Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File:                     wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier:          KFz93L/az2EYKPl7SoUO6rju8QQ9DWeqzP5RP6wbOTU=
Subject key identifier:   D1:A0:9F:71:D5:14:B6:7E:7A:1A:99:A6:D6:C3:E8:C5:77:2D:B2:75
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer:       /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial:       0198D5F17F3B52C3003CE08AC7E4790336CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number:          05BF
Signing time:             Sat 23 Aug 2025 08:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:30 +0000
Files and hashes:         1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
                          2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: MJPCesXYUm0X5jmC7NetLZD/5kYs7DU5I/UC/dT1GEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:7f:3b:52:c3:00:3c:e0:8a:c7:e4:79:03:36:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
        Validity
            Not Before: Aug 23 08:00:30 2025 GMT
            Not After : Aug 24 08:00:30 2025 GMT
        Subject: CN=d1a09f71d514b67e7a1a99a6d6c3e8c5772db275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d6:69:26:d3:9e:ce:d6:49:c9:4b:76:da:48:
                    50:0b:27:4f:4d:61:c2:0b:33:ee:e9:d7:78:fd:45:
                    05:6b:95:c6:49:2d:8e:b5:fb:8c:09:a3:10:3f:61:
                    56:47:11:03:8e:12:42:a5:a6:28:07:89:a6:ff:56:
                    a0:7c:9e:b1:c5:cf:a3:89:b5:8e:b8:4a:76:e1:33:
                    38:b4:b0:fb:41:91:d7:7d:47:91:04:a9:c3:20:eb:
                    e8:4f:e6:c0:f6:13:ce:50:81:76:37:70:8d:ed:50:
                    fc:51:de:7e:07:06:92:e4:60:de:74:fd:8d:06:c4:
                    e1:0e:5a:86:9e:50:fd:46:35:47:8f:11:ef:a8:56:
                    26:1f:3d:f6:be:90:cc:c4:5b:5c:65:1f:ad:8c:ca:
                    c6:d9:9e:bf:03:07:da:21:65:db:35:52:c6:00:06:
                    a2:50:46:e8:99:2a:7d:b4:d6:c2:f7:b0:61:10:7d:
                    9e:b5:35:a3:07:63:fb:ef:07:6c:84:90:35:7c:05:
                    f5:5f:7a:65:4f:e9:9b:83:f5:78:6d:a5:07:6a:25:
                    11:7a:ec:e7:ba:92:57:f2:5f:af:48:95:d7:a7:d9:
                    42:d1:ae:ae:c1:d5:7f:fd:56:21:4f:f0:18:99:1b:
                    dc:0b:75:a8:5e:49:d0:80:6c:71:7d:63:5f:bd:64:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A0:9F:71:D5:14:B6:7E:7A:1A:99:A6:D6:C3:E8:C5:77:2D:B2:75
            X509v3 Authority Key Identifier:
                keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:df:bb:4e:21:f3:df:aa:dd:59:d3:3d:5e:38:93:c8:62:42:
         d7:6b:4e:17:cc:69:3a:5c:ce:c5:f3:ef:80:ad:19:db:2a:aa:
         b5:e3:49:45:a7:d8:07:a2:65:37:38:a4:32:f2:68:ae:e3:dc:
         2e:ef:96:b1:a0:d0:01:69:6a:7a:d2:6a:5f:a5:ba:a4:d1:36:
         58:59:7c:5c:6e:88:07:99:d9:c0:b2:94:18:b6:c5:b0:e7:81:
         47:3f:2b:92:fa:73:0d:6a:7e:0a:02:c8:31:e3:79:17:a9:15:
         66:76:fa:21:30:03:4d:8e:e0:2d:78:b1:f1:44:d4:55:f9:82:
         4d:a5:27:6e:79:a8:52:15:e0:1b:1a:62:81:f7:16:09:b5:5b:
         0a:ea:52:56:12:61:8c:fb:12:e3:1a:7e:90:44:a2:fd:7d:e8:
         4b:89:cb:c3:af:14:b8:fd:46:7d:d7:0e:40:c4:d2:cc:f5:b6:
         c6:61:42:e0:ec:a5:00:69:dc:fe:60:b9:21:d1:85:18:eb:8c:
         bc:be:fa:c7:bc:57:6c:98:f9:23:14:8b:51:5a:96:a1:70:9c:
         d9:05:67:63:52:ac:47:5b:19:d0:64:6a:47:54:d9:fc:4a:b6:
         8f:5e:3a:2d:96:38:56:8b:f3:c4:bb:9d:ff:80:7f:c0:57:65:
         5f:0a:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:48 2025 by rpki-client