Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File:                     wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier:          3/+KkuMTH6bIepIvKjE7haKsucxCA6yZIHkzKhD+IaA=
Subject key identifier:   C5:63:88:7D:22:F7:90:CB:26:04:3E:D1:4D:C4:B9:DE:08:79:29:0D
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer:       /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial:       0198D515C892F11A0DD1E211E5F4CF131A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 04:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:31 +0000
Files and hashes:         1: fpbdoc2TI64xJycuwiFh9Gomr6A.roa (hash: cljwIs+0uajrjK0gVgOImyvI4O/zMxkT1vLqnWwJwe0=)
                          2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: ng3ffU8ItNUMiafaK3F1qXDP0gEMzlRR6/wfMkOHDk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:c8:92:f1:1a:0d:d1:e2:11:e5:f4:cf:13:1a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
        Validity
            Not Before: Aug 23 04:00:31 2025 GMT
            Not After : Aug 24 04:00:31 2025 GMT
        Subject: CN=c563887d22f790cb26043ed14dc4b9de0879290d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:f2:89:36:fe:e0:0c:e7:6f:e8:5f:db:4e:
                    83:13:3a:36:cc:9d:a4:cf:13:62:a3:e4:8e:cb:54:
                    7f:b2:cf:24:82:a0:95:93:15:0a:58:e5:22:16:60:
                    5f:39:90:cc:58:55:15:71:7d:03:63:5a:37:20:7a:
                    b5:f7:19:13:87:ba:59:c1:60:5a:ed:6b:71:08:dc:
                    8a:bc:f0:17:58:06:50:9c:18:a4:51:d1:f0:18:2c:
                    75:a4:21:01:6b:13:2d:e4:b4:6e:6a:bb:da:27:74:
                    42:a9:5e:68:d3:33:fb:c0:fb:3e:0f:bc:f7:ef:07:
                    52:fb:b9:e2:1e:5b:24:d1:4c:71:20:e5:40:6b:2f:
                    b1:50:d2:70:29:31:f3:5b:83:f3:3e:e1:63:c7:67:
                    98:dc:91:9a:9e:7f:e8:06:8b:64:9f:18:f1:c2:ab:
                    f5:02:f9:91:39:4a:0d:de:71:4b:ca:5a:3f:54:b5:
                    f7:22:6f:8d:ba:f0:9f:7e:e3:7a:bc:ef:65:b3:ee:
                    3b:7c:c6:32:a8:69:40:ec:79:f6:97:51:74:14:b3:
                    82:a9:73:c4:63:e4:66:00:23:9d:01:96:bf:9f:a5:
                    3f:ba:95:76:97:5b:8c:69:77:0f:95:c1:35:7e:04:
                    60:25:a8:3c:06:18:6a:a3:6e:ca:4f:3b:81:73:7a:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:88:7D:22:F7:90:CB:26:04:3E:D1:4D:C4:B9:DE:08:79:29:0D
            X509v3 Authority Key Identifier:
                keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f3:bd:87:9d:ed:0c:72:e4:57:23:09:75:de:5d:7d:99:60:
         94:7c:2e:13:00:db:57:3d:08:eb:78:52:19:61:88:57:01:3d:
         76:5b:e4:12:af:f6:06:bf:28:05:a3:f3:b7:e0:07:4b:af:3f:
         64:03:c9:cf:13:c6:d5:f1:d5:66:39:f9:72:5c:ea:14:40:22:
         dd:7e:fb:8c:3a:93:47:9e:e6:6b:14:72:e7:75:64:74:e0:10:
         b8:96:aa:05:8c:d6:5d:6c:67:21:5b:9e:e2:bc:6a:79:26:96:
         76:a3:02:fb:17:fd:77:ce:4a:60:7e:dc:1b:8b:2b:e7:3f:37:
         76:92:98:31:1a:ff:a1:bd:d7:fd:c1:96:91:77:f3:ae:fe:32:
         ee:5f:2f:f0:48:ec:5f:90:3d:6c:58:d0:c4:4d:a5:7f:1c:8a:
         47:02:13:52:58:72:49:e7:52:8f:fe:e8:5d:bf:43:0b:7e:ce:
         70:7f:2a:02:08:a5:c0:cc:7b:2a:d6:db:c9:a1:53:3e:82:2d:
         c4:13:15:b4:db:38:61:c7:4a:ea:6b:91:2c:c8:2d:fd:28:1f:
         ec:ad:da:ab:94:56:e7:cb:2e:89:1b:d9:cd:66:f8:65:dd:17:
         0b:9f:a2:6c:e4:df:58:19:23:be:4e:c1:77:ed:69:5b:19:7b:
         4c:39:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:54 2025 by rpki-client