Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File:                     wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier:          wIY5FDKKRVEYoy93OLxI2EpUDRlSL0pHy1KzT3fnXbM=
Subject key identifier:   BF:64:D3:5D:97:86:52:82:4E:53:98:A1:97:C6:97:04:38:A1:2F:10
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer:       /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial:       0198D65EFF41FBBD5C87F90B7B37DAA22DC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:06 +0000
Files and hashes:         1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=)
                          2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: PPvdOxqVzfC18mLz9tYvJje1KSynhoSTJHk1wpLzR7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5e:ff:41:fb:bd:5c:87:f9:0b:7b:37:da:a2:2d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
        Validity
            Not Before: Aug 23 10:00:06 2025 GMT
            Not After : Aug 24 10:00:06 2025 GMT
        Subject: CN=bf64d35d978652824e5398a197c6970438a12f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:cc:eb:5d:04:7a:6c:2f:39:d1:64:3f:87:
                    7e:d2:0a:c0:42:fc:16:49:80:41:80:c2:bb:c3:14:
                    a7:6a:86:32:76:e2:98:48:de:d7:ea:9f:96:5f:f0:
                    88:92:3b:d5:fb:3e:b9:eb:bc:26:fc:fb:3a:83:f3:
                    08:34:cc:3f:34:80:8c:cd:bb:cc:09:0c:a9:09:61:
                    77:26:81:2a:a8:08:02:fd:bd:be:d8:76:10:42:70:
                    6d:03:e9:a6:ec:df:61:aa:c4:17:0e:3d:29:57:1b:
                    c0:1b:75:65:85:cc:e4:73:04:0d:6a:93:66:75:89:
                    20:9e:ec:75:fc:de:2e:51:61:02:86:fe:fb:b8:33:
                    63:90:9f:e3:34:1b:c9:6f:80:5c:f2:4f:3e:65:c0:
                    c6:20:a7:f1:89:59:fa:ec:a9:c4:23:93:8d:9a:33:
                    d5:a6:20:97:99:f0:4f:30:4e:31:a6:91:f5:c2:45:
                    2e:12:bd:a2:3e:a2:6d:bd:6a:fa:0b:0a:a1:c0:e3:
                    53:d5:cd:65:06:ae:db:7c:99:08:00:2a:23:4b:8e:
                    b5:f6:e2:ed:a2:9b:5f:6f:b0:ef:d7:ac:ed:b2:0e:
                    72:b5:fa:cd:7d:40:fb:66:10:e9:1a:56:a2:9c:2e:
                    96:0b:f5:5d:2f:aa:5c:f9:e1:03:e5:9f:ce:c1:a9:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:64:D3:5D:97:86:52:82:4E:53:98:A1:97:C6:97:04:38:A1:2F:10
            X509v3 Authority Key Identifier:
                keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6d:c1:9b:2d:61:45:e4:50:b8:84:dd:0f:dd:8a:bb:31:82:
         c7:9a:c9:d6:1a:d4:15:96:6e:7f:f6:40:0c:34:14:b5:fb:04:
         3c:5e:1b:26:dd:85:01:43:f8:c6:fd:04:d3:4e:ad:d3:56:41:
         3a:f9:3f:07:01:cb:06:68:3e:b5:b1:a0:e1:39:50:85:33:fa:
         54:35:06:a4:31:09:21:e7:ee:06:4e:ce:13:a0:4d:a8:ff:02:
         99:96:79:0c:e1:b3:b2:9b:ba:f4:b9:22:bf:c9:f1:c7:6f:3f:
         5f:db:be:91:e9:ae:02:f6:3a:5f:f3:18:1d:28:6f:94:dc:91:
         7e:4c:ce:e7:b7:0e:3d:91:6c:5c:b5:47:e6:64:66:ae:0b:7c:
         88:a1:6d:e7:0d:88:70:aa:46:1c:0f:04:08:b1:82:46:98:9d:
         fa:9a:61:7c:be:ab:7d:5b:22:04:1c:b3:b5:d4:17:73:28:6d:
         81:7f:19:90:38:47:38:60:cf:42:00:04:62:09:10:10:ed:21:
         65:32:2c:c7:9f:ed:ad:ad:65:a2:cc:a9:dc:8a:e7:cb:88:3b:
         5e:51:f9:bc:25:28:06:2b:82:f2:04:48:ba:62:8c:ab:23:40:
         88:d1:3f:45:16:54:47:54:e2:9f:ad:5d:38:f5:94:1f:b1:79:
         30:40:44:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:06 2025 by rpki-client