Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
File:                     wmxJkkbYEuUuy6e39V4m7a71NG4.mft (raw, json)
Hash identifier:          8fPM57CjO64gPErzjFE18xpoV4pT03xZLkLP4Gqwvmw=
Subject key identifier:   3E:F1:E0:30:56:FE:F2:26:DF:B7:41:81:CC:A1:C3:0A:85:79:9E:42
Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
Certificate issuer:       /CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Certificate serial:       0198D4A7F883D705F81D269FA06400ED9B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
Manifest number:          092D
Signing time:             Sat 23 Aug 2025 02:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:34 +0000
Files and hashes:         1: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (hash: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=)
                          2: wmxJkkbYEuUuy6e39V4m7a71NG4.crl (hash: GT/z0061SIgybxz5mPo/UebyhaMSbtVADTBExdmEsyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:f8:83:d7:05:f8:1d:26:9f:a0:64:00:ed:9b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e
        Validity
            Not Before: Aug 23 02:00:34 2025 GMT
            Not After : Aug 24 02:00:34 2025 GMT
        Subject: CN=3ef1e03056fef226dfb74181cca1c30a85799e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:09:a6:43:2a:40:f8:9e:99:4d:3d:93:2e:
                    76:77:05:71:51:b1:06:a8:56:92:4f:85:6a:77:62:
                    de:1c:37:4a:5e:a5:d6:43:01:29:8e:a9:cd:e5:3e:
                    28:1e:c2:bf:3e:06:e5:d5:3b:2f:3a:08:a7:9b:57:
                    19:11:13:8f:35:ef:3c:65:da:d1:81:eb:71:26:90:
                    83:8a:72:4f:eb:bd:eb:d0:f9:77:26:f5:b9:c7:47:
                    3e:e2:23:1a:63:d8:4f:3e:65:ec:05:34:ae:cc:bf:
                    d7:df:8d:f6:6e:06:7b:b7:36:59:ae:aa:25:3d:d7:
                    9e:25:47:2b:63:3a:13:88:ec:25:b3:0b:06:30:07:
                    1b:3d:b4:5e:5e:59:8d:5e:83:58:e0:ea:80:fb:ea:
                    c1:c4:cf:cd:b4:72:17:6d:b4:d2:5c:77:da:97:42:
                    75:94:df:40:76:5f:c9:1b:d2:77:b7:14:ad:32:43:
                    b5:bf:89:8f:7f:69:4f:bf:c2:52:68:37:fe:4a:03:
                    dd:97:7a:29:bd:1b:41:bf:b8:eb:c1:c7:48:e2:19:
                    48:11:75:92:18:ac:3e:0c:7f:76:ad:c3:79:6e:c5:
                    c1:f7:bb:51:7a:d4:21:35:67:87:22:99:40:aa:e6:
                    fc:cd:fe:3f:7a:02:59:86:f0:1f:08:83:be:4c:f2:
                    5f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F1:E0:30:56:FE:F2:26:DF:B7:41:81:CC:A1:C3:0A:85:79:9E:42
            X509v3 Authority Key Identifier:
                keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:86:59:dc:39:3c:00:60:43:dd:cf:29:88:92:6b:26:6c:
         c9:ae:12:dd:a2:fb:b0:d4:60:3b:98:6e:82:d6:e3:61:4c:69:
         f0:ff:de:45:6b:f0:79:61:ba:91:85:d2:fd:6c:0d:f6:c8:cb:
         bf:6e:69:38:66:bd:a2:c1:d3:29:c0:70:79:3d:46:a8:59:65:
         90:5e:66:b7:54:21:39:40:03:da:b8:bf:4d:e7:75:ef:66:1c:
         8c:a4:29:7b:71:5d:63:92:b0:3a:a7:cf:75:37:de:93:0d:66:
         de:db:0f:b3:8d:4d:5d:d2:c6:7f:99:bd:a7:19:8a:dc:cd:d4:
         a1:c3:73:ab:66:29:69:e0:f6:fc:b7:25:27:07:e6:1c:84:a4:
         85:49:af:91:75:34:7c:89:3d:da:cd:3e:64:bb:ba:3e:54:83:
         a8:10:8e:f0:2b:b5:2e:02:f5:cf:cf:9c:c2:fd:7c:27:56:41:
         cf:1b:2e:e7:de:ae:72:c0:89:55:a1:00:18:a1:51:95:1d:0a:
         a5:02:c3:90:1b:33:99:5b:39:50:4a:fc:cc:34:f4:91:d5:6d:
         0a:6b:f0:c0:52:f0:c1:c3:b3:f4:cc:16:ed:2e:c9:8c:51:b6:
         0f:29:4f:10:d4:ed:c8:dd:a7:7b:a7:7d:30:a9:fa:61:99:37:
         17:19:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:59 2025 by rpki-client