Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File:                     w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier:          tHKbJFLFOZqAwi6SV+ui4I3Pv+QXsBAOcpLY1LWhwvc=
Subject key identifier:   E4:9F:3C:EE:7E:4F:F7:EF:E8:6C:0F:5B:3F:7C:72:F6:D3:17:3D:2F
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer:       /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial:       0198D661307B640E4FCFA42EE4AD7EE17E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number:          0A3B
Signing time:             Sat 23 Aug 2025 10:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:30 +0000
Files and hashes:         1: Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa (hash: o5UcaRmySAHefVpyYqfIuBk+qGysWoCNDWxnf1QQroQ=)
                          2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: +ufBtErz36F2O+HEx4ppX76B+e8DUpiTyEeEuz4H/is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:30:7b:64:0e:4f:cf:a4:2e:e4:ad:7e:e1:7e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
        Validity
            Not Before: Aug 23 10:02:30 2025 GMT
            Not After : Aug 24 10:02:30 2025 GMT
        Subject: CN=e49f3cee7e4ff7efe86c0f5b3f7c72f6d3173d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:1c:4f:27:97:7f:b8:35:9b:1d:26:32:c7:f7:
                    5a:65:9a:a0:54:b6:22:77:c3:f6:b7:04:d0:36:f4:
                    1e:9b:42:dd:e9:fa:ca:46:6e:48:7d:7a:a9:57:3e:
                    f5:83:86:76:aa:2d:c4:d2:de:68:3e:4c:31:ee:33:
                    59:fc:14:1a:11:83:5b:fb:03:1e:8f:f9:e5:53:4e:
                    62:92:b7:1a:41:91:33:11:02:92:36:d0:24:12:ae:
                    06:1e:d8:4e:eb:18:cc:8e:6e:a8:1c:58:cf:3a:93:
                    cc:cc:3b:cf:96:82:e0:ae:2c:06:76:16:6c:49:58:
                    a2:0b:0a:a5:92:25:3f:fe:bb:13:58:4d:b5:3a:50:
                    b4:94:76:62:ce:c0:e1:6a:9c:b2:a2:e2:85:ad:55:
                    fb:dc:d7:c6:e4:66:fb:61:84:03:30:68:2b:97:8c:
                    7c:97:33:8d:80:56:d7:0f:19:4a:99:fc:c4:e0:2e:
                    fa:9c:52:bd:fd:78:fc:82:77:17:5d:7b:e6:31:31:
                    44:e5:30:15:f2:18:4e:0e:dd:6b:58:fe:79:ec:f2:
                    e3:5c:52:18:e7:cb:ef:1f:10:eb:78:eb:94:c1:23:
                    ab:3f:0c:bd:03:4d:e7:05:46:cd:02:d0:8a:49:d3:
                    e4:1d:fa:4f:86:7a:94:ec:02:52:e8:4e:91:85:3b:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9F:3C:EE:7E:4F:F7:EF:E8:6C:0F:5B:3F:7C:72:F6:D3:17:3D:2F
            X509v3 Authority Key Identifier:
                keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:d0:e4:06:f4:d2:dc:75:a8:1d:17:04:27:f3:d5:bb:a2:
         3e:23:91:cb:a8:a6:18:85:3a:50:f6:2e:cf:50:cb:1c:63:2e:
         ec:ce:d1:f0:f7:f2:51:c6:13:fb:9a:de:2e:8d:3e:8e:bb:c6:
         0a:06:20:00:ab:52:4d:4c:95:1d:59:bf:d1:56:36:14:58:67:
         c6:15:7b:4e:f9:4b:81:82:3d:1f:7c:0a:48:24:7b:65:47:37:
         00:7d:13:ab:97:9e:f1:4a:ae:59:f5:4f:02:b9:c9:55:5b:5e:
         7f:60:55:74:fd:ff:f9:59:c2:5b:0c:44:18:9d:a4:b3:cc:58:
         70:1c:4b:1b:28:a3:ab:7f:89:60:c7:31:20:0f:84:7e:06:37:
         bb:3a:3d:a2:64:b8:15:0d:b2:92:20:b3:e4:e7:eb:07:4d:89:
         04:8d:07:4e:89:f4:84:18:2d:fb:25:b1:65:1f:58:ca:58:9a:
         9d:fd:22:ef:6b:57:68:8d:a7:67:cd:35:2f:d2:5d:41:68:a5:
         6f:c2:09:24:4b:12:85:25:db:0c:df:fb:73:be:8e:52:83:2d:
         19:3e:ea:1d:82:de:df:a4:16:b8:bb:7c:c2:e2:ce:86:e5:8c:
         bd:27:cd:41:69:1a:4e:31:e4:8e:cf:f8:c9:58:a7:49:20:84:
         29:ff:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:24 2025 by rpki-client