Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
File:                     mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft (raw, json)
Hash identifier:          RoSkGOG643Py6QojrogWFlPtQe/UGfOzhp1M6ydpusM=
Subject key identifier:   73:29:19:37:F0:96:D4:6D:38:8F:A3:3D:F6:31:AD:C3:D5:66:B7:DB
Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10
Certificate issuer:       /CN=9af9d0d4befda09e999eabd0c8724e217364de10
Certificate serial:       0197C61407339E8C07976650C9A4BB991F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
Manifest number:          071A
Signing time:             Tue 01 Jul 2025 13:01:30 +0000
Manifest this update:     Tue 01 Jul 2025 13:01:30 +0000
Manifest next update:     Wed 02 Jul 2025 13:01:30 +0000
Files and hashes:         1: 19FcmSsxW-HAmGMu8vNic8GlPVQ.roa (hash: A/x/ATh8VjymksFnyMMUZUGv4QdGRlkBRngH5oIt50M=)
                          2: 6-NzyccAUUtINjY98ZwTPTgTOqw.roa (hash: VRIswTWRK8wp1kBAJ6oGriHopkql4l7787Pjx0zb2Uk=)
                          3: Olq79L64wCg-hHRooByi3vPZULM.roa (hash: 7iTlVlX50RF0+9QmCG7iYPxhRnhcj6E2kkA6pnlrhOE=)
                          4: d-6oHxGBu3uoNsynUGQ-jykLpuY.roa (hash: nTvRGLOiSbzDI5kbpr4PxXlAAgieGj6+zvY9qnISFeU=)
                          5: m7d5O-mEzrcubvS3JW6tnbVNKd4.roa (hash: Qq9s73nF/u8j1iRoR74NKiqmiIz0zgUdTQSpGdm7mb4=)
                          6: mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl (hash: s3cNu6EbVbyDE+MgouXYOVI0QSZEdETYIKdL2FKQik8=)
                          7: pEGoyKkyL_yswV2yTe6-Nn5a4EE.roa (hash: BRmqr+fKFFdKHRHLRNEIxp96b16KAoY3BPtxfqv5huI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:14:07:33:9e:8c:07:97:66:50:c9:a4:bb:99:1f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10
        Validity
            Not Before: Jul  1 13:01:30 2025 GMT
            Not After : Jul  2 13:01:30 2025 GMT
        Subject: CN=73291937f096d46d388fa33df631adc3d566b7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:44:4a:9f:73:e0:3f:de:d3:57:7c:1d:d6:
                    44:86:28:a0:60:a8:5d:c9:af:27:24:eb:21:6a:10:
                    fd:57:b2:c8:07:85:f3:f4:96:c0:2e:8a:8d:2f:f7:
                    ba:8b:49:95:81:54:7d:b5:99:18:99:fe:40:f1:b5:
                    5a:33:1b:d6:0a:bd:d4:f6:e5:8c:80:1c:40:2b:ee:
                    3f:88:03:ce:ec:9c:82:dc:0c:4a:76:ef:d6:40:c9:
                    9e:d0:e1:78:23:d9:34:fa:6d:a9:60:2c:f1:de:01:
                    bd:ba:09:ba:51:a2:f7:f2:0e:a8:3f:73:69:27:6b:
                    f9:3a:d7:4b:ae:3f:38:cb:f7:61:ee:bd:3d:42:89:
                    94:90:72:91:1b:aa:de:5b:a9:73:f6:8f:90:c8:c5:
                    7a:f2:ac:52:85:60:37:c7:34:5f:cc:a6:72:ce:46:
                    69:32:f4:cd:b4:54:b8:f1:1c:3d:43:32:17:0a:95:
                    b4:0f:2b:0b:4c:72:15:22:03:f1:78:79:51:cf:b8:
                    2d:5c:20:5e:54:f9:78:2e:b2:f9:52:9c:10:6b:36:
                    e8:3d:13:31:2c:b2:cf:51:a5:a6:f7:3e:6e:1b:78:
                    8e:f5:20:3e:7f:c2:4a:c4:72:27:3c:d7:e2:8d:f9:
                    ce:ff:fe:26:09:48:96:09:64:08:a0:9f:3f:f1:50:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:29:19:37:F0:96:D4:6D:38:8F:A3:3D:F6:31:AD:C3:D5:66:B7:DB
            X509v3 Authority Key Identifier:
                keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6e:03:e5:9d:de:12:8c:69:32:0c:0f:9a:48:b9:ff:3c:71:
         69:33:22:d7:97:46:7b:03:43:b7:be:5d:c2:64:21:24:f2:87:
         85:52:99:17:73:5b:04:34:b8:32:c3:58:e7:8e:6c:f0:30:1b:
         72:bc:05:97:72:ba:75:3f:e2:ea:fd:73:d8:9d:a4:4b:07:1e:
         96:86:6d:b2:66:79:f9:84:11:6b:de:64:f8:91:21:d7:cb:bb:
         f6:0a:6c:c8:43:41:a3:ce:b8:01:b4:3d:bd:2b:39:f0:f7:07:
         8d:72:43:5f:70:62:49:29:6c:29:82:bb:d0:a3:e8:d8:76:81:
         51:d6:5f:ad:db:1c:45:aa:e0:53:f8:de:1b:bb:75:0b:a3:bc:
         ed:7d:4d:e7:c5:bd:09:e8:f2:d6:1f:f2:57:5c:87:49:38:23:
         a7:ac:a3:e5:f9:8d:db:b8:9d:56:a5:6e:fa:63:bd:2f:5c:d6:
         a5:bc:5b:63:0d:f9:bb:d1:13:d9:3b:bc:bc:5e:ff:af:97:1e:
         38:6e:0c:89:bc:a0:6e:da:71:33:90:d0:44:46:bf:46:fd:84:
         71:fa:7a:9d:16:30:d4:36:40:c3:63:24:f8:74:ea:b7:b4:f0:
         b9:ab:e4:14:47:6e:09:4b:20:92:7c:d3:ca:b5:95:3e:52:42:
         68:86:74:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:09:51 2025 by rpki-client