Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
File:                     W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json)
Hash identifier:          2wXMOaDTCgICO+3GrMX8KTr2gAB5F4k90qjCLIlafTs=
Subject key identifier:   37:49:E4:B6:F4:17:20:80:82:E6:6E:AE:22:DA:09:45:BD:78:AC:F0
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Certificate issuer:       /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial:       0198D70596BD5852A4AAE5C3B7BE4D015C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
Manifest number:          1746
Signing time:             Sat 23 Aug 2025 13:02:04 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:04 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:04 +0000
Files and hashes:         1: 31WGNidSandr9euyp3MWEMrhhgA.roa (hash: x8vN4oWKPx+2cHAvBJjaBV1Li/LtuBIrATot66gBDS8=)
                          2: 610oWuA19CUxqtcpknzHzlP4b_A.roa (hash: QcmNpOYbrKuqehe3yN7fh6llD6xiMjT8+u7m0AQZJkU=)
                          3: 671gBYW6ETXc3uLLcMWFydigIAE.roa (hash: uojR24E1qs72oxVJvoIC5cuU67AWyV57CVyY3tIitjE=)
                          4: 9njdN6wFQUVuaLbOLXOmcWhn-a0.roa (hash: inK9zy8rX263vMwaOOmEV+r0bTujKJTym53E8Eif+Jc=)
                          5: B0nI6fOws8P3pqodL4PU8KT7DmU.roa (hash: nGQOoanXiIa97PP5tOpyO+UWP7GNwTyEKohGtmNn4G4=)
                          6: G7Gj-wNHQ4f1McLnqLZ1qzcaJ3Q.roa (hash: a3cjYcM4+KPGd8Ub1jI8tlRifmfOnBjLF0b8hwTZjiw=)
                          7: GnrB7Fd7Rg0Izzl2CcYyxF3uC9M.roa (hash: 5W1UPJlc7q2qwrOgo4Cf0M5PPMa5x9YyDkf7wVYVJbA=)
                          8: OUUAGwuhS9k0RLk2OQ2YMgWfJ9k.roa (hash: I6UnjrAhwxJpksTNqd8b4yrJQsgKAZ6ux+daYCpTF24=)
                          9: PGOS5SIphC-FWvemFFwRY3xBVwI.roa (hash: jV3rKZBGXXQeEwY1KmfPsJnC/OLdRjA54LXz4swzlsI=)
                          10: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: TbvldZlBqspK6B0Pwcm/kQcQxcTiuVQUle4wCFg8agE=)
                          11: WIdSsyCX57O0jLNkXtjrP1vhXSg.roa (hash: g0ccLEN+zmZYzIcNucOxzQOSHm/WBMyRcfAkc8Yy9KQ=)
                          12: ZHbobBOr2dwuIAslFUdVR-aSlCI.roa (hash: wwOheYgnkzgX0CywqPIMl0fEiGAu14WYm2K3vLEIc3s=)
                          13: _6g9hACvWcVAEeTkzJOAyhX-tWg.roa (hash: qUZvDYSWm9vpCRTIRF10lCkqAXJtkr/0IHLPg39jHcQ=)
                          14: bapCvmKxdelU8tZ6N-tKCDOP9nc.roa (hash: VCq5gvHvFWolaPnUftzl/5TniUIyPDLiIdSVxN63Njg=)
                          15: e6h_e1l_GBB-YTi9wxz8vLZyCdg.roa (hash: wioIGHuZ359Ftozmd9jj5SGM0AdzlgpJU2wqq65dW5I=)
                          16: gCTnDl9bk5vUvgw3enw31TYV6lE.roa (hash: ropCcw1OKQkiJNjd3txLKctQGY+PZqvkh98deDihOFo=)
