Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File:                     wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier:          8592bO36CSUdd+33cL+wori3LnRAf0ADlVPmBQMa+Mg=
Subject key identifier:   F2:C1:40:0E:91:4E:DC:8C:A3:67:7A:71:F9:DF:4C:0C:05:4D:9F:66
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer:       /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial:       0198D515C0BD28A95C3710B3D094D10154F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number:          C1
Signing time:             Sat 23 Aug 2025 04:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:28 +0000
Files and hashes:         1: GqkYahAWuW8CVZC80Y_0nRuyPHU.roa (hash: jfcsYMa+fRQOgfblBRN6UE5BrKJvOwvJrlwzJD4gFuc=)
                          2: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: 4UB07QlouujJu/pYoO+IERJMiWYrIPYrPtp/LC7xbGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:c0:bd:28:a9:5c:37:10:b3:d0:94:d1:01:54:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
        Validity
            Not Before: Aug 23 04:00:28 2025 GMT
            Not After : Aug 24 04:00:28 2025 GMT
        Subject: CN=f2c1400e914edc8ca3677a71f9df4c0c054d9f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:66:a3:77:7e:37:84:b8:c7:88:9b:05:43:
                    f1:3b:c2:10:61:9b:d1:55:aa:26:aa:d5:ff:44:46:
                    9d:1a:33:c9:85:07:39:19:63:a6:0c:cb:5f:f8:9a:
                    e8:57:6e:35:6f:8d:7a:03:47:a9:3d:2a:f4:a4:56:
                    5d:10:d8:eb:6b:2a:e7:57:bc:8a:53:59:30:f8:c0:
                    e2:23:48:7c:2f:a3:b6:de:cd:52:3a:3e:24:da:72:
                    91:6a:85:fb:41:13:8b:46:c7:30:00:2b:f5:a2:93:
                    07:3d:1a:57:e8:63:54:9a:23:c9:37:49:95:af:a5:
                    21:d1:5d:5a:91:3a:a4:b4:7a:55:3d:95:89:95:ec:
                    7c:f6:e7:b7:59:07:db:a3:92:dd:5b:41:1e:64:2f:
                    3b:1a:7e:2d:d8:d6:17:36:a2:5c:5f:63:d1:0b:f8:
                    38:81:00:9e:ed:0f:da:8a:29:ab:23:c7:8d:6d:f6:
                    39:3f:09:9b:e3:5a:54:72:4f:8a:70:43:41:4e:f9:
                    52:40:a0:94:d7:0c:72:33:57:f1:24:7b:da:5b:77:
                    5a:6e:c6:51:a0:f4:d2:25:24:9b:36:f7:76:73:00:
                    ac:94:b2:48:b6:4e:cb:10:07:36:20:a8:8d:98:fb:
                    eb:b6:71:c9:84:d9:a7:69:00:d9:2c:8a:f5:ee:ec:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C1:40:0E:91:4E:DC:8C:A3:67:7A:71:F9:DF:4C:0C:05:4D:9F:66
            X509v3 Authority Key Identifier:
                keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2f:8f:02:4d:4d:db:b1:7e:c8:1c:9d:4e:f7:52:e1:b3:b0:
         6f:2c:55:26:7a:93:75:b6:11:b8:70:a6:b4:49:15:a3:96:58:
         cb:fd:22:f2:7c:1e:ce:4e:ba:65:97:a2:20:ac:bc:8c:56:75:
         47:aa:03:24:4e:b0:86:9a:59:55:c3:22:4f:1f:45:4f:85:4f:
         aa:7f:b1:96:ea:ac:8e:9c:b2:d4:1a:1f:13:5b:ac:08:98:b6:
         2d:23:f4:5d:3c:c6:a5:32:13:09:d0:67:df:a1:5f:47:9d:df:
         2b:08:d7:d6:65:e5:6e:21:a2:c6:42:53:8d:67:f6:20:03:e4:
         d1:45:64:a3:2b:16:da:71:7e:82:c1:00:1b:6b:37:de:c2:4e:
         6e:72:d5:ce:e8:38:21:75:82:01:8d:bf:1b:67:16:e7:64:65:
         c3:c6:9a:41:68:b8:a8:ea:57:82:79:7d:65:03:68:68:be:2d:
         a6:88:0d:e9:5b:74:2e:9d:d9:f1:ef:da:9d:22:4b:fd:ef:98:
         f7:b4:a2:ee:5f:2e:ff:1a:46:7f:62:2f:f7:b6:0a:09:26:e2:
         ca:87:c3:6f:9e:27:78:6f:cb:36:7c:75:09:99:0a:db:95:e1:
         65:0f:f8:7c:4a:eb:cf:c8:84:46:3d:23:a3:67:b5:e2:a0:82:
         b1:5f:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:34 2025 by rpki-client