Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
File:                     wVxXxJbEN46ATCYTOYB11U74qWI.mft (raw, json)
Hash identifier:          CMDRLaGYQCn5M5tDtLRqxK++KLPNuqIQ2g15iGKe4wU=
Subject key identifier:   50:58:CA:00:3A:55:A8:20:44:4A:2C:30:B8:5E:E2:99:68:76:6B:75
Authority key identifier: C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
Certificate issuer:       /CN=c15c57c496c4378e804c2613398075d54ef8a962
Certificate serial:       0198D65EF705FD4BC17C95DBCD23598B2B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
Manifest number:          011C
Signing time:             Sat 23 Aug 2025 10:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:04 +0000
Files and hashes:         1: r_DBy6crqhZV3E-t_JBcSU0M1aQ.roa (hash: x0KRqoMjmgWvFfwQSKfZBbO2VD1mpoCn3DkZilOBe/8=)
                          2: wVxXxJbEN46ATCYTOYB11U74qWI.crl (hash: fchcmKAoGJH65JusbIfXdkCdJDuMlprHJzKeeOHQFtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5e:f7:05:fd:4b:c1:7c:95:db:cd:23:59:8b:2b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15c57c496c4378e804c2613398075d54ef8a962
        Validity
            Not Before: Aug 23 10:00:04 2025 GMT
            Not After : Aug 24 10:00:04 2025 GMT
        Subject: CN=5058ca003a55a820444a2c30b85ee29968766b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:ba:c7:60:ef:83:36:65:1e:e1:87:51:5d:
                    ec:65:a8:ee:cb:8d:63:a8:1d:2d:6d:62:80:77:63:
                    83:f3:27:66:a5:c9:62:9b:ad:39:62:ab:f7:c3:52:
                    39:96:3a:4d:a6:85:eb:34:d7:62:39:1c:57:b8:41:
                    a7:d9:ad:d3:d1:98:c1:85:8e:c9:1d:62:7d:3a:fc:
                    20:b9:ba:d3:67:c4:4d:d0:a8:04:cb:45:16:8d:05:
                    f2:e9:96:fa:f6:e6:65:5c:b1:ec:fd:5b:36:e5:16:
                    16:17:35:60:dc:ca:6d:0d:9d:18:ff:95:90:25:2d:
                    88:d6:46:be:ce:e3:ce:15:8b:ee:c3:1e:e4:f1:42:
                    3f:6e:2f:e5:8a:d5:5b:a1:47:f1:cd:c4:03:b8:8d:
                    f1:6a:87:34:44:91:9a:43:4c:47:15:66:20:b9:b4:
                    1f:31:08:6a:d0:d5:c4:76:e4:c2:a8:03:95:5d:54:
                    22:ee:cd:f3:a4:3c:0f:6b:c8:6c:60:2c:3a:04:c4:
                    2b:0e:d7:e3:a1:78:34:ac:58:5b:9a:71:48:6c:d4:
                    6d:c2:13:04:12:49:f4:3c:bc:8d:2e:aa:12:87:77:
                    b0:75:fe:50:64:ea:38:c1:1a:44:b3:c4:b6:65:93:
                    09:d5:5a:20:d4:a3:91:5a:56:38:31:13:51:b8:51:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:58:CA:00:3A:55:A8:20:44:4A:2C:30:B8:5E:E2:99:68:76:6B:75
            X509v3 Authority Key Identifier:
                keyid:C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:ac:28:f4:0b:5c:bd:7f:76:f7:6a:94:80:17:fd:9f:fb:
         8e:e6:67:a7:6a:f1:3c:83:e9:34:0a:1c:9f:2a:16:15:c4:4a:
         96:3f:c9:f2:e4:9e:9c:ad:47:97:11:ab:85:0b:f0:54:ab:9e:
         1e:fb:6e:83:77:48:7b:c9:3a:68:79:d8:94:8e:76:82:23:13:
         4a:db:97:5f:d0:f6:32:ac:4b:d5:2b:d0:b6:8a:55:88:72:55:
         b3:5e:44:07:31:ad:d2:6e:74:7f:80:83:b2:6d:79:4a:14:e4:
         bf:90:4b:29:a1:59:15:1b:21:4d:da:b9:d7:40:23:d8:d0:2f:
         bb:55:e1:ee:73:27:03:9a:b7:6a:8b:dc:e0:c2:80:0d:1e:51:
         80:88:09:c0:6b:c2:8b:0f:49:7f:67:0e:7c:7b:b2:cf:cd:ab:
         8b:25:45:24:40:1f:c7:60:0d:42:7c:eb:d4:f7:2c:30:80:d0:
         31:85:3d:69:0d:46:c1:69:77:4f:dd:b4:2e:4f:54:21:1a:79:
         5d:bb:db:49:ef:e9:ea:bf:9d:b8:4b:f7:d4:5e:77:30:48:a1:
         53:8e:e6:00:04:86:44:5d:b7:07:b5:84:c1:f1:c8:4e:7d:78:
         cb:53:88:e4:cb:06:d7:b8:77:4c:c6:e7:1c:bc:72:5a:d1:ec:
         6a:92:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:08 2025 by rpki-client