Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
File:                     woONHzsjG_cuRT3XjEtQrACf9_E.mft (raw, json)
Hash identifier:          24AVm+NdYfhm9DwXpwmiMjwHA8d2YAVKe9uYqYyRvos=
Subject key identifier:   BF:C2:4E:E2:3F:7E:74:63:6D:E3:B9:43:63:14:AF:F4:3F:DF:ED:26
Authority key identifier: C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1
Certificate issuer:       /CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
Certificate serial:       0198D6987DCD163E3A6043D2926A20E759C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 11:02:54 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:54 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:54 +0000
Files and hashes:         1: fM16NL7UA9ErJ0RNfb8ePLmU6tQ.roa (hash: 2mPsCiT6kK+HE+XcnPI9z3k0mcNw38StY2DELHnEXqY=)
                          2: woONHzsjG_cuRT3XjEtQrACf9_E.crl (hash: GDqlfSH55qtL/zaZZKe7h+6eQ4l4LgoOl1Zt/tm3Lmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:7d:cd:16:3e:3a:60:43:d2:92:6a:20:e7:59:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2838d1f3b231bf72e453dd78c4b50ac009ff7f1
        Validity
            Not Before: Aug 23 11:02:54 2025 GMT
            Not After : Aug 24 11:02:54 2025 GMT
        Subject: CN=bfc24ee23f7e74636de3b9436314aff43fdfed26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:10:83:f8:91:63:5a:2a:ea:85:bc:a3:ef:
                    6a:e8:32:5d:4d:cc:f1:48:1a:59:13:ac:84:1c:9e:
                    5b:45:5e:00:a7:0f:2e:cd:55:84:8e:bb:5e:c7:b5:
                    53:6d:77:1e:9d:5e:73:07:ac:5f:d4:b4:0a:3a:62:
                    c1:5f:b5:fe:d1:12:13:1b:b3:1e:b0:60:99:b4:f9:
                    b4:f1:59:52:cd:5b:e0:46:21:ac:3b:b5:55:04:a4:
                    f1:0c:d5:45:f6:a6:03:f7:76:10:43:d6:31:a2:5f:
                    11:8e:0c:42:7b:28:55:86:22:fe:08:27:2a:2b:7b:
                    52:24:ae:88:91:d0:e4:03:72:e3:08:ca:c7:2a:49:
                    e0:03:0b:b0:e5:bd:b5:c0:68:0a:39:2d:0c:f7:5e:
                    bc:df:f0:d9:46:f0:ee:69:b7:a7:af:da:20:ff:60:
                    3e:8d:a3:f6:58:3e:0c:80:0c:67:fb:59:c6:95:fc:
                    dc:65:a4:cc:37:a2:34:5b:a2:98:b3:66:60:03:24:
                    10:87:ee:eb:66:84:20:75:4b:a3:21:05:6c:39:23:
                    f9:0c:14:cc:c4:73:a3:1a:4b:f8:03:41:e0:a4:60:
                    aa:a0:57:13:4c:94:4e:d8:f7:2d:32:36:24:b4:3b:
                    e0:f5:c9:40:a0:2f:41:d9:dc:e8:ce:34:5d:65:46:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C2:4E:E2:3F:7E:74:63:6D:E3:B9:43:63:14:AF:F4:3F:DF:ED:26
            X509v3 Authority Key Identifier:
                keyid:C2:83:8D:1F:3B:23:1B:F7:2E:45:3D:D7:8C:4B:50:AC:00:9F:F7:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woONHzsjG_cuRT3XjEtQrACf9_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/366746-c306-408a-ba7e-2b3c64f9f9ab/1/woONHzsjG_cuRT3XjEtQrACf9_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:59:a3:82:44:c7:fc:15:5e:ae:c1:fc:ac:2e:bd:a2:db:03:
         ab:2e:fa:52:c7:29:50:24:65:03:42:0c:8b:7f:42:8f:f1:87:
         01:96:13:83:be:4d:c7:3e:39:e2:cf:07:94:62:bd:99:f2:35:
         8e:64:c8:19:ce:c6:e7:2f:f2:cf:22:b9:59:23:c4:65:b9:e3:
         ec:5b:9c:ff:78:9f:cb:91:b7:b0:49:fa:89:4a:bc:1a:c2:d9:
         dc:07:ac:7d:b1:fd:7c:7d:b3:4e:bc:3c:6c:f4:76:bd:17:86:
         49:aa:e0:43:81:1b:0a:2d:cf:4f:86:f8:bc:b5:72:e2:4a:34:
         8d:3a:01:02:a2:ff:f8:05:ed:2c:96:72:ca:a4:5a:2f:58:20:
         f5:88:4e:e1:69:6b:e4:84:01:b5:c2:db:c7:61:ea:ac:a9:6c:
         71:87:ef:aa:4a:5b:ce:3c:73:54:78:d4:6f:17:97:00:2b:e6:
         4c:ca:6d:fe:31:a5:88:6f:a1:73:70:f1:f3:bb:72:79:33:80:
         62:77:e9:24:0c:9d:22:12:24:50:20:d8:0f:0c:6b:5b:ba:62:
         f7:18:bf:38:58:91:bc:dd:78:cc:3c:e1:da:ea:f7:05:0a:ef:
         24:e6:da:db:15:4e:6f:0a:11:04:d4:47:f5:5e:d3:4f:27:0f:
         7e:cb:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:12 2025 by rpki-client