Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
File:                     WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json)
Hash identifier:          QoA6Ii9S9H3SW3DMkKq1JoMoOAeAfo8xcwvbmBsiIEY=
Subject key identifier:   6B:4A:F7:F4:12:D4:7D:60:B7:AA:2D:4F:18:1A:BF:D0:63:17:F8:CB
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Certificate issuer:       /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial:       0198D6982CE9A2E8445A20DCD00CD09A89E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
Manifest number:          0CED
Signing time:             Sat 23 Aug 2025 11:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:33 +0000
Files and hashes:         1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: YceoLRcdA0fFDBApT6T7q/Lt/NG8GkZEtVjORmJ8nyk=)
                          2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:2c:e9:a2:e8:44:5a:20:dc:d0:0c:d0:9a:89:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
        Validity
            Not Before: Aug 23 11:02:33 2025 GMT
            Not After : Aug 24 11:02:33 2025 GMT
        Subject: CN=6b4af7f412d47d60b7aa2d4f181abfd06317f8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:88:86:bf:f7:ef:ba:02:68:b8:ab:c1:85:
                    97:8a:b9:ed:6d:b4:d3:13:bd:95:2c:96:ed:c8:f4:
                    5f:08:d8:f3:a3:53:a4:71:ff:9d:5e:53:b3:9d:46:
                    fd:a5:29:05:1c:f5:55:10:b4:fd:2a:01:6d:26:51:
                    31:dc:61:fc:49:b8:02:30:8d:98:63:5d:54:ee:66:
                    84:d7:ed:a8:c0:48:52:8d:55:52:5b:1e:a1:e7:0d:
                    6e:cf:b4:92:b0:97:4c:ec:bf:d6:cb:7f:b9:36:53:
                    73:88:38:3c:22:fc:23:36:5f:92:4b:4a:b3:fd:94:
                    f4:4b:43:80:27:e4:6e:82:bb:e0:0f:0e:7d:db:2f:
                    ef:3a:8c:31:91:f4:d3:50:ce:fd:7e:8a:1d:96:71:
                    72:3d:85:88:05:3b:ae:0d:22:73:a9:25:f6:7d:5e:
                    d4:14:ae:62:28:a7:f7:c0:1e:b6:68:63:fd:36:fd:
                    a6:d7:ad:40:82:d0:64:48:ba:97:68:dc:03:02:df:
                    55:d7:5c:a2:ab:2e:b4:6e:67:f5:4b:6a:74:a6:4d:
                    52:6f:5a:e4:4e:40:87:42:e0:c0:ac:40:d7:df:6d:
                    c7:10:f4:f3:49:f6:54:53:e0:2f:70:d7:b8:73:9a:
                    d0:1e:90:7f:b3:02:45:b6:ad:6a:28:39:65:01:d9:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4A:F7:F4:12:D4:7D:60:B7:AA:2D:4F:18:1A:BF:D0:63:17:F8:CB
            X509v3 Authority Key Identifier:
                keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2a:be:44:7a:1a:ba:09:53:d0:42:9b:34:d3:ad:74:c1:2d:
         19:ee:d8:c1:77:83:35:52:cd:65:b9:33:44:79:de:2a:a1:09:
         33:b6:46:8f:40:16:b3:33:3b:93:83:70:6d:20:37:b6:85:0f:
         83:28:df:66:05:68:29:59:4f:33:02:6a:3e:23:18:f1:95:09:
         57:df:62:85:6d:6f:c5:0c:e9:72:8e:3c:b5:68:fc:47:34:ad:
         e8:b1:f2:69:49:d6:85:03:75:e5:8e:42:86:7c:b3:f3:7c:bb:
         b3:61:4d:c0:54:0d:0c:7a:ff:03:1e:89:19:90:f5:c6:f8:7e:
         c0:fc:e0:b5:ff:76:71:d5:e0:31:80:67:f2:52:ff:dc:99:ed:
         5e:d2:dc:f3:da:1b:e0:a2:fe:e7:1c:89:48:f0:30:fe:c6:15:
         7e:2c:fc:a4:54:44:bb:15:b0:fa:8a:3d:a4:e9:01:6a:ee:ca:
         b4:7c:34:40:59:ae:22:8b:db:52:87:3f:19:c5:59:8e:b7:c3:
         2f:a5:af:b7:13:bb:e4:43:9c:17:0c:7f:4c:f7:af:3d:7d:34:
         a4:12:90:1f:eb:fa:81:6f:0b:6e:88:cd:b5:4a:aa:2b:a1:ae:
         c3:41:3a:52:34:87:24:d7:47:ab:5b:c7:4a:2a:10:3f:61:97:
         26:1e:9f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:43 2025 by rpki-client