Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          +vCARcFG5tAu/WWiWVT+SQPnezf7ClFr3ABewg9qyIc=
Subject key identifier:   16:04:0D:18:6A:0D:DE:8A:68:78:DC:8D:17:2F:DF:7D:31:CE:C0:9C
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       0198D5BC15BD27BCCD7662F9569284ACD0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          10D2
Signing time:             Sat 23 Aug 2025 07:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:10 +0000
Files and hashes:         1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: OwAUBylcmu6K7/p+2JNu7Cnr5o84cXcUrlg4LEuB9MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:15:bd:27:bc:cd:76:62:f9:56:92:84:ac:d0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Aug 23 07:02:10 2025 GMT
            Not After : Aug 24 07:02:10 2025 GMT
        Subject: CN=16040d186a0dde8a6878dc8d172fdf7d31cec09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:f1:0f:29:c7:2e:3b:5b:4f:2e:2a:39:ca:
                    1e:f8:bd:0c:c2:3a:02:af:04:b4:82:a8:27:b6:b6:
                    12:98:67:28:da:db:dc:d3:b3:ff:6e:7d:9c:f4:5b:
                    26:f9:ef:68:1a:ed:5b:ae:62:83:10:6a:3b:2a:e8:
                    ac:89:40:26:f4:34:4f:b9:eb:ef:49:bb:de:95:fb:
                    ce:25:7e:ff:7e:fa:30:d3:f0:8a:db:39:5d:f4:c6:
                    ff:50:19:2c:9b:41:f2:97:98:b2:b9:a3:64:48:d8:
                    fe:43:4c:5d:91:6b:db:41:36:8c:13:5f:aa:6b:bf:
                    11:9e:d4:23:10:24:e6:e7:aa:0e:34:59:c7:dd:4d:
                    80:6a:99:a8:3d:ee:5f:bd:c2:00:67:64:7b:cb:e5:
                    02:5c:26:c9:27:49:27:91:d8:d5:d1:a0:bd:c3:8f:
                    2a:a0:2f:5b:18:6c:42:80:53:4f:5e:be:cb:5f:9e:
                    40:98:30:7e:72:fa:33:c8:f3:16:fd:a4:71:c8:aa:
                    b4:62:f0:c2:01:8b:c9:79:6a:61:da:69:df:61:c0:
                    67:d7:e8:3d:36:52:83:8a:88:ee:2e:62:30:f8:cb:
                    92:1c:32:6e:b1:46:ca:45:e0:06:88:cf:c5:ce:20:
                    2d:e5:72:9b:a9:b6:a2:36:f2:01:46:aa:57:a2:94:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:04:0D:18:6A:0D:DE:8A:68:78:DC:8D:17:2F:DF:7D:31:CE:C0:9C
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:27:45:63:88:00:dd:a2:f6:36:0f:9e:e9:ff:54:04:ae:73:
         aa:5b:f8:e8:80:a2:59:63:63:0e:c5:a9:c5:02:99:70:89:46:
         dc:3f:7a:e7:0e:e6:09:10:80:4b:de:fe:e9:dc:e2:e8:2e:7a:
         53:84:05:ae:8f:78:7c:32:a2:ea:6d:58:f9:c3:1d:85:48:5b:
         e9:1e:7e:df:5b:e2:45:99:ce:e5:04:6e:a0:1d:d0:1b:ee:63:
         4b:3f:64:1e:fb:50:e6:b8:ec:5e:7f:5d:2e:3a:c5:c7:b5:ec:
         86:5e:c3:12:5e:23:e8:66:a8:0c:58:63:98:32:57:87:1c:a7:
         74:1f:c6:33:90:49:7b:0b:94:7a:4b:a6:7d:1c:3d:d1:53:b6:
         c5:7c:ca:06:fc:97:19:35:01:c4:89:1a:7f:c4:12:6d:19:7f:
         44:fb:56:01:44:86:92:ba:fc:66:fd:0f:cc:ce:ac:be:e4:a3:
         b7:3c:51:db:af:d0:a9:3c:fc:ed:6b:cf:04:2e:7d:a3:59:2d:
         32:10:68:bc:ba:3a:4e:ef:c5:9d:67:3b:15:0b:ee:b1:2d:9e:
         c2:e1:c8:96:5e:99:02:b4:7b:3d:d3:3e:ff:74:aa:ff:2a:df:
         7c:a2:b1:69:3d:14:be:a1:b9:ee:16:9c:d0:f5:7c:ff:f3:a4:
         bf:ff:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:49 2025 by rpki-client