Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft
File:                     1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft (raw, json)
Hash identifier:          B66/SCiaYlkNAdvzS582nvKE8uN3nclTvknW273erv0=
Subject key identifier:   2C:E9:9D:67:3D:57:55:F3:C9:83:A7:11:FB:19:5C:02:06:B4:58:0D
Authority key identifier: FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
Certificate issuer:       /CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Certificate serial:       0198D5F1785020F0ADD0E2E081873F464DBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft
Manifest number:          0A9B
Signing time:             Sat 23 Aug 2025 08:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:28 +0000
Files and hashes:         1: 1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl (hash: yOZcLXMC9vjauKbpzqhEb/pb0CoBemag64nZgIEQVAo=)
                          2: a1BlZIKaFtEFXShwRMtJXEWXi4M.roa (hash: ERqfuGIzGK00GO92FhZ0NbE6+Ekdpbfy2+flZQSTXhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:78:50:20:f0:ad:d0:e2:e0:81:87:3f:46:4d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
        Validity
            Not Before: Aug 23 08:00:28 2025 GMT
            Not After : Aug 24 08:00:28 2025 GMT
        Subject: CN=2ce99d673d5755f3c983a711fb195c0206b4580d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:01:dc:ed:a4:ca:bc:f9:7c:dc:08:f5:5a:
                    fb:ae:1d:6e:c9:27:39:2f:37:93:f0:d7:2d:2a:5d:
                    27:7f:ef:a4:08:53:31:6a:0e:ef:dc:54:47:26:7a:
                    7d:31:10:8a:5b:06:b4:a0:23:38:34:44:a2:c7:5f:
                    1b:13:dc:52:ea:4f:4f:d4:08:b4:c6:2b:54:20:4d:
                    cd:d5:05:ad:35:64:bd:e9:c1:2f:78:50:f1:15:7f:
                    df:9b:6b:f3:79:11:db:ba:8b:4e:fd:bc:a9:26:51:
                    d3:68:6b:8d:4a:b8:95:0a:3b:62:f6:f0:e2:a0:1f:
                    b9:30:8a:38:94:7d:ea:85:11:6a:e3:55:1a:39:fb:
                    0c:7b:f5:ad:2b:a3:ab:82:b0:c1:a6:82:77:2c:a0:
                    9d:86:60:d5:27:f9:ef:40:fb:9d:2e:5a:71:46:ab:
                    92:9f:ad:09:b5:35:89:f2:39:ae:ab:f0:ac:1a:af:
                    e3:88:db:3e:b0:b9:f1:cc:76:da:5f:ac:26:a0:09:
                    9a:e1:15:e8:f3:96:8f:b5:20:c4:a3:ee:da:73:48:
                    4d:41:d2:ed:c0:16:8a:fd:2d:91:cd:c6:a2:eb:94:
                    39:5f:03:43:ad:66:a5:24:65:dc:b1:a3:c9:2b:2b:
                    5e:3b:30:f1:c7:d2:b1:01:11:cb:b2:a0:0c:12:03:
                    00:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E9:9D:67:3D:57:55:F3:C9:83:A7:11:FB:19:5C:02:06:B4:58:0D
            X509v3 Authority Key Identifier:
                keyid:FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:f6:7f:03:5d:59:61:c3:d8:83:94:70:95:d0:7d:15:73:a2:
         ec:c1:f5:3f:58:25:0c:a0:63:90:88:ab:5a:68:4d:01:10:49:
         e3:18:25:f5:b7:1f:01:f6:aa:ab:93:9e:5f:b7:2a:c1:fd:37:
         10:2d:2e:90:eb:ad:84:30:80:11:d7:9f:ec:57:69:9b:12:f3:
         a4:18:96:91:d3:3d:40:17:88:d5:a5:6e:c4:1c:21:ef:12:cf:
         42:91:66:55:19:dd:39:9a:ff:c6:0e:6e:7c:ad:cd:1f:03:4d:
         26:c7:f7:63:9a:ec:a7:e2:4b:d0:58:00:80:83:6b:07:bb:aa:
         22:63:1c:6f:72:9b:75:63:e3:2c:08:ba:be:44:73:5b:67:80:
         e7:fb:49:fa:68:21:c2:98:40:31:13:5a:40:e0:9b:db:29:6e:
         ed:f1:18:73:ee:13:24:dc:21:14:71:9b:35:59:8c:af:80:3f:
         44:16:97:4f:38:fe:74:3b:01:3d:fb:2d:53:93:4a:52:bb:b6:
         bc:7a:b2:94:7c:21:49:fc:ad:00:b1:09:3e:52:30:28:dc:a2:
         56:65:d1:85:33:1e:f3:e4:43:fd:a2:07:dc:d1:e8:b5:37:b6:
         be:4b:f1:93:70:47:5b:f3:c6:76:60:c7:84:b9:e9:a2:89:a6:
         95:95:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:14 2025 by rpki-client