Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File:                     wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier:          KJQG1ADVDt2Jpfb0vEN5xZtyMueqTYk14GQls7U+acE=
Subject key identifier:   B2:B7:57:14:41:BF:0B:9A:A9:5A:E2:C8:ED:02:52:D4:1D:32:15:E8
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer:       /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial:       0198D5839EC227B61F0A249FF2BF43B41709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number:          02BF
Signing time:             Sat 23 Aug 2025 06:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:29 +0000
Files and hashes:         1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
                          2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: sRQE5nSzhRORyEDQjbtLIkdX062euOuyshUwa4Qmkk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:9e:c2:27:b6:1f:0a:24:9f:f2:bf:43:b4:17:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
        Validity
            Not Before: Aug 23 06:00:29 2025 GMT
            Not After : Aug 24 06:00:29 2025 GMT
        Subject: CN=b2b7571441bf0b9aa95ae2c8ed0252d41d3215e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:0f:b6:9a:48:c7:d8:aa:42:f4:22:50:79:
                    5a:9e:2b:ad:65:83:57:b0:3b:9b:99:57:6e:83:a2:
                    f0:fd:fc:97:a2:8d:9b:3b:45:f6:ab:76:1f:b8:0c:
                    ce:9f:06:0e:8a:47:49:73:76:5c:14:3c:f7:20:4a:
                    50:40:73:27:c5:ee:86:76:ef:10:2e:64:a8:b2:70:
                    9b:b9:d0:a1:02:6a:ed:22:fb:ae:fb:54:68:8f:48:
                    aa:3d:b6:85:11:3c:ea:b7:c3:ec:49:6f:eb:cd:ac:
                    94:38:20:cf:f1:49:be:46:d2:2f:89:95:a9:98:54:
                    ff:63:4a:ea:f9:5d:d7:45:a7:2f:21:20:20:f1:fd:
                    0b:41:02:80:c2:36:79:7a:0b:52:c0:e6:d1:d2:70:
                    59:8b:24:a3:dd:26:ec:fd:07:f2:ff:e1:70:be:7a:
                    be:e8:f9:ee:e6:1e:11:cc:05:ec:ba:9a:90:ed:98:
                    f6:52:18:b6:c6:67:78:6a:48:bb:12:00:0f:05:ce:
                    ea:e1:c8:30:a6:12:f0:17:44:5f:49:4b:96:13:19:
                    be:21:4c:6a:4e:c7:9b:85:ef:d5:14:d5:a9:b8:ef:
                    e6:e3:a8:6c:97:d9:bb:5c:67:6a:c7:7f:e9:07:d3:
                    49:d2:d8:1d:65:b9:05:d1:bd:8a:9b:94:fe:2f:0e:
                    b5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B7:57:14:41:BF:0B:9A:A9:5A:E2:C8:ED:02:52:D4:1D:32:15:E8
            X509v3 Authority Key Identifier:
                keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2a:ec:d6:dd:b1:74:89:3d:3f:00:c4:b5:3c:ee:0f:8d:f7:
         a6:07:76:7f:bd:a7:38:7f:b1:00:04:ef:00:64:8b:8b:34:b8:
         23:c5:59:4a:92:16:32:c7:13:4d:90:c7:bf:51:35:f8:e2:74:
         d9:ee:d0:71:05:ec:48:5c:0d:f2:a6:9e:1d:ba:9c:07:0a:3b:
         be:01:b9:bb:a5:c9:b7:a5:24:02:b5:05:df:dc:72:0a:b5:c6:
         78:74:54:8b:f0:9c:3e:46:3f:30:73:11:29:0b:80:80:cc:d4:
         b7:82:ce:5f:b9:93:9b:31:b9:b7:71:86:64:2d:d1:cf:4b:04:
         db:fe:29:27:91:38:2d:8f:8a:21:bd:28:c6:fd:b6:0f:85:8d:
         b7:07:f9:00:d0:19:d9:b1:21:30:bc:a9:63:3c:bd:a0:1a:c0:
         59:0c:42:0d:6a:10:94:20:d2:95:4b:d5:c8:ac:c0:4f:e9:1a:
         03:fc:87:52:9a:88:13:44:d1:be:00:26:f6:d2:08:25:ed:69:
         0a:e7:ec:8d:5d:b7:be:ff:40:c3:da:73:77:7e:68:6e:06:f8:
         7c:40:49:d7:37:43:97:a6:c0:67:97:44:8a:1a:16:2e:67:28:
         9e:1f:19:ec:d3:5b:e6:0b:cf:1f:18:44:5c:3f:f7:8e:e9:e2:
         99:16:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:58 2025 by rpki-client