Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File:                     WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier:          xBxZLYexfhEpbhLQYED6f41Ah68HM0rhSMaF/PtA9SA=
Subject key identifier:   12:DC:09:54:6F:5B:EB:EE:DA:B3:DE:F6:73:C1:0D:6A:99:33:C2:4C
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer:       /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial:       0198D65F61929CA95278B50A58B440B8C98F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number:          09D4
Signing time:             Sat 23 Aug 2025 10:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:31 +0000
Files and hashes:         1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: 5LEg2RgS4f5DGdJkWvY7R3KJ/TmB5LyZsWME9OjH0Wk=)
                          2: wIsKAJrVffRqz6laEWhWTAS6tTY.roa (hash: V1Qapun8icHJI/Zpv+MiEjbXSsE72DuavneqFQZT08I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:61:92:9c:a9:52:78:b5:0a:58:b4:40:b8:c9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
        Validity
            Not Before: Aug 23 10:00:31 2025 GMT
            Not After : Aug 24 10:00:31 2025 GMT
        Subject: CN=12dc09546f5bebeedab3def673c10d6a9933c24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0a:89:cb:e6:be:77:7f:b4:0c:0c:b5:dd:13:
                    4f:8a:f4:b3:94:83:ba:86:e1:a3:b3:9c:5d:f8:2e:
                    dc:d1:de:33:62:cf:72:11:fc:32:51:05:d5:9e:c3:
                    0a:59:74:74:e8:8c:ab:77:8c:cd:28:36:65:ba:4d:
                    b2:ba:d4:46:97:bb:9f:4d:d9:0e:d7:f0:fd:7f:9e:
                    ec:7d:2a:4d:bd:58:de:a1:da:de:53:e5:de:31:bc:
                    55:e3:07:d3:c1:65:eb:a1:f8:d2:b9:ff:78:a9:9c:
                    1b:e7:66:b1:ee:9b:da:a9:07:0c:c2:c3:3a:4b:1e:
                    6d:c0:ac:c7:34:37:a2:9a:e8:4c:66:e4:8c:be:7e:
                    e1:46:95:79:d9:03:1b:a6:bc:8e:cb:68:ef:73:0c:
                    bc:3b:db:89:ca:bb:70:1a:5b:c4:0a:39:7f:7c:5a:
                    cd:f7:41:5f:a9:d8:2f:90:0f:d6:71:f6:f3:26:44:
                    f1:e6:78:d4:81:47:35:76:10:8a:12:39:cb:b9:f1:
                    0f:64:ae:09:1f:19:88:72:0f:b1:c0:78:d1:f0:61:
                    0d:6f:b0:a7:9c:27:14:a8:f0:a5:07:99:da:75:91:
                    b2:f4:c9:ff:2a:fb:bd:7d:f6:83:69:a4:88:17:11:
                    38:81:98:c7:93:e1:3f:18:2c:82:c5:ca:69:72:53:
                    4a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DC:09:54:6F:5B:EB:EE:DA:B3:DE:F6:73:C1:0D:6A:99:33:C2:4C
            X509v3 Authority Key Identifier:
                keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:94:13:ec:37:a7:86:9d:10:10:7f:9c:c3:78:00:b5:0f:4e:
         9b:89:c4:eb:c1:ed:57:9c:19:45:05:fd:e7:46:25:6e:94:51:
         f6:8c:1d:dd:c5:9e:c9:16:54:10:e4:45:5f:bc:38:67:42:ec:
         9b:02:69:9e:5f:d5:33:7c:9f:41:3d:ac:fb:0c:64:f7:90:57:
         b2:f2:cf:6e:79:c3:e2:fd:9d:7e:3f:0f:af:08:a5:f7:ff:88:
         1d:df:7d:5f:e6:9c:ad:2f:f3:dc:73:14:21:d9:43:f5:61:66:
         79:57:08:f6:a1:2c:64:57:c9:8e:8c:e6:9a:4e:2f:33:ac:6c:
         8b:7b:94:03:d9:4e:f3:e8:a2:a7:e1:dd:d2:34:60:4e:86:f4:
         df:4c:03:b2:58:11:c9:ed:96:75:a1:22:3c:23:23:67:a8:a8:
         73:c4:36:dd:4e:cd:bb:76:2a:d4:27:40:64:85:16:52:73:79:
         47:1d:6d:87:d9:bd:aa:a2:24:4e:f9:2f:ae:28:3a:4f:bf:f6:
         4c:37:3d:0d:2a:9f:c3:7d:a0:04:5a:75:dc:64:2f:7e:1d:e7:
         17:75:3b:f2:ed:1e:2a:8a:3f:42:0a:dc:55:7f:7d:7a:a5:78:
         21:e8:5e:b0:cf:91:a0:03:7a:bb:cf:34:68:2e:5a:cd:26:dc:
         53:7b:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:32 2025 by rpki-client