                          17: gqm2R-ZXyqUuLvA3jxsuAJjrIK4.roa (hash: 9CZWByYdcEDtlH6WtC98zaDqoirlCufcqNkD98t2okw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:96:bd:58:52:a4:aa:e5:c3:b7:be:4d:01:5c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
        Validity
            Not Before: Aug 23 13:02:04 2025 GMT
            Not After : Aug 24 13:02:04 2025 GMT
        Subject: CN=3749e4b6f417208082e66eae22da0945bd78acf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:4a:2b:89:6e:52:bd:fa:46:ab:82:0b:c3:
                    53:00:a6:f1:46:7c:8a:72:f5:fd:68:ef:61:51:53:
                    d1:4e:ec:07:4d:1b:3c:8e:8a:1e:99:da:8f:1f:db:
                    a1:ea:35:d6:80:e7:be:43:ed:f2:65:72:a3:19:9f:
                    43:b1:4f:d2:5c:73:b9:ed:a0:e1:c2:6d:a0:ba:13:
                    c0:1b:c1:b4:42:f2:e6:1f:af:89:0c:e8:0d:76:83:
                    9d:0d:f9:b2:66:04:13:6d:85:0f:36:ce:05:6c:68:
                    5a:7c:ec:00:f9:34:6c:a1:25:f3:a8:ee:a9:15:0a:
                    f3:1f:85:99:4a:18:c5:0c:b2:a5:0b:91:91:6e:01:
                    1a:d4:76:f6:64:01:0e:0e:cf:76:27:d6:bb:42:15:
                    12:d8:96:f9:00:8c:df:13:3b:86:5e:cd:48:00:cc:
                    d5:12:34:7c:bc:c3:8f:0a:34:a2:19:bf:02:48:10:
                    53:7f:89:be:d4:b5:ca:14:4e:57:73:f1:eb:76:ed:
                    c8:92:8f:a9:38:e5:80:f4:78:22:a8:68:18:76:e4:
                    1f:d8:c4:e2:b7:64:e2:7c:f9:a6:29:6a:7e:ef:30:
                    27:0f:f8:1d:65:41:74:65:14:47:59:a6:7a:3b:d2:
                    fe:b3:84:a2:38:bf:ee:e8:e7:6d:25:ff:6c:74:e5:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:49:E4:B6:F4:17:20:80:82:E6:6E:AE:22:DA:09:45:BD:78:AC:F0
            X509v3 Authority Key Identifier:
                keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:a1:33:32:38:4f:f1:60:7e:bd:bb:13:ff:2f:4f:62:e9:
         90:b1:bf:31:9d:ff:aa:3c:20:3c:1a:65:3e:8c:a1:6d:72:8b:
         c9:0b:cf:8a:bb:4b:d6:2c:04:50:97:3e:df:e3:6b:8d:b8:f2:
         ee:b1:0e:03:9f:c9:d4:58:78:bb:b0:70:54:57:3e:d2:bd:ac:
         86:51:ce:b8:4d:94:32:a9:09:5b:d6:cf:4b:dc:26:7b:57:46:
         ce:d4:35:4b:17:53:26:5b:1c:1f:22:88:ed:cf:8f:59:39:3a:
         6a:fb:5e:44:fd:18:a8:94:0d:ba:a0:dd:be:ff:96:1d:9c:f6:
         3a:9e:33:b7:22:9d:fd:9e:eb:7d:ff:4d:2c:7a:12:ee:7e:7d:
         07:c4:54:ce:eb:09:a8:1c:b7:30:bb:45:12:ea:ba:8b:3f:a9:
         4d:c8:63:54:bc:f3:02:ad:cc:b4:b4:2e:b9:5f:1d:84:62:51:
         bc:59:16:b0:4c:ca:1f:1d:0e:9d:68:63:3d:2e:4a:56:43:4b:
         f5:d3:b0:a0:be:44:d3:53:07:87:47:5f:bd:39:c7:4e:58:20:
         fa:a4:1d:83:58:db:7d:45:ef:f2:c6:80:05:8c:77:d5:e8:72:
         73:b5:63:5f:82:69:7c:94:31:24:52:81:c5:4c:85:65:6f:07:
         d9:e3:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:38 2025 by rpki-client