Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File:                     w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier:          Jf9I6AkcgkWAymMLraiLFgVrC7P34R5mTpB6bEHaGg0=
Subject key identifier:   F0:9B:BF:A3:5D:D6:31:9D:3E:26:53:B3:B1:D9:F4:CC:C8:CF:8E:84
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer:       /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial:       0198D5BC1C036E5EDC88DB47CF43D5684F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:11 +0000
Files and hashes:         1: GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa (hash: y9FyRvs17LSTei1C0cR4cXi2RJhRkUIb5SAPSm2CSi4=)
                          2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: vVwwcvg2FfdNU4A0PmQlIvyQrm76IwnpX0EZ6qN2rWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:1c:03:6e:5e:dc:88:db:47:cf:43:d5:68:4f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
        Validity
            Not Before: Aug 23 07:02:11 2025 GMT
            Not After : Aug 24 07:02:11 2025 GMT
        Subject: CN=f09bbfa35dd6319d3e2653b3b1d9f4ccc8cf8e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:cb:6d:8e:10:16:99:eb:87:87:83:93:26:
                    74:66:3a:aa:00:b0:f8:ad:27:2b:0f:2b:c5:25:25:
                    62:d6:a6:fb:ea:91:2e:e7:17:8e:62:02:f6:19:b2:
                    d1:54:ba:80:f5:80:88:b8:9f:1e:47:96:f0:20:c2:
                    95:03:5c:91:50:d7:ad:5e:99:43:d4:d4:0b:0d:1a:
                    5f:c0:b6:d2:80:b9:9c:bd:9d:cb:46:61:a1:96:0e:
                    b3:ba:51:ce:e3:19:04:2d:2d:0a:eb:f2:d7:2d:42:
                    f8:4a:0e:49:b5:b1:f9:6b:91:83:57:1e:42:34:ad:
                    5f:ae:2e:a1:7d:de:3a:54:ca:3a:4a:6d:39:cf:45:
                    91:d1:b4:af:5b:87:3a:e4:73:ff:40:54:6e:23:9b:
                    05:79:5f:17:39:ec:f5:91:0b:3c:c5:f2:f9:75:60:
                    10:9c:9a:bf:a6:48:f9:33:91:d4:22:d1:cc:da:71:
                    f4:c9:9f:ec:75:21:ff:48:47:e1:e6:51:e2:8c:0e:
                    d5:f6:bc:86:5b:3e:0a:ec:a8:dc:24:e2:06:7d:86:
                    1c:5d:85:b1:c6:32:6c:1e:29:f6:eb:b4:6f:a4:6d:
                    64:9d:b1:0f:ac:6f:e7:98:ea:75:b4:ef:1b:d5:84:
                    29:98:28:c0:c3:e5:72:46:59:56:b7:00:88:c5:07:
                    48:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:BF:A3:5D:D6:31:9D:3E:26:53:B3:B1:D9:F4:CC:C8:CF:8E:84
            X509v3 Authority Key Identifier:
                keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:2c:23:fd:83:0e:54:23:b6:a7:0d:85:80:7e:70:ff:a8:
         34:89:1f:99:51:63:ef:6b:5b:2e:72:c3:04:09:08:aa:cf:ac:
         f4:3e:4c:24:ca:38:99:de:b9:d8:9e:c4:e8:7c:cb:32:0b:a9:
         0c:5e:fa:10:5a:cd:a2:bb:b7:2e:bd:37:cc:07:c0:a0:7d:c9:
         34:ab:49:04:2c:ee:71:c0:78:51:ef:f7:aa:70:60:4e:bc:04:
         e5:0d:dd:12:71:0c:38:67:08:4c:ff:d4:2b:40:78:0a:bf:7b:
         d7:ff:cc:71:f1:d3:14:ed:ad:ca:9a:4e:d3:f3:ac:94:df:62:
         48:f7:c3:1b:fe:9c:58:90:a0:eb:87:6c:a5:ca:34:6e:97:88:
         71:46:76:ef:58:0e:d1:ef:d6:34:aa:7b:e4:34:fd:86:23:d7:
         d2:df:62:62:89:60:f4:77:09:84:7d:b7:6d:25:22:29:b3:a0:
         85:9e:cb:a5:9b:14:00:3d:ce:e9:3a:14:62:49:fa:e0:03:04:
         1b:71:72:d5:7e:42:2d:7d:a7:a4:52:18:03:9a:42:d0:72:15:
         0a:68:bc:eb:b0:cc:04:92:f3:95:43:42:c4:02:4e:11:38:00:
         c5:74:15:97:01:bb:22:50:89:00:90:59:47:81:8c:8f:69:76:
         00:d5:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:04 2025 by rpki-client