B5:03:2F:A1:8E:5F:39:10:F5:65:01:0D:A6:AC:D1:66
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       0197499F44EE46CCC8E7CDCC981B4189452C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          05CD
Signing time:             Sat 07 Jun 2025 09:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:04 +0000
Files and hashes:         1: 9VCWXkatYJ3ESMbCaKx1Q3PgSTU.roa (hash: ZMgX7WnteThsvsNnKSDN1aaNlfhZg64e4j4Ovh8Mbfo=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: I/lO/+z2ikYr17ey2MZT1zJViykiHxHLMT7ctAflsWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:44:ee:46:cc:c8:e7:cd:cc:98:1b:41:89:45:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Jun  7 09:01:04 2025 GMT
            Not After : Jun  8 09:01:04 2025 GMT
        Subject: CN=12190f0db5032fa18e5f3910f565010da6acd166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:48:d3:32:79:bc:4d:9b:bd:4b:9f:01:70:
                    18:22:5f:b1:c0:ee:cb:c8:2e:a4:dd:3e:18:0f:89:
                    40:6b:e9:ee:47:a1:4d:76:be:5c:38:86:76:50:1d:
                    bd:36:50:25:b7:9b:b6:94:e7:25:aa:f9:8d:2e:f4:
                    75:1a:86:fe:59:61:d5:73:bc:70:05:3e:56:85:61:
                    cb:c3:ad:fc:48:f2:9b:39:9a:9e:a4:bd:bc:1b:ee:
                    f5:55:11:57:e3:60:64:91:99:f0:2a:a4:f2:b6:ff:
                    bf:63:e7:fd:d7:f4:2a:7d:ed:dd:3c:c7:59:12:ec:
                    5e:e5:c8:27:f8:68:2a:c5:c2:e5:4f:d5:63:db:a5:
                    3c:bc:a1:f3:e8:8b:63:5a:24:0a:bf:be:d0:03:d7:
                    d0:05:d2:45:17:2f:a0:59:74:ee:1a:dd:50:8e:3c:
                    07:cc:94:7e:8f:3b:80:7e:62:40:9d:02:41:d4:2a:
                    85:ad:ad:9d:a9:b4:52:05:a2:42:46:cb:f6:7e:70:
                    86:0c:58:a9:54:ba:31:7e:0c:2f:af:3f:d5:57:dd:
                    5f:83:cf:93:20:6e:1b:dc:65:de:be:11:09:c6:78:
                    92:5d:3d:25:69:7c:b3:da:d3:9b:63:13:2e:de:2b:
                    bd:f1:a9:1d:c9:07:4e:7b:66:8a:6d:f5:0e:22:7e:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:0F:0D:B5:03:2F:A1:8E:5F:39:10:F5:65:01:0D:A6:AC:D1:66
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ea:c4:32:bf:a3:ab:4c:9e:f3:26:2a:3e:b3:ab:7e:41:90:
         a2:44:b1:a8:49:e8:34:25:46:64:f7:64:68:97:0b:f3:a2:bf:
         3d:2b:13:9a:04:50:83:dd:0d:3f:92:e5:63:79:c5:8b:b5:25:
         53:cc:0e:44:32:36:e2:a6:c9:76:b6:af:c8:02:48:99:77:83:
         50:ef:06:65:4f:5f:06:38:ff:70:6b:d0:7d:84:2c:c1:85:7c:
         10:09:be:8d:9f:78:ba:2d:89:b8:a0:25:9c:3d:bd:9a:8c:77:
         61:20:de:9d:49:78:f4:25:7e:c3:e0:5b:c5:8d:83:c7:1b:98:
         a3:30:e8:20:5e:c0:26:38:0a:50:10:68:be:44:0f:91:0e:99:
         f9:22:dd:d8:18:3f:80:90:ec:27:69:9a:69:95:e9:c9:6d:33:
         8b:d6:e3:3b:e6:94:53:9a:3f:b0:6d:a4:e4:e5:30:3b:1b:b1:
         0f:28:16:95:3c:05:d8:ed:42:f3:b5:53:41:e1:dc:1d:b5:df:
         6a:87:7e:28:2a:fc:fe:2f:71:09:e4:f4:95:71:2d:bf:02:fd:
         ef:0e:86:87:9e:5f:76:ed:77:13:ab:59:88:e8:81:cd:bf:62:
         11:b5:3e:22:7e:3c:31:3d:39:4d:2e:e0:a9:d6:8a:6f:2b:e7:
         16:5c:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:14 2025 by rpki-client