Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          QGbmVigNjutUEXJPMNAnZ3aiA7glGFMI9THzqH4EMZg=
Subject key identifier:   9C:BD:DD:5B:5F:C5:F4:D4:66:20:8B:F8:DB:98:2E:62:DD:40:F4:60
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       0199FC8F96FF21F838E7FBA0E01F6EBA9E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          0734
Signing time:             Sun 19 Oct 2025 13:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:32 +0000
Files and hashes:         1: 5XZJncXp7T3hCQRHkCBW2md8Uf4.roa (hash: 6z/vYzC9DEkIupIAEvIVTnWvgDDhq1Ndyu2N9VsrLA4=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: HLUra06vXM6qfZGWRGaBPr31rjjPrfKS/sPzEib7rL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:96:ff:21:f8:38:e7:fb:a0:e0:1f:6e:ba:9e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Oct 19 13:01:32 2025 GMT
            Not After : Oct 20 13:01:32 2025 GMT
        Subject: CN=9cbddd5b5fc5f4d466208bf8db982e62dd40f460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:02:cf:22:45:4f:65:c7:63:d9:25:c2:b8:
                    b3:31:d0:61:29:cd:e9:35:fe:e7:d7:0c:45:ce:18:
                    36:50:c8:73:27:f5:75:17:5b:64:8c:ba:68:fe:32:
                    f4:8e:e2:ba:65:ff:5b:d3:72:71:61:28:fd:9e:20:
                    60:0a:d2:58:69:d4:a8:42:de:5e:c9:b6:8e:31:df:
                    78:49:fa:47:34:94:91:98:f2:74:a5:58:02:11:31:
                    0d:e3:6c:e8:d5:61:08:0e:15:7a:ca:74:e2:7c:63:
                    5e:71:44:72:fa:a5:8c:f8:13:02:4f:55:7a:16:e3:
                    69:38:9c:62:48:6e:21:55:f4:29:fb:91:c3:07:92:
                    82:58:bf:4a:f3:32:17:cc:88:02:00:23:26:00:c5:
                    cd:a5:44:16:69:81:d8:c0:38:5f:d3:86:b1:97:72:
                    57:6e:e0:63:a3:5a:5b:ae:88:2e:a7:3a:5b:43:72:
                    59:eb:7e:a9:56:2f:84:86:c3:66:ad:06:32:2b:22:
                    0c:d3:c2:d8:0a:5f:47:d3:ca:63:eb:c4:23:d8:c6:
                    3c:a3:7e:93:cc:cf:c7:61:23:0a:93:a0:e3:e8:29:
                    a6:2a:f3:ae:7d:18:e2:f0:ed:49:c2:c3:30:6b:dd:
                    ae:55:dd:1f:61:78:84:38:98:a2:b7:93:74:54:66:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BD:DD:5B:5F:C5:F4:D4:66:20:8B:F8:DB:98:2E:62:DD:40:F4:60
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f9:dc:98:75:93:fa:9c:09:9c:8e:c0:5e:fa:4d:36:0b:0e:
         72:be:88:3f:df:6e:57:84:7b:db:10:76:65:5a:86:f8:40:86:
         b9:cb:47:88:f0:7f:b4:bd:d9:7e:7b:52:ee:a6:9b:a8:96:31:
         41:09:e8:63:9a:fc:c7:9c:69:5f:7e:11:17:8a:a8:4d:e7:48:
         ec:da:43:9a:da:a5:57:ec:59:6e:dc:55:b4:59:6d:4d:8a:cc:
         df:61:87:ba:8b:7f:78:3e:54:b0:16:36:55:51:4c:86:ef:43:
         7b:17:4a:96:25:a9:ac:cd:43:0b:51:ae:43:ab:2d:d9:9e:4c:
         a3:ac:e0:05:c2:1e:8e:37:9c:86:b5:26:e4:5a:23:34:f1:0a:
         5f:e1:63:c7:04:17:09:d6:6a:0f:5a:80:d4:6f:bc:ff:b6:6a:
         06:9f:3d:8d:5e:26:cf:d1:61:bc:22:97:30:02:65:48:e7:de:
         cc:4d:3f:e9:ab:5b:c2:0f:8d:92:8e:06:4e:f6:82:f9:bf:40:
         9b:c8:96:ec:ad:f5:bd:a2:95:14:ed:be:59:34:00:87:0b:ca:
         7e:51:4e:32:f8:9b:db:1e:89:bf:62:d6:74:40:5d:40:18:4f:
         e0:d3:8c:78:4f:1c:dd:40:3e:18:96:5f:46:35:86:56:4a:66:
         81:57:71:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5b/Ifg45/ug4B9uup4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMDU0ZmVjMjU1ZDBjZGM2YmEzYWJhOTZhYjI2MDM2NjMy
NzJkYjMwHhcNMjUxMDE5MTMwMTMyWhcNMjUxMDIwMTMwMTMyWjAzMTEwLwYDVQQD
Eyg5Y2JkZGQ1YjVmYzVmNGQ0NjYyMDhiZjhkYjk4MmU2MmRkNDBmNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT4CzyJFT2XHY9klwrizMdBhKc3p
Nf7n1wxFzhg2UMhzJ/V1F1tkjLpo/jL0juK6Zf9b03JxYSj9niBgCtJYadSoQt5e
ybaOMd94SfpHNJSRmPJ0pVgCETEN42zo1WEIDhV6ynTifGNecURy+qWM+BMCT1V6
FuNpOJxiSG4hVfQp+5HDB5KCWL9K8zIXzIgCACMmAMXNpUQWaYHYwDhf04axl3JX
buBjo1pbrogupzpbQ3JZ636pVi+EhsNmrQYyKyIM08LYCl9H08pj68Qj2MY8o36T
zM/HYSMKk6Dj6CmmKvOufRji8O1JwsMwa92uVd0fYXiEOJiit5N0VGa5SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJy93VtfxfTUZiCL+NuYLmLdQPRgMB8GA1UdIwQY
MBaAFJsFT+wlXQzca6OrqWqyYDZjJy2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzct
ZjgwYTQ4YWQwYTJjLzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83NjA1ZWMtNmYzNC00NTg5LTkyMzctZjgwYTQ4YWQwYTJj
LzEvbXdWUDdDVmRETnhybzZ1cGFySmdObU1uTGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPncmHWT
+pwJnI7AXvpNNgsOcr6IP99uV4R72xB2ZVqG+ECGuctHiPB/tL3ZfntS7qabqJYx
QQnoY5r8x5xpX34RF4qoTedI7NpDmtqlV+xZbtxVtFltTYrM32GHuot/eD5UsBY2
VVFMhu9DexdKliWprM1DC1GuQ6st2Z5Mo6zgBcIejjechrUm5FojNPEKX+FjxwQX
CdZqD1qA1G+8/7ZqBp89jV4mz9FhvCKXMAJlSOfezE0/6atbwg+Nko4GTvaC+b9A
m8iW7K31vaKVFO2+WTQAhwvKflFOMvib2x6Jv2LWdEBdQBhP4NOMeE8c3UA+GJZf
RjWGVkpmgVdx7A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:52 2025 by rpki-client