Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
File:                     DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json)
Hash identifier:          BptRNoeTUf1aty/MVU/Z40Feyh6q5QNKnwSVR66eZlo=
Subject key identifier:   53:35:8F:D3:85:42:0E:B8:85:06:42:96:49:12:F3:93:EE:49:99:2B
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Certificate issuer:       /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial:       0198D472F7D622BB011DB6A2A670520B5C86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:02:40 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:40 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:40 +0000
Files and hashes:         1: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: viFwob4wMgwnKQwUUT5B64JMl+FH3otD6QaSI0lw4wQ=)
                          2: cAJwzXdTlj0l08klToV51g3reQE.roa (hash: MNtWLrHXizLnpt8hRaJw3axv6PAJCrUS/ztw7WczF4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:f7:d6:22:bb:01:1d:b6:a2:a6:70:52:0b:5c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
        Validity
            Not Before: Aug 23 01:02:40 2025 GMT
            Not After : Aug 24 01:02:40 2025 GMT
        Subject: CN=53358fd385420eb8850642964912f393ee49992b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:1b:b0:20:ef:fb:2a:65:cc:0f:23:9d:d7:
                    62:63:e0:6e:e8:d8:4a:7b:d1:da:41:23:9c:18:7b:
                    ed:3b:03:ff:3f:7f:62:bd:53:56:c5:f8:c4:4d:de:
                    a5:15:60:2b:ff:92:05:72:36:4c:4c:bd:e9:63:e5:
                    06:f9:8c:8b:6f:4d:0b:bd:2a:5b:53:ea:6d:fe:5c:
                    69:db:69:04:e3:2f:80:96:15:5c:fc:f0:08:27:99:
                    ed:ad:06:17:76:db:97:88:79:cf:02:cc:21:a0:66:
                    c3:7f:fa:56:d1:44:6d:b7:67:15:47:8e:20:4d:9a:
                    0e:be:6e:b5:73:83:62:6b:90:b5:0f:e1:e7:f4:7e:
                    7a:27:3b:c8:f0:56:56:2c:57:59:05:a5:6c:2b:87:
                    e4:17:5f:22:1b:3c:ba:8b:f5:31:c4:48:f1:e9:29:
                    63:ba:de:25:19:41:d0:a1:69:fd:b0:41:e4:2a:72:
                    52:33:5a:88:44:12:56:08:1f:07:d7:72:5f:88:58:
                    c2:ba:8f:2e:5c:7a:9b:85:3b:b6:12:75:1b:0e:34:
                    d2:94:6c:2a:35:08:7d:4e:7a:02:6e:20:6d:bd:82:
                    15:c4:45:12:47:b6:75:0b:01:5f:cc:ba:85:96:8f:
                    6e:15:7e:24:a0:d1:ee:f2:c2:ba:07:b8:64:5a:d0:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:35:8F:D3:85:42:0E:B8:85:06:42:96:49:12:F3:93:EE:49:99:2B
            X509v3 Authority Key Identifier:
                keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:ab:ff:78:5a:fe:3f:ff:92:5c:88:c6:01:b6:9b:ee:2e:
         c0:e6:a7:38:2d:dd:d1:53:be:d6:79:c3:00:a7:55:70:22:60:
         cf:0a:e0:4d:ff:68:49:9c:7c:e9:37:c8:93:27:e8:94:1a:7f:
         68:d3:49:bd:33:04:11:d2:d3:c0:cd:d5:01:ec:58:52:af:77:
         2e:8d:14:f5:6f:db:4c:86:63:16:3c:d6:fc:24:47:72:3e:f0:
         12:28:d7:92:db:61:e5:0b:d0:fd:75:02:07:51:cc:fe:29:e2:
         6f:c4:b1:f5:32:ae:c7:59:60:ee:c5:90:7f:87:71:53:94:bc:
         ab:dd:2d:ce:34:6b:f9:4f:ef:c7:7e:d2:ac:e7:be:ea:51:c0:
         5a:8e:1f:c6:d3:12:72:db:d4:0a:98:c7:44:72:6b:9e:d0:f3:
         f2:d6:77:c0:1c:5c:df:53:a1:84:f3:84:d6:9c:ac:79:b5:33:
         3a:3d:58:55:84:3f:9f:1c:1d:8f:42:63:b6:3c:ff:de:5e:c2:
         8f:18:4a:56:08:22:63:49:35:2d:68:9b:71:d4:0d:08:83:cd:
         be:dc:a2:d9:f4:e7:2e:9e:76:3f:21:99:a5:cd:c3:ad:c4:99:
         5d:ba:65:af:50:28:cb:eb:da:0d:8a:05:73:af:de:55:64:26:
         74:9a:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:33 2025 by rpki-client