Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File:                     MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier:          V9wqexwmntaQWVnNuwBaZUGZDAGuUsAZT/mLuWXMzaM=
Subject key identifier:   46:41:6A:CD:61:09:1F:0B:B8:CC:BF:1D:F9:A2:5B:42:DB:A1:96:11
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer:       /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial:       0199FC213EEFC072D78186A89ED8B821E380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number:          1431
Signing time:             Sun 19 Oct 2025 11:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:01 +0000
Files and hashes:         1: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: U2XmxhPPdOuqxlOVpnMAhoDy4nubW4Mtw1hmaAFERgg=)
                          2: kZhmU11AcLMU9j0H5R4zLY4tMkU.roa (hash: 4zjf1YfmBA/3a2ksRPti6rOa+1AdjV5zlhfDUSPHUS4=)
                          3: macgBtbCg5Mxhslrz0OHJiQKlew.roa (hash: GBS8E51Gp7YKQrT0Z2MAz5xnX4MGpebSlxO7yoAgVFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:3e:ef:c0:72:d7:81:86:a8:9e:d8:b8:21:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
        Validity
            Not Before: Oct 19 11:01:01 2025 GMT
            Not After : Oct 20 11:01:01 2025 GMT
        Subject: CN=46416acd61091f0bb8ccbf1df9a25b42dba19611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ac:fc:79:70:1f:af:45:bb:86:04:30:f3:a7:
                    2e:6b:83:32:8b:a7:68:d1:76:d1:5d:90:f3:b6:3d:
                    97:be:48:cc:bc:08:16:95:f1:42:5d:79:d3:14:78:
                    c7:72:f4:39:2a:be:c3:97:f8:d0:32:51:c3:87:f4:
                    cf:d3:73:51:48:27:8c:4d:92:18:ee:dd:be:94:43:
                    69:c9:a0:3f:65:1f:16:da:0f:b6:ce:5d:6e:95:5f:
                    2c:08:f3:e1:e3:1c:7f:52:3b:22:d8:e7:e3:27:a9:
                    c0:1f:c3:a3:50:50:ae:71:45:a4:28:c4:68:15:d1:
                    5b:4b:d4:33:13:e8:e1:a0:d8:f1:5f:24:64:20:3c:
                    bf:b0:f9:d1:75:a3:90:df:c6:78:9b:6c:1c:ea:f5:
                    5d:0b:80:0d:1f:30:24:f0:c7:5c:9f:07:f6:35:bc:
                    58:68:97:79:c5:a2:59:2f:1d:ee:4e:2a:8f:3b:78:
                    7e:8d:45:fe:1a:8a:c2:b0:03:bc:61:38:7d:e5:06:
                    96:69:b2:24:19:d7:7e:43:52:4d:f1:25:a4:cf:55:
                    60:55:76:c0:4b:62:35:ec:9f:64:51:b9:a8:b9:ef:
                    d1:b9:1c:15:cd:56:f9:4d:b6:01:66:9c:23:67:d8:
                    77:1e:c2:da:e0:eb:56:54:42:ba:06:0d:2f:7c:6d:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:41:6A:CD:61:09:1F:0B:B8:CC:BF:1D:F9:A2:5B:42:DB:A1:96:11
            X509v3 Authority Key Identifier:
                keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:30:b9:6d:4c:0b:62:96:ae:16:c4:29:0f:64:1b:55:ba:
         49:45:62:6b:f1:92:46:33:a4:3f:af:eb:65:6b:00:68:db:d8:
         88:e9:82:69:c7:11:bf:33:25:0c:94:64:89:71:b5:30:25:9a:
         d7:6e:f5:59:d6:4b:fc:59:a2:3c:e0:e7:f1:05:4f:cc:b6:7a:
         65:b5:a2:e9:0d:65:24:ea:99:82:b0:e6:42:dc:fc:bc:d6:da:
         e4:10:58:bf:81:73:06:f3:54:5d:1f:f5:f2:f0:33:6b:72:90:
         44:48:0e:4b:44:3c:22:5e:7d:88:d2:87:43:64:1b:ad:1d:15:
         77:20:55:45:da:82:c4:45:da:60:7d:7c:76:07:60:a7:e6:35:
         04:cd:3f:c8:e7:74:fa:12:3f:65:d3:fd:e4:1c:8a:9b:a1:c1:
         61:87:3c:45:70:df:90:0c:c5:ab:c8:8e:a1:2c:cb:1f:87:91:
         60:c1:db:12:55:4b:7a:4d:e1:b5:59:05:ba:9e:74:fe:bb:09:
         2e:72:f4:2c:29:86:59:6f:42:36:ec:4d:91:6c:0a:2a:81:37:
         29:7d:f3:5c:b1:8f:ac:c3:2f:1d:70:af:fa:c6:a1:be:95:f3:
         b4:d1:9e:56:31:8f:fb:2a:ad:28:82:ba:25:16:ed:e9:58:14:
         36:37:d9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:24 2025 by rpki-client