Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
File:                     wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json)
Hash identifier:          R1eNC9t0mO/XIc8y/TbeUlZbuUU+/PBn9+VZrevBjG8=
Subject key identifier:   43:A9:17:CE:5E:0D:B2:03:45:41:FA:00:D0:EC:5D:D6:D6:C9:33:13
Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
Certificate issuer:       /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Certificate serial:       0198D660AF0B4E006CA9B2A682ACC4DD59EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
Manifest number:          1270
Signing time:             Sat 23 Aug 2025 10:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:57 +0000
Files and hashes:         1: 2tiVBKWJb3sKibII0w4_JEP8cX8.roa (hash: yXLW83i0e/6bCMs04Sj4WwVKDgNnsbMkg4zpZba2Js0=)
                          2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: Hj2ieI7UqkA9di0vAlbf4wm181/iMHoQmcSaj2OwSP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:af:0b:4e:00:6c:a9:b2:a6:82:ac:c4:dd:59:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
        Validity
            Not Before: Aug 23 10:01:57 2025 GMT
            Not After : Aug 24 10:01:57 2025 GMT
        Subject: CN=43a917ce5e0db2034541fa00d0ec5dd6d6c93313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:c1:fe:fb:99:ef:30:e1:e9:c5:64:de:86:
                    9f:32:14:3a:3d:9a:73:61:d2:6a:2b:ad:15:c2:b7:
                    ab:ab:79:ee:9e:56:f3:43:3d:4d:01:41:fe:e8:84:
                    b6:f2:13:92:2d:68:d6:d6:f8:e5:25:1a:93:db:94:
                    fa:97:28:a3:c5:4e:a0:ce:d8:6c:68:93:75:d6:e6:
                    47:53:61:1c:69:ad:d0:de:d0:fc:1a:a3:02:d8:1e:
                    76:72:10:a5:e0:c0:06:1c:e3:6d:85:78:b0:9a:7b:
                    f8:39:1a:84:51:c8:67:05:f9:f2:f8:d3:43:4d:8d:
                    08:75:28:ba:43:64:c0:09:64:98:3d:2c:fa:3b:82:
                    54:00:05:1b:e5:57:b4:c0:26:b9:d4:e9:a6:29:ea:
                    6e:1f:9d:f3:08:bc:3a:e1:d9:a9:2f:d2:b4:38:1c:
                    70:73:f0:77:ab:78:bd:39:ed:ad:bc:37:59:40:83:
                    d2:ad:cf:ad:97:2d:f1:0b:a5:b8:d2:76:2e:6f:96:
                    56:88:ba:2b:0e:06:49:37:b8:c7:c4:da:db:7a:65:
                    71:91:78:ef:f5:1c:6a:25:67:80:6c:63:af:bc:2b:
                    8f:78:fa:fa:af:40:1b:a0:9b:66:18:40:27:8b:a5:
                    46:02:15:05:17:bc:29:5f:a3:a9:e8:2c:69:87:bd:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A9:17:CE:5E:0D:B2:03:45:41:FA:00:D0:EC:5D:D6:D6:C9:33:13
            X509v3 Authority Key Identifier:
                keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:29:9f:40:dd:13:bf:2b:12:fa:eb:15:8e:1e:fb:83:43:f4:
         bc:ed:7e:78:cb:0f:d0:8d:e4:f9:ad:59:72:4f:e3:4a:17:74:
         3e:55:34:b2:84:9d:09:2e:99:2d:4f:ea:50:7a:e3:f8:ff:88:
         65:80:5d:d6:fc:8a:6c:0d:41:0a:17:0d:d1:f1:88:6e:40:24:
         48:86:c6:93:4a:cc:72:de:ad:7b:f2:f8:b6:28:0b:d5:e0:4f:
         5b:f2:d1:8b:46:6d:0d:3d:e9:6c:45:3d:e7:41:82:0e:ab:f5:
         d9:d2:fe:a0:1e:a2:20:ab:5e:25:62:6d:cc:78:a3:db:03:bb:
         e5:36:bf:07:e8:3a:ee:d4:af:8e:45:4f:5a:e5:a7:b0:a1:74:
         f0:d1:c0:a6:26:ee:7d:aa:38:97:5d:02:d1:cb:a3:d1:37:3b:
         bc:ff:fc:2e:fe:ae:cf:48:56:ee:23:02:de:ce:d4:72:13:e6:
         f7:70:e1:94:95:07:59:85:53:d5:5c:0a:4c:b8:99:80:eb:7e:
         33:7e:24:c4:51:35:29:16:06:03:f9:00:ed:68:19:09:59:b7:
         98:76:f5:c0:e4:25:a5:15:26:72:59:29:32:f8:b2:1a:a2:28:
         4a:10:39:82:d3:36:c2:e3:77:33:4b:ee:e2:6b:95:14:c5:7d:
         f4:08:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:36 2025 by rpki-client