Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File:                     W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier:          rTy8Kgb7iqfY659Gb00kg6KnKWzvy52myW/hOK8U2cQ=
Subject key identifier:   A9:A2:D8:7B:21:A0:BF:09:F6:C5:00:DA:15:34:45:88:B7:24:23:69
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer:       /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial:       0198D5BBCB5DD3BF49988BC38E9612088817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number:          0CED
Signing time:             Sat 23 Aug 2025 07:01:50 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:50 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:50 +0000
Files and hashes:         1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: X/X/ZluxNC2qOMeWN4xVRdR3KbMzhysafLXw6fo5+lc=)
                          2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:cb:5d:d3:bf:49:98:8b:c3:8e:96:12:08:88:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
        Validity
            Not Before: Aug 23 07:01:50 2025 GMT
            Not After : Aug 24 07:01:50 2025 GMT
        Subject: CN=a9a2d87b21a0bf09f6c500da15344588b7242369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:90:51:dc:da:58:79:0f:91:6d:12:66:48:
                    1b:e9:b5:85:e8:2b:f6:b3:2c:4f:c7:7a:fe:c8:3a:
                    d3:9a:74:87:62:ed:62:a7:06:76:67:75:0b:3b:58:
                    29:44:b1:9f:4f:58:4b:9e:27:41:fa:4a:5d:fc:d5:
                    72:77:56:01:53:7b:c6:79:be:39:eb:d0:4f:96:0d:
                    2a:68:5e:fe:ef:b7:bc:cc:ac:cb:c3:38:74:44:40:
                    41:d5:4f:c8:4d:6c:99:01:60:d9:ba:16:86:a5:63:
                    24:d8:e7:e0:6b:69:7f:fc:4c:45:6b:f6:2d:5b:f7:
                    99:03:d0:8c:e4:fa:f3:58:a5:45:6d:e3:45:b7:21:
                    da:5e:fb:4a:df:67:b8:87:85:b5:98:2d:ce:65:37:
                    99:fb:74:ec:f5:2a:6b:25:1c:b3:64:df:36:8c:83:
                    33:26:82:f4:19:84:8f:33:91:e4:67:3f:32:9e:b6:
                    cd:34:99:5e:d9:20:4f:9a:5a:d4:c6:9f:37:d6:64:
                    d5:68:c2:60:3d:6e:97:b7:f8:77:bf:bf:a6:db:53:
                    f0:11:4a:ef:75:55:e1:6a:dd:68:5f:73:53:de:20:
                    8e:f5:6b:97:ec:7e:09:94:52:44:05:fb:f8:bc:86:
                    81:57:25:c9:36:d2:9e:f2:5b:59:cb:35:4f:7f:56:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A2:D8:7B:21:A0:BF:09:F6:C5:00:DA:15:34:45:88:B7:24:23:69
            X509v3 Authority Key Identifier:
                keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:8d:65:d9:c2:3a:c2:93:7f:13:46:ff:26:84:93:9a:12:
         17:d6:1f:8f:41:b5:f7:f5:90:50:e6:3e:e6:05:27:a7:34:3c:
         2f:34:1f:a4:b7:ab:2b:06:c6:48:fc:8b:85:9f:91:34:cd:55:
         4b:24:d7:f6:84:9c:5f:4f:d4:9c:f2:ab:0a:2d:16:35:dc:62:
         0b:42:0f:39:cb:be:af:59:00:d5:ca:a5:1b:40:85:da:f8:8f:
         9e:a4:c0:af:1a:ba:32:79:f9:4d:48:19:bc:34:9d:60:25:a7:
         bc:ca:dd:b7:88:0d:b3:fe:a5:a0:88:ef:9d:ea:60:ba:13:03:
         de:05:5f:09:52:fe:7e:f3:09:a1:35:63:bf:3f:ac:96:c6:f8:
         48:ac:43:fa:33:7c:52:4d:92:64:27:11:8a:be:e1:2a:ef:d5:
         9f:d7:84:96:97:ed:d8:b7:77:4e:3c:f1:c0:e6:7d:22:34:dc:
         72:2a:b0:50:2a:e6:af:04:61:e5:6a:8e:13:7a:ee:a8:5b:d6:
         34:82:de:06:9a:be:27:b8:97:41:8f:ae:37:dc:ef:f6:46:4c:
         72:ca:29:30:a7:e8:4c:35:67:02:e8:bf:6a:e3:fa:9e:30:cf:
         d8:39:94:86:11:c5:21:8d:3f:45:5b:1e:91:0e:84:f1:1a:d6:
         35:f8:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:16 2025 by rpki-client