Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File:                     wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier:          xpJLUv44R9t701AFuTBqZ8n7nQBQcA6aL+oGNlA1SKM=
Subject key identifier:   04:93:66:3D:2A:E5:AB:95:71:CA:8B:A2:4B:85:F6:49:B4:F5:11:C8
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer:       /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial:       0198D6610EC6E23A66D001633B1DEE9307FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number:          0D2C
Signing time:             Sat 23 Aug 2025 10:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:21 +0000
Files and hashes:         1: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (hash: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=)
                          2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: qGzXEnZaIv13j31ua1sfP1FJxLBoJzsQl7UPjj/fdk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:0e:c6:e2:3a:66:d0:01:63:3b:1d:ee:93:07:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
        Validity
            Not Before: Aug 23 10:02:21 2025 GMT
            Not After : Aug 24 10:02:21 2025 GMT
        Subject: CN=0493663d2ae5ab9571ca8ba24b85f649b4f511c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:65:bb:29:b8:52:46:47:6a:99:78:32:0a:
                    a8:34:11:69:82:70:21:9c:6a:1a:89:b4:00:23:5c:
                    8a:de:fc:4b:98:2f:e8:8d:7f:75:35:03:71:30:30:
                    82:67:15:b1:63:e4:a8:a1:ba:42:4f:92:b0:2d:00:
                    ad:4c:bb:4f:87:de:fa:63:9c:da:03:13:e9:26:97:
                    19:a8:4e:2b:d0:88:91:dc:cc:36:6c:e4:ed:da:b6:
                    0d:30:58:01:5f:b0:4e:cb:a0:ae:11:71:d9:8e:9f:
                    ee:32:6b:ca:a7:4d:31:b5:d3:5e:18:ce:68:09:8c:
                    f1:d3:5a:83:58:d6:24:98:05:19:74:cf:53:eb:14:
                    56:3f:71:5f:ea:cb:1c:8e:1d:9b:69:cf:ba:06:46:
                    3e:55:bf:2a:e1:d0:a4:de:6b:6b:9c:aa:ce:87:cb:
                    13:8e:82:9f:45:64:34:21:bc:61:1f:0a:31:16:7a:
                    72:bb:07:2e:03:fd:b6:3f:49:fa:09:fe:e6:fb:fd:
                    b7:fc:3e:ee:e1:d5:1b:f3:6d:a9:0c:1e:cc:c5:51:
                    2b:58:af:ce:22:48:e5:4f:58:49:4a:b1:0d:d5:2c:
                    41:5b:67:d7:32:1c:0f:9f:93:62:c2:3a:45:a6:55:
                    6b:eb:7c:87:39:65:54:98:34:19:ee:0c:f2:6b:4d:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:93:66:3D:2A:E5:AB:95:71:CA:8B:A2:4B:85:F6:49:B4:F5:11:C8
            X509v3 Authority Key Identifier:
                keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:89:2a:82:1e:3b:8a:5a:26:d8:c6:1e:2b:6b:43:6e:78:fd:
         ae:c6:10:fd:51:c8:8d:f5:29:03:d6:60:fd:d7:4d:24:c3:7c:
         18:2f:f4:fe:7d:8d:99:05:06:45:5f:4a:a9:23:77:ba:3c:5b:
         fc:be:1c:ce:8a:15:3c:d6:6a:20:8d:52:8e:9b:89:c4:a9:26:
         71:b2:86:58:2b:78:27:7f:0e:70:8c:f0:1b:7e:7a:42:e5:c0:
         f8:28:79:9a:30:bf:0d:cc:1b:a9:4b:a8:3c:f6:81:bd:a9:79:
         8e:83:9a:c6:e1:61:b0:2c:23:3d:88:38:47:84:39:10:0c:5e:
         c0:7f:24:61:56:10:01:72:ea:fa:4d:de:a5:c4:ce:ae:f9:14:
         74:cc:d2:f4:ad:32:34:29:db:89:4c:a5:b5:60:bd:64:7b:88:
         03:bf:02:68:bb:f9:e6:e1:5f:4d:e8:58:75:69:68:80:2e:2e:
         bd:e1:0d:5b:7d:1b:ba:1a:85:f4:c7:f8:93:20:0c:d8:7f:e5:
         3a:c0:bd:cb:9d:82:36:40:4a:00:16:45:80:48:73:cc:a5:43:
         2d:64:aa:f2:cc:86:dc:00:6c:ef:15:3f:e9:b5:94:61:9e:d9:
         86:6a:2d:a6:34:a3:86:60:a8:50:8b:77:d3:fe:f8:05:f1:b2:
         0a:a2:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:02:03 2025 by rpki-client