Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          SvuSheYaA1dP4lHTK+Dj0kRGEN/I7/lgF2q95HbyBTM=
Subject key identifier:   89:41:8F:09:8A:61:5F:47:39:5C:FE:F3:63:4E:FF:74:A8:2F:1E:1F
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       0198D7A96B97C915A8F8C900B403BDE35899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          0AB5
Signing time:             Sat 23 Aug 2025 16:01:01 +0000
Manifest this update:     Sat 23 Aug 2025 16:01:01 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:01 +0000
Files and hashes:         1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=)
                          2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: u7sQq8pFhmkSAPwQ6NXxM9Mo9EmwVu7goh0D8Dkshvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:6b:97:c9:15:a8:f8:c9:00:b4:03:bd:e3:58:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: Aug 23 16:01:01 2025 GMT
            Not After : Aug 24 16:01:01 2025 GMT
        Subject: CN=89418f098a615f47395cfef3634eff74a82f1e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:f3:25:da:5a:df:13:32:5a:ab:c4:8b:c7:
                    ad:df:69:09:b0:d4:00:c8:3d:86:22:6d:c3:8f:7f:
                    d3:aa:c7:d0:47:c9:47:30:1b:e7:df:ed:b5:0c:4d:
                    92:bc:c4:51:0b:01:5b:64:fc:25:e4:d5:52:60:a9:
                    2a:02:dd:22:9b:43:e4:55:58:e1:6c:c3:50:82:5d:
                    b6:c1:24:11:a7:75:90:fb:27:b7:b3:ff:bd:eb:96:
                    16:70:9b:93:ea:c4:d9:1a:28:63:0c:7d:7a:d9:72:
                    51:8e:bf:44:72:9a:36:59:10:1b:3a:89:c1:3c:46:
                    21:d1:d7:5f:62:bb:74:c4:3f:c8:77:c2:b0:02:88:
                    03:d9:08:9c:26:1e:18:6e:ff:9e:7e:3d:f5:20:fd:
                    95:02:ed:22:16:54:13:96:75:06:3b:51:eb:a8:a4:
                    17:bc:ed:7c:ca:36:93:49:1a:9b:5a:59:f8:c6:7f:
                    5a:b4:0b:61:89:5a:f1:0f:30:ac:65:aa:6e:3b:a2:
                    ac:31:ce:12:2f:b6:0b:0d:c0:1f:eb:b9:75:5f:ca:
                    65:9f:15:77:ef:4a:8a:9f:0c:3d:7c:94:91:ae:29:
                    1d:82:71:b3:7c:0d:26:59:6b:f3:a8:7c:99:6f:6d:
                    54:47:87:bb:7d:df:60:b3:49:28:74:65:6b:1b:10:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:41:8F:09:8A:61:5F:47:39:5C:FE:F3:63:4E:FF:74:A8:2F:1E:1F
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e4:6f:d8:a9:75:ce:14:9b:7a:a4:2a:8b:2d:87:ec:39:f9:
         a3:90:24:ce:d7:56:6a:c3:01:41:bb:11:3c:54:54:30:f4:75:
         9a:62:d5:3d:42:a9:b0:2e:b1:6f:cb:32:b9:34:58:a8:a8:eb:
         d9:45:c5:15:52:4d:5c:50:29:75:3d:16:57:d6:83:60:81:15:
         d3:37:24:b2:d9:99:f3:c2:bd:86:dc:11:2b:a0:07:fe:f0:03:
         e0:44:c4:f1:8a:8e:50:7c:17:5d:74:ca:a7:d6:df:3a:0d:5c:
         cd:1e:dc:a0:2e:08:ba:00:bf:2a:b4:49:12:19:f8:e5:d3:60:
         8a:27:3c:dc:18:7f:5a:b3:30:52:b5:ef:68:02:90:35:a6:f9:
         15:9a:d7:70:8c:fa:d0:33:03:e7:e8:93:0b:29:a1:78:8c:65:
         70:7c:6b:62:c0:5d:14:df:de:f5:f3:a9:94:b2:8d:a6:cc:2a:
         f3:06:2e:de:02:b4:f3:a1:c7:bf:3f:c5:02:26:f4:ce:32:76:
         bd:f1:85:aa:1e:65:30:a2:a4:41:cd:bd:10:07:28:5e:a9:f1:
         b0:54:f5:61:b0:66:6b:ff:e9:bd:2b:7b:0c:cc:e0:fb:b9:56:
         10:33:9d:9c:2d:cb:1e:c1:e8:42:ef:ba:66:1b:43:e8:67:de:
         08:88:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:26 2025 by rpki-client