Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
File:                     W8qreqGscUP4vII8c0sWc6CbuIA.mft (raw, json)
Hash identifier:          d6PSZUDoVs9iHWwzQFp/UohM7+8x7mJnk3mlD4rEVJA=
Subject key identifier:   0A:BE:C7:EE:6A:7F:43:15:DC:C3:13:AC:86:4B:40:56:DF:C5:E9:08
Authority key identifier: 5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
Certificate issuer:       /CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Certificate serial:       0198D7735FAB1BCF33043EBA971C0BB98F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
Manifest number:          1386
Signing time:             Sat 23 Aug 2025 15:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 15:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 15:01:59 +0000
Files and hashes:         1: MAQmOa8DCOFnP1AvP10tvRzxgoU.roa (hash: js//CnDRXGCUWJu0u0iMvymBvRN/ZDLpajOTcw67kv0=)
                          2: W8qreqGscUP4vII8c0sWc6CbuIA.crl (hash: RIwZFgiSAJzFgIYJGP/8QFg5wKrphtpjHcp/L5BqJs0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:5f:ab:1b:cf:33:04:3e:ba:97:1c:0b:b9:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
        Validity
            Not Before: Aug 23 15:01:59 2025 GMT
            Not After : Aug 24 15:01:59 2025 GMT
        Subject: CN=0abec7ee6a7f4315dcc313ac864b4056dfc5e908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:94:97:b2:c0:92:24:9f:bd:8f:6b:f6:65:
                    a8:a4:3a:c9:7f:d8:51:b9:8c:1a:fc:e8:ae:80:c6:
                    38:eb:de:e8:f2:c2:70:eb:8e:6e:ee:aa:2f:11:26:
                    74:4f:05:eb:7c:1e:a0:74:58:d5:cb:9a:d0:d2:44:
                    a5:45:5e:6a:e0:f6:cf:b9:b9:16:38:f1:05:1f:a2:
                    93:ee:d6:ae:d9:c6:d4:23:72:34:31:35:9a:3f:73:
                    1a:0f:16:25:e1:b1:47:c3:e7:a3:49:92:6e:5b:b5:
                    49:04:5c:c7:6d:2d:97:70:ef:13:d7:92:20:40:ed:
                    6a:51:97:6f:2c:17:fc:9e:67:4c:85:e1:73:26:4a:
                    27:ea:e0:8a:93:c9:d0:00:ef:fc:f5:41:2e:18:53:
                    ee:3c:c3:bd:40:90:b9:a4:d0:33:2b:7c:9a:83:da:
                    a7:6b:aa:b9:f2:c1:af:08:41:41:e2:47:62:6a:fb:
                    f9:bf:b7:7f:0c:41:02:84:d2:8d:15:51:85:cb:05:
                    48:99:93:1d:a2:38:1e:cf:80:ed:1f:0c:25:ba:a8:
                    a9:81:b0:20:30:93:07:0c:fd:ac:5c:b9:cc:d2:a2:
                    8a:01:49:4a:5c:76:a8:1d:87:1d:45:c1:15:90:27:
                    22:1e:e6:af:86:e3:6d:09:e5:32:e9:4d:8f:f6:b5:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BE:C7:EE:6A:7F:43:15:DC:C3:13:AC:86:4B:40:56:DF:C5:E9:08
            X509v3 Authority Key Identifier:
                keyid:5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:88:a2:5b:f9:0a:f3:c0:46:05:99:b5:81:4d:4b:f2:58:3f:
         78:93:e2:8b:ca:aa:d8:04:54:4e:de:ad:e2:ac:00:09:1e:23:
         14:5c:4d:55:2b:32:0f:03:49:51:71:bd:26:51:e7:3b:8f:71:
         6b:b4:43:cf:d6:c6:d0:6c:a6:7c:a5:ef:4f:f8:20:44:f6:cd:
         e7:6e:20:75:4c:b6:f7:94:e3:62:21:9f:28:d5:16:12:85:7f:
         cb:a8:67:94:b5:92:5f:c7:31:23:14:f9:cb:9b:f8:3d:fd:38:
         71:87:52:35:20:a6:30:58:1b:11:07:89:e7:a5:a6:e4:5f:09:
         10:c2:34:54:21:20:78:f8:3d:8b:ea:6e:14:79:b3:ae:3a:de:
         b1:f6:97:01:8f:12:67:ae:43:85:b2:3a:97:a4:70:1a:5f:aa:
         78:20:33:ea:36:1c:ae:56:1a:03:d4:ad:63:de:2d:6a:f8:d4:
         eb:6c:c3:c6:f4:e9:fc:71:33:13:ac:26:d8:23:41:01:50:d9:
         26:f6:a0:99:b8:79:88:0a:f5:d7:87:f9:4f:43:6b:39:b7:cc:
         82:f4:6c:60:10:46:a7:14:e6:ad:a6:cd:2a:e1:b2:08:a9:11:
         40:f5:04:47:7c:37:9a:ac:2c:18:af:b4:bd:50:4d:89:10:c9:
         eb:d7:c2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:51:16 2025 by rpki-client