Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          uchulgIU4Bzmk+np5yPBJ72NcZMZDys6VAin709sJfI=
Subject key identifier:   E8:67:59:D2:FC:49:99:B1:A2:45:10:F2:6F:43:EF:64:C6:C6:2E:62
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       01987D8A6830387BD1DA23731D0BFAE3C644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          1438
Signing time:             Wed 06 Aug 2025 04:01:19 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:19 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:19 +0000
Files and hashes:         1: G3bPtDx0TvVdf4ayVJDtbWUroio.roa (hash: 0QDqlFsV7bJD4enXREu7nHOgEbbLdZBSnVYjPXImw60=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: FlSBO2Jfg9wpTyy9jrr5XXLLqB7SzGpzn1St46yQTss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:68:30:38:7b:d1:da:23:73:1d:0b:fa:e3:c6:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Aug  6 04:01:19 2025 GMT
            Not After : Aug  7 04:01:19 2025 GMT
        Subject: CN=e86759d2fc4999b1a24510f26f43ef64c6c62e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:9d:06:4d:cd:b3:aa:16:cd:35:a5:40:fc:
                    c1:f1:d5:e0:c0:1b:87:be:87:f3:c6:ca:e9:e1:82:
                    20:db:8b:48:04:bc:07:72:6e:ab:76:70:01:d3:0f:
                    d4:c9:db:6d:40:b8:f1:a3:7e:d3:6d:fe:24:c4:a8:
                    60:e3:cb:b1:c5:7e:9b:76:fb:61:aa:3c:97:14:79:
                    0b:26:37:d2:b7:9d:d4:79:fa:b0:0b:99:28:4a:43:
                    c8:5f:aa:61:ca:e7:fe:59:ab:0b:f6:f3:81:d0:09:
                    41:76:49:69:3c:57:3e:b9:b4:d4:fe:c2:81:33:c7:
                    da:b2:41:da:fb:91:c4:7d:78:5a:64:51:de:ab:52:
                    16:5e:e9:50:ce:a7:39:5c:66:59:08:4a:32:8c:8d:
                    28:e4:f4:d4:1c:cd:e9:21:3c:7c:6f:8c:48:40:9d:
                    6d:e2:b6:54:1b:06:cf:c4:56:c1:28:b7:88:7f:64:
                    2f:7e:a9:ab:86:cf:b0:5c:1a:ac:f8:cd:8d:85:09:
                    3b:17:61:66:a3:c1:23:a3:8d:32:e6:ac:7b:63:92:
                    c6:cf:28:97:f3:d5:b7:27:fd:1e:9c:8e:0a:ba:37:
                    50:ae:45:7d:74:28:1e:d6:8e:07:70:ff:09:56:82:
                    35:11:ca:c6:88:9b:1f:72:65:7e:15:2a:e3:03:76:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:67:59:D2:FC:49:99:B1:A2:45:10:F2:6F:43:EF:64:C6:C6:2E:62
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:75:f3:ba:e5:be:20:b4:21:ac:de:b5:48:7d:d1:54:f2:f7:
         2e:07:d7:43:44:94:47:9c:2d:68:65:98:11:ed:7e:ac:47:7c:
         92:50:fa:bb:6e:4d:72:79:ed:82:84:7c:2f:c0:54:44:8f:cf:
         8b:60:03:da:a9:32:47:ee:ea:34:39:93:04:7d:dd:17:be:17:
         32:bd:1c:50:82:cb:66:5c:85:b6:51:e4:79:0f:ac:00:81:62:
         59:9b:ab:e4:d8:57:8e:d9:ee:a7:1e:af:9c:a8:94:3b:c5:8e:
         c4:9c:17:95:83:b0:70:7f:9a:ec:0d:11:d1:be:8f:85:7c:b7:
         60:8d:ed:d0:15:34:5c:65:f9:61:b0:47:f6:1a:03:8a:15:27:
         07:35:a6:6c:51:02:7b:fd:15:21:4f:4b:c1:ae:50:bd:f3:41:
         e8:95:c7:90:9a:e6:b8:f0:ef:2a:34:2c:8e:06:67:7b:37:1b:
         cf:cc:da:8c:85:95:5c:d2:1f:ca:a5:11:51:ca:07:93:88:ac:
         df:c2:c3:72:bb:eb:16:ff:47:9c:41:dd:01:4b:0d:bf:d1:d8:
         0f:41:a2:04:a4:a8:1a:fd:63:24:55:38:5f:46:03:20:f3:5f:
         2b:67:a4:dd:4a:71:66:71:46:54:31:e7:93:20:be:4f:01:41:
         5a:84:c5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:43 2025 by rpki-client