Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
File:                     MwY72VuJG_MxFVfITf6H7PQrGQY.mft (raw, json)
Hash identifier:          NJzKYL8vbg0FcKWsOU7OvxDxguCEmBIj9XHCaYpZKU0=
Subject key identifier:   5F:53:72:22:54:69:90:89:3A:73:B6:E9:F6:5D:76:02:AF:7D:04:46
Authority key identifier: 33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06
Certificate issuer:       /CN=33063bd95b891bf3311557c84dfe87ecf42b1906
Certificate serial:       0198D583897D887994DC5BB47C0DE960BD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
Manifest number:          024C
Signing time:             Sat 23 Aug 2025 06:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:23 +0000
Files and hashes:         1: MwY72VuJG_MxFVfITf6H7PQrGQY.crl (hash: e2Y4mEhPZr88YGWhdkllGPk8g+Tg+Qplk8Oh5LU+M8Y=)
                          2: z1aTRBewSJhzUfWWJD41OIsIBo0.roa (hash: qD0OIe2RSaDdKkAmPZcT/wnJhlY0jqIIohwD44CcvP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:89:7d:88:79:94:dc:5b:b4:7c:0d:e9:60:bd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33063bd95b891bf3311557c84dfe87ecf42b1906
        Validity
            Not Before: Aug 23 06:00:23 2025 GMT
            Not After : Aug 24 06:00:23 2025 GMT
        Subject: CN=5f537222546990893a73b6e9f65d7602af7d0446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7e:73:a5:0b:dc:39:8a:11:ad:ae:39:ec:bd:
                    21:c0:7a:eb:da:b0:67:b9:10:2f:b2:3e:80:73:5c:
                    ab:69:d3:52:9a:1a:03:a5:8d:da:35:56:25:b5:34:
                    c9:39:9a:be:f8:74:b2:28:b2:c0:ff:89:ec:85:0a:
                    18:77:ca:c7:f6:da:69:a0:7b:21:28:37:e0:c8:0e:
                    95:30:dd:0d:e7:51:62:8d:df:1e:49:a0:40:1d:f8:
                    8e:9e:96:6c:c1:d9:9c:73:15:a8:5d:d8:26:d7:e9:
                    af:a2:63:ce:f1:55:c2:1d:a0:15:bc:d6:0f:02:ca:
                    dc:4f:6d:a3:bb:5b:88:55:f4:05:04:7b:d3:5c:6d:
                    c8:38:a1:47:76:6a:76:58:c8:f7:99:b2:8a:ae:60:
                    24:34:7e:70:36:85:24:d4:8a:aa:f0:e7:cb:82:d7:
                    af:6d:3a:02:01:e4:dd:1a:ed:4f:58:24:17:e5:f0:
                    90:af:73:66:a5:7e:50:67:75:af:07:46:3f:4c:f8:
                    af:cc:c2:93:6b:32:76:4d:83:6d:82:d1:ac:d0:4e:
                    63:5c:3c:8a:c9:97:fb:6d:4d:fb:01:47:5d:ae:8a:
                    75:bc:b0:1d:1a:2b:2e:51:34:33:6f:ff:8e:19:4e:
                    a9:84:92:e2:e3:c3:77:9e:a1:7d:8c:5a:3b:04:2a:
                    62:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:72:22:54:69:90:89:3A:73:B6:E9:F6:5D:76:02:AF:7D:04:46
            X509v3 Authority Key Identifier:
                keyid:33:06:3B:D9:5B:89:1B:F3:31:15:57:C8:4D:FE:87:EC:F4:2B:19:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwY72VuJG_MxFVfITf6H7PQrGQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c954a-ac3f-4860-8cf4-d99ba44db595/1/MwY72VuJG_MxFVfITf6H7PQrGQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:50:a4:d3:39:33:c9:ad:eb:a5:da:54:71:3e:ce:e4:9c:42:
         fc:e4:88:59:fc:d2:4c:84:30:1c:09:01:6f:c2:6d:49:0d:17:
         31:b9:bd:b1:ad:d6:a4:5b:8e:77:05:01:18:9e:d9:96:8c:ec:
         72:be:24:df:18:25:04:9d:69:2a:d6:8b:73:ec:8e:64:15:16:
         ad:21:98:7b:a0:d9:d5:66:8e:89:97:44:f5:85:8a:db:5d:be:
         f3:2d:0f:f3:e2:84:05:ea:75:e2:59:25:33:1b:d3:6f:fa:e8:
         58:96:86:33:7f:99:48:99:67:8c:97:99:c8:9f:6e:0a:cd:45:
         e3:e4:ce:28:af:7d:a8:a5:43:88:44:af:c9:48:67:eb:7e:51:
         7d:6f:cf:1e:1c:3e:61:f4:50:fb:3e:06:fc:05:d0:54:60:3e:
         33:27:b5:12:55:6a:14:cb:a4:d9:66:50:db:db:bb:a0:6f:31:
         71:a4:50:a6:24:3c:43:5d:4d:14:09:46:f0:1f:66:06:be:b6:
         7e:b3:b3:1f:9e:2c:8d:2c:a0:93:51:8c:cb:dd:7b:bf:e8:43:
         00:df:f7:6a:24:f3:9c:68:29:cf:cd:24:e5:f3:6b:40:b5:c4:
         82:36:45:5e:49:87:c8:69:97:fe:74:8c:70:0f:3f:0d:4d:64:
         04:38:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:42 2025 by rpki-client