Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
File:                     wrUuo8q9FGpXffzfuHX_WjV1ctc.mft (raw, json)
Hash identifier:          4M24pL3ErUclAJcR87lvP74dlBygUr3EbTEqzJ4gPso=
Subject key identifier:   52:DA:93:F0:92:C4:56:63:71:FC:9C:EB:03:A4:A3:1D:14:67:3E:A1
Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
Certificate issuer:       /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Certificate serial:       0198D4E085553A654ECEBB473CA7715D75E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
Manifest number:          05CE
Signing time:             Sat 23 Aug 2025 03:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:20 +0000
Files and hashes:         1: MG_LemiZ4GgmFKwuBUT8GzFCS9o.roa (hash: OHMWKPBCF82oEvnytVAEpjmK3rUs3XOc7SKkHkxU2KQ=)
                          2: wrUuo8q9FGpXffzfuHX_WjV1ctc.crl (hash: qOWlMzNCnT755mg+6+imQrCWj5H0PoyMw3dqnaBEFAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:85:55:3a:65:4e:ce:bb:47:3c:a7:71:5d:75:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
        Validity
            Not Before: Aug 23 03:02:20 2025 GMT
            Not After : Aug 24 03:02:20 2025 GMT
        Subject: CN=52da93f092c4566371fc9ceb03a4a31d14673ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:c3:2e:12:5e:e0:f8:78:0d:f0:6d:4a:ea:
                    98:38:29:c0:20:2b:70:bb:ca:1a:03:59:39:e1:0a:
                    a5:4e:1f:52:e8:da:01:9f:b3:f1:7c:36:0e:ef:76:
                    b2:c3:84:64:45:ae:e2:6c:72:23:80:5f:fe:16:1c:
                    9a:5a:06:f4:b3:9d:35:aa:2e:34:47:33:09:6c:53:
                    9b:33:d0:23:86:97:66:db:3e:f7:0c:b3:10:be:57:
                    7a:84:37:1a:57:52:07:30:d6:ac:40:c0:e8:50:aa:
                    10:73:91:ed:75:e4:16:78:5d:57:45:d6:26:e3:7b:
                    ba:df:60:db:4a:90:2b:71:81:cb:6b:49:c4:28:31:
                    17:51:8b:06:5e:65:b7:07:86:0a:2b:27:31:7b:85:
                    c7:fd:d3:aa:97:d2:28:37:a6:4b:a0:70:99:88:82:
                    78:69:d4:37:c9:b9:66:21:24:3e:a7:73:63:e9:b1:
                    e9:b0:f0:ce:61:b1:52:dd:d8:15:5a:d2:71:1d:f6:
                    7d:f1:f4:8e:44:ce:5c:b4:b2:7b:be:16:44:06:4f:
                    f8:b1:88:8f:2f:6a:d7:f4:28:1e:4a:75:52:bc:c4:
                    77:cf:2a:ed:c4:40:a5:50:04:2a:aa:d1:d0:8f:d7:
                    7f:94:d5:83:03:d2:75:0c:51:2b:37:54:9d:6a:0a:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DA:93:F0:92:C4:56:63:71:FC:9C:EB:03:A4:A3:1D:14:67:3E:A1
            X509v3 Authority Key Identifier:
                keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:8c:e6:68:18:b1:de:a5:41:dd:55:cf:95:6c:3e:65:99:
         ae:55:d7:e7:ae:55:89:9c:d4:4f:54:cd:5f:a3:84:04:32:d1:
         4b:a4:85:85:4b:47:ba:ab:cd:52:7f:e8:ca:aa:59:85:f2:76:
         06:b1:55:d5:94:50:94:72:c8:95:01:69:fc:62:7e:a5:7d:3a:
         de:89:66:d7:60:45:01:a9:ac:eb:d1:8c:ae:79:4c:56:d4:71:
         5d:08:3b:9c:e0:94:06:bd:e5:98:06:fe:c2:06:74:b9:1e:fc:
         7e:36:78:47:72:c6:f9:7a:51:6b:74:70:43:82:0d:a0:e3:12:
         c6:49:7f:c4:fc:bc:7e:c0:65:c2:3c:4e:f1:8f:08:30:d4:a1:
         5b:4a:55:10:2e:06:1f:77:1a:bf:4d:68:26:0d:82:81:a0:cf:
         42:b0:41:a9:71:ca:3d:c5:3b:39:9c:46:70:d3:08:c3:a0:91:
         fa:a5:ac:da:f1:c1:71:e0:15:57:e6:eb:50:bd:2c:6e:ec:05:
         9b:df:f7:e6:1b:b2:b5:f9:75:1d:c5:ab:b4:1b:ea:25:d3:57:
         8e:e7:0a:e4:be:79:50:94:6b:04:ef:26:7f:de:22:20:76:b4:
         ef:15:45:fe:fd:db:e4:5c:dd:08:9b:fb:92:e3:01:04:be:e9:
         2f:a4:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:36 2025 by rpki-client