Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
File:                     wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft (raw, json)
Hash identifier:          VAW8vK6LRGF28+D3bvzkYQ6/wxQI0CYPEyq4K8k9ZTc=
Subject key identifier:   4A:3B:57:0A:4A:57:17:B7:58:21:47:AD:AA:51:19:EE:D5:C0:07:03
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Certificate issuer:       /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial:       0198D6CDBE4C3B9171DF39301A6C98625166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
Manifest number:          1659
Signing time:             Sat 23 Aug 2025 12:01:04 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:04 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:04 +0000
Files and hashes:         1: Jgr7sI_MQ1aofzWtw-nihD3i2Oo.roa (hash: gaxxG0d8OZJYS5NjwczzEeAHbzOn6c5dbyMUhDM1ej8=)
                          2: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl (hash: f0rrGe5s77BG2vPbS1FMiPPBdV/EyOKiTbO/R2iKPP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:be:4c:3b:91:71:df:39:30:1a:6c:98:62:51:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
        Validity
            Not Before: Aug 23 12:01:04 2025 GMT
            Not After : Aug 24 12:01:04 2025 GMT
        Subject: CN=4a3b570a4a5717b7582147adaa5119eed5c00703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:de:12:18:9c:54:0c:fc:d5:89:cc:9c:cd:
                    15:d9:e3:0d:f8:97:d0:3e:95:f6:d0:89:fa:b1:e2:
                    0f:f3:e4:c9:fc:fc:90:7b:36:07:82:b6:a3:ae:60:
                    11:c3:db:2e:44:4d:12:ff:b2:45:d3:3b:d6:aa:e0:
                    7d:22:41:b9:5d:9c:19:22:f1:31:69:73:61:c8:bc:
                    ad:98:88:1b:eb:4f:b8:87:16:0e:6f:76:4e:c0:e9:
                    96:f0:80:31:3b:ae:d0:50:c4:f7:bf:0b:b4:74:f4:
                    c2:d1:e4:73:8c:34:9a:50:00:d4:0a:03:7b:fd:d9:
                    70:4b:b4:b8:3f:c2:47:d7:a7:00:e5:93:43:0b:d4:
                    d5:c2:52:c5:9c:73:77:d1:8f:1b:6b:fc:25:37:81:
                    8c:b3:f6:5f:94:56:d7:92:fe:81:39:7f:2e:5f:e4:
                    23:09:60:5d:88:c3:46:e0:db:3c:17:52:26:53:bf:
                    c7:5f:aa:90:72:90:62:8b:69:0b:82:9b:67:ed:f4:
                    9d:22:b0:8a:c7:4e:80:95:62:94:f3:fd:17:a3:27:
                    6d:28:1d:15:2d:92:77:ac:68:c4:69:5d:1a:93:4d:
                    35:62:4b:e9:ca:6d:d2:00:23:74:8d:83:1b:75:0e:
                    f5:40:9b:9a:a4:42:81:73:c4:5c:d8:13:ec:7d:97:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3B:57:0A:4A:57:17:B7:58:21:47:AD:AA:51:19:EE:D5:C0:07:03
            X509v3 Authority Key Identifier:
                keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:06:ec:99:50:9c:83:dd:ed:da:2b:bd:ad:9b:6c:1c:c2:
         a4:f7:a4:01:b4:b1:8b:60:1f:fe:55:ae:b2:16:63:c5:52:33:
         d1:4f:38:ed:65:02:88:ec:48:1a:45:d4:1e:ab:90:4e:46:a9:
         7d:c0:07:95:e0:a2:65:73:55:4c:2c:f6:07:24:bb:f3:7c:6b:
         53:bf:4c:6c:66:40:5a:43:d0:20:c9:b1:54:db:b6:7f:b0:bb:
         08:a9:e7:2e:a4:2b:fe:a4:d6:40:bd:01:58:57:3d:fb:c5:23:
         d3:df:44:83:b6:fd:45:80:93:81:b0:b2:fc:cb:e4:91:02:28:
         51:81:6b:94:1c:68:05:c4:96:cc:3d:0f:22:b3:1b:83:c2:e1:
         80:c2:2e:29:01:44:5e:b1:92:f1:0e:f1:e8:5e:46:0c:0d:8a:
         ff:08:c6:5c:ac:89:94:12:ae:5d:c5:77:51:b0:d7:ba:c9:60:
         c0:78:05:b9:56:fc:2c:7a:0b:70:5f:1c:7a:1a:c1:f6:35:33:
         de:a3:6a:36:50:26:bc:bf:23:7e:17:04:3c:1c:e6:b3:aa:0a:
         72:f1:2f:4d:d4:5a:65:24:37:68:0a:2f:96:76:c2:1d:d0:87:
         85:7d:01:b4:30:cb:30:fa:94:07:d4:38:5f:24:49:ba:88:4a:
         f3:33:03:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:57 2025 by rpki-client