Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File:                     wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier:          2sGVDJy6beTj1LUt9DYED3ygAlg8hSlntRYLhOtHL1o=
Subject key identifier:   59:48:48:D8:92:5D:E6:97:F4:41:18:0A:51:FF:67:CC:55:82:2E:39
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer:       /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial:       0198D583F09DE2536F1F336CA37C79CB3B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number:          05F5
Signing time:             Sat 23 Aug 2025 06:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:50 +0000
Files and hashes:         1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=)
                          2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: 3yMdetZIw5lVQATxYI2aCEQn5uMG9BoSZp1UI+r7M/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f0:9d:e2:53:6f:1f:33:6c:a3:7c:79:cb:3b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
        Validity
            Not Before: Aug 23 06:00:50 2025 GMT
            Not After : Aug 24 06:00:50 2025 GMT
        Subject: CN=594848d8925de697f441180a51ff67cc55822e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:8f:8c:5f:c1:3b:55:a8:04:59:d1:81:84:
                    26:66:b5:72:41:b5:84:41:65:99:81:4b:a5:b1:79:
                    31:0d:64:2a:b4:48:7f:2a:7c:c3:e1:a0:a6:e1:2c:
                    4b:8c:94:e2:aa:48:8e:f9:98:f8:06:d8:bc:a7:2d:
                    c4:02:44:eb:26:3c:ef:5c:9f:4e:ce:2c:7e:20:b6:
                    aa:87:82:9a:ff:02:ac:a8:50:5f:b8:18:b7:55:3c:
                    12:f3:44:9b:99:5c:2a:c4:6f:52:eb:52:56:98:00:
                    fc:3f:8c:52:48:59:1b:cc:11:f5:29:30:92:ea:30:
                    d7:93:b4:7a:06:be:f3:a4:c8:4d:c5:bb:ab:e9:83:
                    21:a1:b1:74:b5:f0:b8:17:c9:36:5f:93:46:de:18:
                    b7:6f:5b:1a:63:58:6c:c6:5d:78:e5:e7:48:55:a1:
                    a5:c1:2d:24:23:47:e7:da:6f:e7:4b:8f:d5:5f:ed:
                    5f:0d:a5:98:0a:75:e1:fc:02:47:eb:87:35:61:70:
                    03:59:50:0e:d3:38:34:da:d0:f4:0b:72:ce:a6:db:
                    84:e8:8e:d1:67:1f:6b:0d:4a:96:42:4f:a3:f4:81:
                    ff:46:07:1a:7a:18:d2:77:06:97:1e:57:68:23:ea:
                    6e:d9:b7:2b:5d:47:55:e6:62:2e:3e:26:be:9f:a5:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:48:48:D8:92:5D:E6:97:F4:41:18:0A:51:FF:67:CC:55:82:2E:39
            X509v3 Authority Key Identifier:
                keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:24:37:56:c8:18:c3:a9:7c:e8:ca:54:65:fa:75:7b:f4:7b:
         93:26:a9:16:47:03:75:31:cb:4e:5b:66:b9:a4:39:c8:76:96:
         a4:f8:00:f6:ef:1a:a0:06:4a:e0:bb:92:f1:92:3d:ed:b0:66:
         74:45:d8:ec:8d:83:3a:19:86:68:af:c6:d7:46:6a:fb:1b:7f:
         66:c0:ca:ef:05:b4:d7:37:94:17:de:05:c9:fc:f8:e5:ab:9d:
         f1:77:2c:f5:ef:97:7d:0f:46:61:b6:bf:80:59:60:f3:8f:af:
         99:b3:aa:64:6d:80:05:99:36:08:27:72:9c:c1:4e:5b:b6:f1:
         2b:62:62:5d:d3:0b:cd:36:c6:d8:ea:d4:13:43:f8:f1:1f:a0:
         ad:93:52:f0:51:a1:71:d4:ab:af:39:30:47:ba:4b:15:63:82:
         ef:68:ac:d2:f5:34:1a:ea:34:f6:93:a3:ea:38:54:90:fd:06:
         9b:90:e3:ad:2a:2d:e8:51:32:14:5d:d5:68:7b:1f:dc:e9:7c:
         db:25:01:33:8e:b2:59:d7:83:b1:76:b0:3e:45:01:f6:40:06:
         ef:30:ce:30:93:bf:cb:f9:df:a5:11:f3:66:6a:69:ce:a8:b7:
         9c:9e:67:f6:b4:b2:6b:86:27:de:a4:40:1d:5b:c2:5d:b3:46:
         4e:6d:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:11 2025 by rpki-client