Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          W4V8TV38weDT+nNBF7F1LVZLF2S7FsAI8hPssC9L7S0=
Subject key identifier:   0D:57:86:15:D0:21:E2:B1:99:93:59:2B:9A:44:F6:6F:AA:D4:98:9F
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       0198D5833FDB8BBAB2638ED6EA3C9B3BA73B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:05 +0000
Files and hashes:         1: QHN1mo-chw8woBmyHxpHaobOHVY.roa (hash: xauKLlFs3GtWKAmak4uwPaBujz4eKBRABiwipmCaZzM=)
                          2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: wlsScS5bbc04vG2IeKXCvsuGvrioJMgyrDm5BW6X8HI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:3f:db:8b:ba:b2:63:8e:d6:ea:3c:9b:3b:a7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: Aug 23 06:00:05 2025 GMT
            Not After : Aug 24 06:00:05 2025 GMT
        Subject: CN=0d578615d021e2b19993592b9a44f66faad4989f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:10:10:6e:10:6a:55:33:49:f9:5c:b7:f4:
                    96:cc:c2:14:ab:ed:4d:45:a0:63:dd:74:19:51:93:
                    04:d4:db:6f:9f:9e:df:3e:c7:23:2d:b2:fb:16:91:
                    57:fe:80:3f:59:32:fc:75:9e:df:92:6d:77:5a:23:
                    f0:41:08:6b:8a:da:c3:27:f4:06:ac:33:80:45:60:
                    9c:59:3b:9f:7f:8e:c7:57:28:c6:53:0e:95:82:58:
                    82:c2:04:18:88:8f:d5:d7:b3:c1:ab:56:1e:30:3f:
                    37:9b:56:92:db:bb:72:dc:fc:7d:0f:16:e4:05:2a:
                    48:f7:32:30:11:de:c4:b0:2c:47:77:4b:22:1b:97:
                    e3:55:12:32:40:63:87:5d:0e:ea:b6:48:d1:88:d5:
                    a1:00:0b:b4:d2:3c:9f:48:6f:62:a2:32:e9:9d:3a:
                    50:6c:b7:e3:f5:3d:f2:23:be:ab:d4:b4:70:ef:dc:
                    85:8a:36:54:d3:2f:a3:15:32:c0:a0:f4:99:3a:b3:
                    54:b5:41:27:05:f8:68:c3:07:26:06:c1:d2:02:c1:
                    62:60:18:34:de:42:2f:68:29:2a:6c:ad:6b:c1:00:
                    a8:57:dd:47:8b:6b:30:57:1d:83:37:18:cc:05:75:
                    01:de:1c:08:c4:e9:a8:3d:df:6b:a6:d6:22:32:3c:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:86:15:D0:21:E2:B1:99:93:59:2B:9A:44:F6:6F:AA:D4:98:9F
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:13:ff:2b:52:ca:b4:3d:3d:5c:d2:c5:ba:a5:98:e4:78:11:
         8a:a9:05:ad:53:8b:60:30:dc:c9:fd:af:ac:63:2f:77:4e:4e:
         50:eb:a2:f0:43:22:ae:79:31:77:a0:91:5c:e5:c8:08:2f:f6:
         4c:0f:21:9e:bd:a4:01:3c:5f:a7:1d:86:5e:91:9e:91:16:7c:
         ac:6c:82:15:3b:d6:9c:d4:b4:06:c3:eb:d6:4c:ae:f0:bd:05:
         f8:3c:85:71:37:7e:71:99:73:f8:09:c8:1c:d5:1a:e5:b0:d4:
         de:1c:85:c9:fa:07:1a:70:b7:0c:e6:35:3c:75:91:ba:70:6e:
         7e:08:5b:a7:fc:fe:cb:7f:fc:b5:7e:c2:f7:dc:f3:62:62:ca:
         ed:7c:64:3d:bf:e7:2a:9e:5c:5e:34:41:b9:25:6d:38:3e:40:
         24:d2:05:c7:ab:49:e7:a9:4e:9c:63:e0:e2:4f:a6:ca:ab:c2:
         7f:36:ac:d3:02:e6:14:23:7f:9f:3a:41:07:17:34:93:48:88:
         68:36:9a:83:cb:60:db:05:06:ce:55:90:64:7e:ed:da:13:6e:
         f2:53:42:f1:5e:c9:ec:6f:65:20:26:0e:bc:03:6a:14:c0:fc:
         e3:bb:f7:ff:84:b9:ae:1c:2f:8a:20:5b:49:8b:14:c7:92:59:
         12:d6:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:25:40 2025 by rpki-client