Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File:                     WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier:          APJIUbSbmncjjd15/j+8r/pJhNqmpqIsl2dys/7M9hw=
Subject key identifier:   A2:6F:B2:33:F5:8B:86:B1:45:D8:D6:90:32:C3:C1:CB:77:0A:17:66
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer:       /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial:       0198D73B5DA61B819AD346333F032DA0E552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 14:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:48 +0000
Files and hashes:         1: 5-_m5sx2pOrKBnn6vsQwme9LIWs.roa (hash: h/D8Ki0B/ZgXWanH4BZ9jNHNZb1ZLuVPvKx+u3l030A=)
                          2: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: lr9rcidU96G42Eh3NHYd9B12hw3gLZd6BXgVPASvZJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:5d:a6:1b:81:9a:d3:46:33:3f:03:2d:a0:e5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
        Validity
            Not Before: Aug 23 14:00:48 2025 GMT
            Not After : Aug 24 14:00:48 2025 GMT
        Subject: CN=a26fb233f58b86b145d8d69032c3c1cb770a1766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:f5:38:87:3c:78:35:62:b4:c9:ba:27:e4:
                    28:c7:66:19:76:6e:39:a1:11:06:76:53:7c:34:56:
                    53:5d:47:a0:f1:b4:d0:cb:0b:20:62:2b:5f:10:9c:
                    a5:f5:fc:9e:ac:e1:8a:55:4a:3e:f4:a9:d5:7f:63:
                    8b:b0:1f:d2:b1:2c:76:50:e6:37:9a:28:82:fb:2e:
                    c2:6d:64:d0:92:1a:3f:75:9d:13:47:b8:39:d4:30:
                    21:18:60:d5:d5:6f:86:bb:1d:57:f3:17:0b:3b:2c:
                    dd:68:5b:b8:d0:4b:22:7e:c5:50:25:13:74:13:f5:
                    e9:3f:94:be:c8:46:5f:7f:25:f4:3d:f1:4d:e8:8c:
                    c9:20:b3:5d:21:b1:6f:2f:42:ea:6c:b5:3d:a7:6a:
                    f5:6d:dc:aa:d7:62:8b:ad:0a:a5:8c:9e:1f:8d:4c:
                    c0:9f:71:26:8b:67:ee:4c:c7:4a:60:8a:3a:15:b5:
                    e1:87:51:93:0d:d0:07:46:a7:89:41:d6:33:0e:d5:
                    54:2f:71:0c:05:f6:40:fc:e1:ee:d4:35:69:33:df:
                    60:90:9b:8c:02:cb:72:0f:4d:c6:0d:00:90:57:0a:
                    9e:45:a6:c2:78:06:b2:fb:b0:d4:27:4e:b3:7d:7a:
                    bc:34:40:9a:10:ff:13:99:8a:52:75:f6:4a:3d:fc:
                    70:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6F:B2:33:F5:8B:86:B1:45:D8:D6:90:32:C3:C1:CB:77:0A:17:66
            X509v3 Authority Key Identifier:
                keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:53:f3:b9:ca:84:5c:91:7c:10:f1:c1:a8:c1:d4:6f:3b:ca:
         71:b3:c7:c8:bc:91:c6:a9:09:52:52:51:96:28:9e:13:a8:57:
         49:89:90:c8:b3:7f:63:fc:a0:aa:c4:61:e7:3d:5e:27:9b:eb:
         3e:87:19:d3:d3:f5:7f:db:56:70:c4:c5:b8:49:6e:1f:0b:87:
         ea:31:e0:dd:74:1d:17:a2:f8:b3:86:83:27:2f:23:40:f9:9d:
         b0:d3:a3:f5:df:96:bd:36:fb:86:6b:70:9e:e6:99:3c:b7:77:
         c5:6f:ca:22:f9:2b:cc:93:b2:d1:15:25:9b:d6:76:3d:88:84:
         6b:3e:a6:4e:36:48:6f:70:76:65:f0:c6:57:da:03:1c:a2:44:
         4d:e3:ff:f2:45:36:ac:37:f1:78:de:14:1d:19:87:0d:d0:c0:
         f9:02:e6:71:7e:3a:aa:5c:f0:0d:f1:e9:27:4d:eb:f7:79:97:
         ce:04:84:6a:10:4b:7a:52:fb:9f:44:11:26:71:d3:94:68:b2:
         ba:d7:90:6c:bd:ca:32:b2:43:af:fd:ec:60:98:60:bd:3b:46:
         57:c6:0a:e0:84:93:88:cd:22:a5:8d:da:8b:2c:4f:ae:17:81:
         71:85:2a:07:b4:37:ea:f3:a4:4c:8d:7a:38:aa:df:b7:61:56:
         61:d6:93:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:03 2025 by rpki-client