Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File:                     W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier:          IsrgiKxkCuRs8B7eVjnqdfJuteSbqcCpzRN4ys/iWbo=
Subject key identifier:   84:8E:7D:16:31:B1:E8:9E:93:A5:29:F5:4C:4E:81:B3:E4:43:E0:A5
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer:       /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial:       0198D8F2EFBD7AF8B536B4C525DB29B36094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number:          FE
Signing time:             Sat 23 Aug 2025 22:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 22:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 22:00:56 +0000
Files and hashes:         1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=)
                          2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: ioRlAGYicP8iq0mWiCZqoedM41zZJ5VdBbvx14x/FDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:f2:ef:bd:7a:f8:b5:36:b4:c5:25:db:29:b3:60:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
        Validity
            Not Before: Aug 23 22:00:56 2025 GMT
            Not After : Aug 24 22:00:56 2025 GMT
        Subject: CN=848e7d1631b1e89e93a529f54c4e81b3e443e0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:ea:bb:45:61:9c:7b:37:bd:0c:2c:e0:0f:
                    9d:4b:9b:0d:1a:2c:fc:74:df:14:d6:fc:52:63:89:
                    1c:91:1b:33:69:3a:68:0a:a1:66:06:65:c0:a0:7b:
                    3b:16:df:6b:7f:04:f4:99:04:0e:88:3d:27:12:c0:
                    31:64:79:93:a0:d1:f2:da:54:69:0f:36:da:bf:12:
                    90:ea:7b:7f:00:1d:c6:13:bf:ec:a0:e2:91:f0:88:
                    a2:1c:8b:6d:25:42:6e:b3:93:31:f2:f7:8d:9c:43:
                    27:f1:d9:39:5b:c5:a8:b7:cc:08:89:e5:8a:5d:72:
                    5f:58:1a:43:4d:82:28:4c:fc:4d:b1:31:ab:16:17:
                    28:24:eb:93:03:aa:bc:53:72:90:55:f4:1b:4e:c4:
                    1d:cc:7b:fc:16:09:cc:5a:bd:e3:cb:92:f8:b6:a5:
                    1d:8b:f6:2d:ab:42:13:f1:a6:28:1a:58:32:9a:f7:
                    d8:c9:dc:c6:33:52:7d:8a:e5:63:69:93:11:e8:8e:
                    bc:1b:a5:39:7d:89:d9:2c:c0:7d:cc:64:25:1d:af:
                    7d:ad:d9:72:cc:70:60:43:6e:fc:38:ae:af:3c:80:
                    8a:64:e3:82:16:50:df:4c:51:ca:d5:be:3c:b1:13:
                    ec:b3:b2:8b:03:54:0f:d4:c4:a6:6a:a6:07:9e:4d:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8E:7D:16:31:B1:E8:9E:93:A5:29:F5:4C:4E:81:B3:E4:43:E0:A5
            X509v3 Authority Key Identifier:
                keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d3:48:83:b0:7f:b4:30:c8:a0:4b:0f:71:16:e9:30:29:d3:
         cf:26:c4:cc:ef:c5:a7:e5:d5:3b:9d:42:b8:96:d7:61:0a:c2:
         1a:62:a0:4d:dc:54:c3:da:5d:b7:2f:c9:61:74:17:22:f5:4d:
         c9:14:03:ad:98:72:a1:fe:94:e0:38:a3:b1:97:f6:3d:4f:ff:
         01:87:99:ea:57:b0:d3:33:98:0c:54:93:85:ec:e2:72:d9:c0:
         de:af:92:2a:8d:10:08:a7:d1:ad:13:4d:4e:c9:bf:8b:fa:1c:
         15:15:b5:c8:15:d3:12:7c:50:89:18:46:28:65:7b:a0:ef:4a:
         b0:28:a1:45:64:3b:16:71:7e:f0:b9:5f:a2:5f:30:23:77:f4:
         19:96:bb:62:57:c5:ec:5f:37:33:4c:57:60:89:16:2e:ca:5e:
         3e:fd:4d:55:84:22:e0:0f:07:f8:ae:77:88:8d:00:da:c0:b3:
         d3:d3:11:e6:6e:cb:92:29:7c:b3:66:61:91:87:14:b4:39:46:
         ea:08:03:40:e9:6f:df:ca:b5:7e:44:72:92:bc:79:e2:4a:21:
         b1:b7:6c:06:07:b9:0e:ca:b0:d8:ab:f0:c7:4d:c1:2e:d3:b7:
         22:85:ac:30:36:5a:3d:6f:d7:22:a3:5a:1e:39:bd:5e:8a:a7:
         72:d9:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:18:49 2025 by rpki-client