Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
File:                     cwLNwp_coJ6aDz99IRPahafh1lQ.mft (raw, json)
Hash identifier:          knALC9R+ukWI31lQVZNx7wM+H28m/QQTGR+869Kuhdk=
Subject key identifier:   83:A1:7E:AD:29:DB:5A:B1:F1:B0:E7:DC:50:36:88:4E:CE:9C:8F:62
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       0198D6CE0AA0617AE8D2FC86B4B5E0912747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
Manifest number:          165F
Signing time:             Sat 23 Aug 2025 12:01:23 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:23 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:23 +0000
Files and hashes:         1: 1b0YLKL7-iTCHbE9CdUd3XA5y7g.roa (hash: rIogoNu1hzVKlpslv16w1RSjAhJwMYGtMcjGmVqGYDI=)
                          2: 3OrpPYLoIXvd5Z078UIjv-o45HE.roa (hash: 7OkFl+S/WJrI7zN/5kL1WgsZR4fsHSw0RK0hWnDrWeA=)
                          3: 6hgKpsdlK6GUgCq-rwztVz_Bhck.roa (hash: x7Nnzb3+BjsMGfCWv6tnmGZkmedf5cnHnxqvvpjotow=)
                          4: BclF8ogFJm7SHbbSauqgIPuVgI8.roa (hash: 6BijkZjD88M35uPP9hk20CG6BMPOZYagpsfeWkqpwqw=)
                          5: FZc4W_DS-zYGeo6V-YV56NvLSjQ.roa (hash: Y7NpnMtxGd1OVNPFS3Fggo5HticHh8zC2s5H72cAKJA=)
                          6: cwLNwp_coJ6aDz99IRPahafh1lQ.crl (hash: 7Vj3plde5TJsJ6SBv8qCd1/2Zli1z8iVqtK9lDMFVew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:ce:0a:a0:61:7a:e8:d2:fc:86:b4:b5:e0:91:27:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Aug 23 12:01:23 2025 GMT
            Not After : Aug 24 12:01:23 2025 GMT
        Subject: CN=83a17ead29db5ab1f1b0e7dc5036884ece9c8f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:1e:2d:1c:b5:98:48:dc:89:40:e4:8d:4c:
                    81:32:fe:eb:61:fa:56:99:69:ea:80:78:d6:51:a1:
                    d5:ae:45:74:47:4f:86:64:3e:09:66:c3:a5:72:da:
                    33:f3:9b:40:5f:9a:8b:30:80:d8:67:96:13:db:e9:
                    47:d9:2f:7b:fb:a5:95:9b:a4:6f:87:39:b0:79:55:
                    e7:60:5b:fc:0f:bb:b2:3e:1b:05:75:2e:1f:1c:7f:
                    3b:72:16:5f:fa:73:25:03:71:e4:bc:87:28:cd:54:
                    5a:4f:9b:0e:ee:83:45:94:ad:b8:ae:71:62:e2:ab:
                    8e:da:34:5f:8f:12:c9:7e:30:a4:42:86:cc:32:2a:
                    a9:1b:e7:25:53:72:f6:be:e2:e1:9c:9d:8c:e3:fa:
                    9c:44:c2:b1:f7:81:d3:22:a3:ab:1e:67:a1:1a:0b:
                    25:94:a0:c6:ef:ef:6b:d5:a6:fc:66:40:fb:d5:36:
                    d1:d4:aa:f2:75:d7:14:5d:21:66:76:1b:17:73:88:
                    d6:de:8c:54:56:dc:f6:36:5f:54:f3:96:6d:a5:af:
                    6e:5b:e9:72:72:a3:e2:80:fd:21:b6:4f:71:88:f3:
                    5d:0e:d8:62:f5:15:6d:b4:f4:a0:09:a2:99:52:c8:
                    83:80:44:e7:91:82:f3:ed:e0:19:69:2d:43:d1:ad:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:7E:AD:29:DB:5A:B1:F1:B0:E7:DC:50:36:88:4E:CE:9C:8F:62
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:85:30:06:2a:2d:8f:31:31:a1:7a:84:ae:84:7e:39:3a:c2:
         0a:2e:f1:dc:0f:2e:ed:da:b8:c0:c0:cf:1c:ae:4f:95:39:5f:
         36:4f:7b:40:94:2e:ef:5c:8b:19:8d:63:f9:0f:d3:2a:69:47:
         f5:14:74:2f:b3:74:a4:9d:79:0c:b2:37:e5:75:ca:42:5b:99:
         b3:f5:b1:57:f4:57:13:f5:60:13:c4:2a:47:bf:35:b1:ef:16:
         56:6f:88:b6:69:99:7e:7b:d2:f8:ac:57:29:42:76:8b:64:46:
         16:6d:5c:b0:92:5d:2a:ed:b9:97:9e:49:1e:dd:a5:67:ad:73:
         f4:b2:10:a8:5e:88:ed:49:b4:38:63:36:a9:1b:98:ac:fb:8c:
         40:78:78:6d:01:6d:db:8e:0b:3e:08:65:ae:45:c2:f5:6f:76:
         8a:f7:13:92:74:a9:a5:4d:76:e4:79:33:69:09:b2:89:e9:aa:
         08:6d:a3:ae:0f:ce:e4:99:2c:cb:83:31:f0:14:20:3f:28:c3:
         40:43:24:83:84:8c:24:8e:fc:02:36:ba:17:0b:c6:ec:2c:f7:
         71:34:cd:59:40:a4:eb:15:9b:72:04:9b:f7:8d:a1:f8:b5:89:
         fd:37:2a:8f:d2:96:7f:b2:63:4b:4b:9e:70:08:d5:02:4e:91:
         68:91:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:13:02 2025 by rpki-client