Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          b1khIApU3sHyP3+46CO2oFasGHG3g07as5qeq0yXSU0=
Subject key identifier:   87:C3:4F:63:4D:CD:50:A2:64:51:E5:A3:0D:2F:67:28:05:8C:14:C5
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       019A4DAA7FDBC94C864EBBF5C76C754D7B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          075E
Signing time:             Tue 04 Nov 2025 07:00:10 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:10 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:10 +0000
Files and hashes:         1: 5XZJncXp7T3hCQRHkCBW2md8Uf4.roa (hash: 6z/vYzC9DEkIupIAEvIVTnWvgDDhq1Ndyu2N9VsrLA4=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: 3vbeWuuyv1haYj7NXkcHOTdqcH5HPR4u1EInh2FDeDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:7f:db:c9:4c:86:4e:bb:f5:c7:6c:75:4d:7b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Nov  4 07:00:10 2025 GMT
            Not After : Nov  5 07:00:10 2025 GMT
        Subject: CN=87c34f634dcd50a26451e5a30d2f6728058c14c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:d2:41:81:f5:e6:2c:9e:6a:28:c5:dd:bb:
                    07:c6:1b:63:9a:5e:d1:0f:43:e2:07:c7:b4:80:98:
                    15:aa:a7:65:ca:df:80:36:e0:db:32:b7:3a:e5:97:
                    65:a5:b0:c6:71:06:a3:b3:c2:ac:26:59:87:4d:77:
                    6a:63:84:2b:13:66:a9:84:15:c6:ae:71:95:f1:c1:
                    fb:6a:3e:2b:e5:57:41:99:4a:fb:66:53:69:98:3a:
                    d5:ab:a2:ce:e0:da:9d:6d:b7:5a:fc:ba:c9:1e:9c:
                    34:7a:58:c0:d8:e5:5d:d0:2f:cd:32:be:bc:57:7e:
                    9b:5f:00:5a:a6:18:d2:1a:20:1c:f6:94:98:33:93:
                    99:f5:b8:c4:e9:bd:f8:b3:23:a8:bf:4a:25:65:83:
                    90:d7:04:ca:a4:e9:70:d0:74:64:6c:85:c2:0c:de:
                    b4:05:0e:ea:38:04:48:85:9f:33:02:22:5c:a3:37:
                    a8:e1:be:d2:91:7c:8b:e3:f6:e2:08:a3:31:c0:b2:
                    a7:4d:c6:ac:2d:d5:57:68:99:c9:99:ce:a6:77:8d:
                    8c:6d:7a:4a:08:3c:33:4d:81:b5:c7:a8:1c:09:0b:
                    de:0c:94:af:24:23:7b:64:ec:1a:e8:3b:43:a3:6b:
                    d2:a0:74:c3:cb:35:e7:ca:a0:3f:68:60:99:95:09:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C3:4F:63:4D:CD:50:A2:64:51:E5:A3:0D:2F:67:28:05:8C:14:C5
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:c9:9a:6e:7d:ad:a7:7f:9c:42:60:29:38:3c:13:c3:48:
         8f:17:8a:b0:27:fc:fc:bd:71:17:5d:6f:b3:f2:22:42:9b:09:
         a0:72:12:43:da:50:cc:17:e8:46:6e:64:08:0e:88:e9:8e:50:
         26:df:f2:39:9f:13:90:29:75:c8:42:02:8a:06:92:32:32:f6:
         63:96:8b:44:69:2e:58:53:8b:a9:ef:45:69:d9:6e:d2:9f:0a:
         e8:68:25:63:5f:51:e3:b1:a8:5e:3f:0c:e0:b4:0d:96:ea:02:
         2c:18:84:5a:c3:7d:e9:3e:25:55:c0:74:c0:71:12:43:4b:4e:
         94:7e:9b:1d:0c:d9:dd:5b:fe:a0:6f:95:16:73:c6:fb:05:47:
         94:3c:65:60:4e:b4:31:60:26:30:4a:ee:fc:d9:43:ac:82:3d:
         c1:0d:de:cf:bb:4c:4e:01:bd:06:e9:c1:be:f8:0f:2c:fb:c7:
         c5:4b:33:a3:63:bb:e7:d9:32:7f:d6:c8:1f:89:81:26:29:35:
         11:55:70:a7:af:60:27:af:4c:4f:6f:8b:58:7f:a3:6d:79:f3:
         e5:96:95:37:1e:8b:a2:2a:f2:70:15:a9:f1:70:2c:f0:78:22:
         ef:fc:ed:ba:6e:dd:0b:c8:1b:21:3e:ae:37:30:18:78:64:d8:
         94:7f:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:33 2025 by rpki-client