Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File:                     W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier:          Fi4Hvv79p9QDdbtvWP7fZ2ExCUlv9VmVYg7DQq6xYIk=
Subject key identifier:   95:27:61:46:95:93:A7:EC:16:89:FD:D8:40:3D:5B:FB:10:7C:F4:61
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer:       /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial:       0198D66122FC9F3DC27E50C3010F0B983AED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number:          0BEC
Signing time:             Sat 23 Aug 2025 10:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:26 +0000
Files and hashes:         1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=)
                          2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: kg56o/tY+/tCh6lTbwwMyGniMXuVf/xAeXkXD3FA6nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:22:fc:9f:3d:c2:7e:50:c3:01:0f:0b:98:3a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
        Validity
            Not Before: Aug 23 10:02:26 2025 GMT
            Not After : Aug 24 10:02:26 2025 GMT
        Subject: CN=952761469593a7ec1689fdd8403d5bfb107cf461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:a2:ac:c2:36:54:df:d5:d3:f7:c3:c1:1c:
                    5d:8c:f2:f4:e5:f7:32:57:46:b7:12:8d:f7:84:86:
                    3d:da:c6:1c:90:71:b0:c3:78:7e:30:90:c9:eb:ae:
                    32:20:03:89:8e:f3:9c:7a:c4:e8:ac:78:15:3c:73:
                    c5:8e:1a:d7:85:e0:25:65:38:44:ed:f0:19:e9:0f:
                    23:35:34:05:8b:db:57:5f:84:67:52:38:9e:24:29:
                    5a:36:8e:b2:83:f1:45:48:cd:a5:d4:1c:92:97:27:
                    6b:68:e5:3d:65:be:41:b4:c9:d3:b1:2b:d4:52:46:
                    0d:52:45:e5:40:41:34:a5:70:50:bb:a1:f4:04:fc:
                    16:a5:94:af:49:16:b7:94:6d:67:b6:5e:27:5c:99:
                    ce:12:b6:3d:d7:6f:e1:d6:5b:ac:07:9f:3d:7b:51:
                    a4:fe:13:af:c5:76:a8:c3:c2:79:03:de:7e:24:38:
                    76:c6:9f:96:76:b4:a5:29:e0:25:0f:10:d5:c8:56:
                    83:75:50:1d:17:ea:4e:b5:b4:7d:6c:84:62:5e:1e:
                    f6:78:2e:19:3f:b0:c7:f1:55:72:5e:3d:24:91:a5:
                    4d:1f:97:32:9c:02:11:b8:ec:6a:60:e3:e8:6c:da:
                    ab:73:56:07:ab:bc:b3:d3:0a:95:69:0d:56:c2:6f:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:27:61:46:95:93:A7:EC:16:89:FD:D8:40:3D:5B:FB:10:7C:F4:61
            X509v3 Authority Key Identifier:
                keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ea:0f:6c:c1:3a:f9:07:bd:e3:de:96:6b:f8:0f:2a:67:1d:
         1a:26:7d:ff:ae:32:0c:86:31:de:53:7e:8d:3c:c3:4e:0e:2d:
         46:2c:2c:db:5a:92:cb:18:df:31:69:b4:55:e3:76:96:0a:61:
         fb:18:1e:a9:e7:ba:36:15:e4:13:2f:49:78:4d:b3:9c:ab:80:
         b7:47:37:0f:23:75:f5:33:f6:b1:4e:6a:72:84:09:06:7b:e0:
         84:c1:58:b7:a6:4e:6b:5f:36:f8:dd:ca:5f:5a:8f:59:cd:74:
         24:87:1f:86:da:bc:8a:1b:50:62:22:5a:55:f8:37:25:e5:44:
         97:82:69:55:b3:1a:0c:a7:1b:52:7d:b8:52:0d:f2:54:19:ef:
         c8:59:9a:70:c7:32:51:28:a7:58:0b:7e:c7:f4:97:bf:a6:4d:
         84:4c:de:9e:d6:77:26:e8:59:4d:c6:d6:1c:f6:aa:37:01:94:
         f0:fa:fb:b2:de:8e:ef:67:db:bb:41:d8:6a:1e:e2:59:9f:1a:
         51:fd:bd:ab:6f:73:40:db:8d:1f:42:70:94:55:64:2c:1b:b5:
         48:d8:02:13:78:2a:bf:8f:14:d2:e7:5f:16:3d:f3:d3:43:34:
         6e:7e:98:06:97:43:ed:88:81:21:41:ad:f1:02:bf:25:b0:9d:
         1b:77:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:04 2025 by rpki-client