Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
File:                     MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft (raw, json)
Hash identifier:          5KtZtiv9nSxdetIGATB7vyL4vkotVlTDskdAIvRDxZI=
Subject key identifier:   73:03:8C:25:2B:CF:AA:E0:24:B7:A1:2E:98:9E:24:C5:01:A8:D2:AB
Authority key identifier: 31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59
Certificate issuer:       /CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
Certificate serial:       0199FD33ED0A7FEA04CDBE4EE94705D8FFBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
Manifest number:          0937
Signing time:             Sun 19 Oct 2025 16:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:02 +0000
Files and hashes:         1: MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl (hash: TKe3EoZaZmM1q8H+LylvnVtlg2Lu7Fbpgzp1944fkME=)
                          2: mThuVq__AdJ8m0fUEig5mExB-MI.roa (hash: uwNlHWqFKBBy+qRVS5eJabxoyu+NHhSLJrsP7OWfbIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:ed:0a:7f:ea:04:cd:be:4e:e9:47:05:d8:ff:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183efc52dd5d2d4f7e0c45d22c9c29f1dce8e59
        Validity
            Not Before: Oct 19 16:01:02 2025 GMT
            Not After : Oct 20 16:01:02 2025 GMT
        Subject: CN=73038c252bcfaae024b7a12e989e24c501a8d2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:05:9a:49:78:e2:49:96:d5:b0:5b:ce:7e:
                    1b:82:dc:0a:60:f8:7f:64:ec:58:25:b2:aa:76:0b:
                    c8:b2:0c:4a:00:71:b2:2e:d6:72:ec:28:9c:fb:be:
                    15:5d:36:1b:44:8b:cf:57:c1:0b:7d:f7:22:3b:41:
                    60:18:ef:5a:7a:79:fd:e6:d3:31:51:8c:04:0f:1f:
                    01:4d:af:c0:02:0e:0f:06:9c:60:cc:f0:d4:08:d5:
                    b6:26:ea:b9:8b:5e:36:26:1b:61:5f:3d:4d:a4:84:
                    c9:86:a9:c0:e3:20:87:41:5e:bb:d6:3e:7f:b6:5a:
                    05:3e:34:43:c0:fd:f0:99:af:65:10:e2:60:bb:28:
                    f4:05:27:fb:8f:17:ee:ae:a3:db:bb:ea:ac:52:24:
                    e6:1c:07:b4:3d:51:f4:b8:cc:aa:50:c9:73:90:2e:
                    b4:14:c0:d1:49:cd:15:c9:5a:7e:01:8a:a4:9d:15:
                    8c:f8:31:95:3d:15:de:e5:b9:60:08:2d:d4:26:ed:
                    29:b7:55:c5:b7:4c:96:b2:c2:97:24:ae:8b:c6:28:
                    75:15:7a:45:b7:c8:97:40:f4:19:90:52:d8:dd:04:
                    cd:c9:9f:18:4e:f2:3b:c8:cf:8e:96:72:d1:ae:a6:
                    14:5b:d5:b3:c3:9c:91:6f:91:50:63:36:6b:48:b0:
                    81:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:03:8C:25:2B:CF:AA:E0:24:B7:A1:2E:98:9E:24:C5:01:A8:D2:AB
            X509v3 Authority Key Identifier:
                keyid:31:83:EF:C5:2D:D5:D2:D4:F7:E0:C4:5D:22:C9:C2:9F:1D:CE:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYPvxS3V0tT34MRdIsnCnx3Ojlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7bac71-994e-4d47-bcfe-f8f3f0401cc3/1/MYPvxS3V0tT34MRdIsnCnx3Ojlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:77:54:d7:d7:11:75:90:be:92:6f:ea:f5:23:cf:92:23:72:
         7f:d7:8c:9e:aa:7f:ef:58:d4:d7:a1:89:bf:50:cc:10:7a:95:
         6a:8f:7b:6b:22:a0:bd:e5:25:c0:01:11:6b:b5:e1:31:06:58:
         29:a9:79:bb:dc:d2:77:1d:9e:27:4b:e1:6b:47:83:5f:8c:0a:
         e9:be:8b:0f:2f:7a:26:05:6f:fe:e7:ee:9f:92:5b:92:40:ea:
         83:ad:11:73:1a:6d:45:2f:2a:6d:53:25:5a:fa:dd:10:7f:90:
         17:98:c2:17:1a:b7:5b:e9:4c:0d:83:e9:84:fe:51:30:66:2f:
         95:63:4d:3a:d9:42:61:9b:9d:a4:db:26:61:b7:b1:b3:6c:1b:
         e0:e6:6d:45:d5:47:aa:bb:93:ba:af:03:55:cf:33:2c:c4:0f:
         d8:0b:37:a7:45:fd:0d:a0:ea:df:b4:94:d3:9b:6d:04:59:79:
         e5:08:aa:da:e2:f7:43:30:be:7a:6d:1b:bc:7c:98:3f:af:5a:
         af:1c:89:8f:a6:bc:92:35:2c:92:4a:c4:12:d6:43:3e:64:89:
         14:0c:9c:95:8b:5b:37:16:9b:55:3d:b9:fc:08:86:43:8d:8b:
         04:4e:6c:2b:d7:d5:c6:37:4e:f5:33:f6:86:4a:bd:0f:16:bf:
         4b:34:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:09 2025 by rpki-client