Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File:                     mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier:          78uxxxvKDzRrRh1X1/rGSdyYXwlqMOgZkxDJqK1kE18=
Subject key identifier:   7E:41:05:7F:08:B5:5E:87:EF:00:9A:E1:F0:E7:86:05:2C:1C:BF:CF
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer:       /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial:       0198816823D5457D3CD3AA07919563DCBE9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number:          074E
Signing time:             Wed 06 Aug 2025 22:02:22 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:22 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:22 +0000
Files and hashes:         1: Keu4ORQGNbpvqRyHyCkLTUO_lOA.roa (hash: 8AaJ0cxF0N1CmP6IwiLLt/ItfrvG5f97UQsDx1F7lhM=)
                          2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: 9/7ms1kY0pG4Q2TocMlm0YZGInsv9OVN0mcb8cN4U4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:23:d5:45:7d:3c:d3:aa:07:91:95:63:dc:be:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
        Validity
            Not Before: Aug  6 22:02:22 2025 GMT
            Not After : Aug  7 22:02:22 2025 GMT
        Subject: CN=7e41057f08b55e87ef009ae1f0e786052c1cbfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:94:d5:5b:32:3b:90:a8:92:b2:7a:b5:24:
                    00:5f:17:73:d5:b6:1d:0f:56:61:4b:52:63:8f:b4:
                    3a:b0:81:e6:0c:be:9d:98:c4:61:75:31:9b:3d:8a:
                    3c:15:c5:f5:46:fd:24:84:3f:fa:54:12:fb:a6:1c:
                    24:19:38:30:b2:f3:fa:bd:6b:82:d5:34:a3:dd:ae:
                    53:4e:12:2e:14:15:58:0f:fe:55:30:e4:02:33:86:
                    94:dc:57:42:df:3c:ed:05:a3:d4:c3:65:8e:23:65:
                    06:91:54:e0:00:ac:ce:99:52:5d:f7:62:6f:37:04:
                    be:c2:86:55:fc:66:10:12:7e:ef:4f:6a:e3:3d:dc:
                    f6:88:8d:62:89:6b:fc:1d:63:37:f2:07:4f:14:57:
                    16:d6:a9:79:10:cb:c4:88:55:c5:27:30:15:96:05:
                    6b:d4:76:a7:8f:6a:55:64:a7:e3:64:8a:ad:1c:f6:
                    b9:a0:e3:6c:f5:e4:5d:0a:05:31:68:75:fc:3d:9d:
                    8b:d3:28:a0:93:7f:36:c3:f7:6f:90:a5:00:40:c9:
                    f4:b9:45:f2:76:1f:65:f7:79:7b:c4:e3:a0:4e:f1:
                    7f:0c:4f:ab:2a:78:79:d1:bc:5c:45:61:45:24:03:
                    ac:26:f3:4c:4a:d1:cb:df:ad:fb:bd:ab:5a:bb:b8:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:41:05:7F:08:B5:5E:87:EF:00:9A:E1:F0:E7:86:05:2C:1C:BF:CF
            X509v3 Authority Key Identifier:
                keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9e:84:bb:35:a8:d3:99:99:4e:de:e0:de:5d:fd:5b:d5:5a:
         27:ff:f1:37:24:d9:4b:06:cf:0a:e9:81:99:7c:2e:63:e3:f5:
         43:86:80:20:86:82:57:ca:07:cf:c3:29:d4:b5:d9:d0:12:43:
         51:9f:ae:14:23:31:c5:2a:18:37:4e:1d:d7:b8:2f:1b:d6:21:
         05:1d:5b:ea:e6:0e:76:94:3a:de:d8:df:31:93:62:2b:b3:21:
         1c:bf:85:aa:8f:36:e8:07:2c:7c:ce:dd:df:15:1c:d5:13:72:
         4a:e0:65:0b:fa:bd:5a:3d:f4:de:e1:74:78:27:5f:43:56:7d:
         8d:e8:00:f8:9c:1b:e9:de:f5:39:c8:6e:60:d1:1d:7e:ed:72:
         be:ba:10:0d:be:86:77:d4:3f:99:50:a0:1b:87:1c:ce:0e:af:
         35:2a:f6:f4:6f:18:68:53:16:1e:a5:01:d9:3a:a0:18:41:8f:
         46:74:6a:08:e7:b1:fa:5d:b8:80:ea:29:57:d5:3e:e2:59:df:
         1d:61:42:b5:a4:b2:ef:80:a7:86:a2:5f:4e:b3:46:b1:d6:94:
         83:b9:ff:7b:0d:05:f7:e6:13:60:cf:b3:4f:37:3b:42:fc:56:
         90:b1:26:4f:68:e9:46:b8:79:d2:13:9f:0f:90:ae:bc:c4:fb:
         0d:69:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:50 2025 by rpki-client