Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File:                     tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier:          4Mwy3IDo0PwtAhyEvY99pJ+B1UIewkSqw5Wx0rtPFpk=
Subject key identifier:   7D:48:46:5D:48:10:F4:B1:BA:A2:12:B9:CF:87:C8:67:09:A7:E7:BC
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer:       /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial:       0198D54EC52A858C18FC708B047BCE24AFA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number:          0730
Signing time:             Sat 23 Aug 2025 05:02:45 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:45 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:45 +0000
Files and hashes:         1: J4oSsE5CcGCiSDFTMI_mpkGNGGI.roa (hash: 8nhOBC3zyNvV6fERAZhV/f/NVIfJdmZ3Tk+7d8j6/i8=)
                          2: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: waVr2/FsiaETPyQxlJNoqCu6s4F0ep7JM+Nqbeuc7bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:c5:2a:85:8c:18:fc:70:8b:04:7b:ce:24:af:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
        Validity
            Not Before: Aug 23 05:02:45 2025 GMT
            Not After : Aug 24 05:02:45 2025 GMT
        Subject: CN=7d48465d4810f4b1baa212b9cf87c86709a7e7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:7d:bb:5e:c9:f6:d9:96:e6:51:ad:b9:f1:
                    41:5d:7a:92:53:56:4f:51:29:2b:98:93:69:0a:16:
                    28:cf:8c:12:9d:85:e5:c9:17:ad:09:8d:67:9b:2e:
                    e7:1b:d3:cc:18:85:03:1c:b9:39:97:cf:a2:28:d0:
                    4b:1e:1b:44:96:53:c0:ec:06:4e:10:f4:0c:4d:9c:
                    0c:61:66:a3:d6:81:fe:29:13:52:e2:07:6f:7b:3e:
                    9b:f5:b6:6b:5b:dd:0a:cd:06:4b:61:73:6b:e8:c0:
                    8b:a7:94:a7:da:cb:7b:6a:1d:e4:82:11:bb:23:01:
                    92:2f:df:41:fc:c7:f6:0f:41:85:a1:00:d6:be:5b:
                    93:c7:41:81:99:95:04:57:fa:b1:cd:3f:95:7a:68:
                    5d:b5:0e:2e:c9:87:33:7b:19:d8:7e:b1:63:23:fb:
                    23:8a:be:db:4e:92:75:bb:3c:74:f0:17:07:11:91:
                    bb:f0:7a:1f:8d:35:c0:0c:e1:9e:18:1b:24:f2:d9:
                    d8:54:3b:75:ee:9b:51:eb:d4:3b:49:e2:28:8d:5f:
                    87:e5:d2:72:dd:d6:93:5b:79:99:1e:af:18:1e:ab:
                    93:b8:e2:56:16:ba:b7:c9:76:5f:87:f0:f6:4a:c5:
                    9c:49:da:4d:7c:fc:54:a1:bf:02:63:ec:ed:4d:37:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:46:5D:48:10:F4:B1:BA:A2:12:B9:CF:87:C8:67:09:A7:E7:BC
            X509v3 Authority Key Identifier:
                keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9e:a6:b7:8d:56:8f:16:81:31:f3:1a:a0:56:2c:f3:e8:63:
         5a:2f:eb:34:29:0e:32:82:49:ea:34:ec:ed:a6:7c:70:da:69:
         4d:b1:cd:8d:d3:33:5e:84:ee:96:ac:4f:7f:90:71:60:92:22:
         bd:3e:4f:5c:f8:fe:98:ff:3d:ac:78:79:36:43:d1:75:cc:e8:
         94:3b:44:98:1e:ae:6b:dc:f5:dc:1a:7b:6a:27:ec:08:5c:0e:
         8e:ca:f3:ca:53:f3:03:e3:1e:f9:f9:41:81:bb:2e:01:b8:b6:
         35:08:cb:18:93:f3:33:2d:5d:06:80:a1:1f:c7:33:a8:71:4a:
         d8:7f:e1:ec:50:98:4a:c7:df:dc:93:42:35:0f:5e:d3:22:8c:
         42:ec:1f:64:9f:b8:0d:ca:f0:1a:65:56:87:de:cb:e8:e1:0d:
         1f:ad:e4:a9:9a:0e:4b:fd:4c:c6:6b:f7:8a:60:71:fa:1a:54:
         86:7b:62:22:93:72:38:aa:3a:cf:53:f4:14:7b:de:7d:f8:9d:
         27:69:bc:57:8a:3f:6e:e3:8c:7d:1c:37:a1:df:b6:b0:0a:d1:
         bb:db:7f:3f:98:04:76:00:a3:dd:1b:17:c8:5f:8e:55:61:b9:
         47:19:e0:9c:a0:bd:e7:3a:d2:8d:07:f1:eb:44:98:28:0f:c8:
         7f:ef:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:56 2025 by rpki-client