Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          yY4GV4F5nj9DR3m+mqpBZq+xwHpw1EI7LbqTIJ+kOEo=
Subject key identifier:   34:C9:4A:6C:3C:FF:53:AB:F3:70:8F:AD:71:09:1F:95:3B:68:D2:B6
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       0198D5BB8446C8F0E98C44162C9133067AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          0F99
Signing time:             Sat 23 Aug 2025 07:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:32 +0000
Files and hashes:         1: Xx4qE33JyRm22QhkLWfKDRWAGnk.roa (hash: VBDGbrM1tTGjVGL2Bxa5hAlgL/jyV9v4XsVJ8TB6uSs=)
                          2: eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa (hash: I5NjIqWx/H03PJ2xIH/VMY1e8Yxikj5eCAeypnxIYcY=)
                          3: mHOne7l3lhdaqSro0d11vLE5d_4.roa (hash: 3sZoQqde77oR7zY/rsYSyM4QGdtUrSErY7LS0PKr8xo=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: hpQR5hthYHcBXAu2wBHoPwU7h6CEoWjz8upE2lAdoOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:84:46:c8:f0:e9:8c:44:16:2c:91:33:06:7a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: Aug 23 07:01:32 2025 GMT
            Not After : Aug 24 07:01:32 2025 GMT
        Subject: CN=34c94a6c3cff53abf3708fad71091f953b68d2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:ff:69:b2:85:5e:99:a0:b5:a8:4c:f5:80:
                    f6:08:3a:b4:1d:fd:d7:78:ab:56:58:e3:ef:c6:98:
                    87:bd:33:4e:00:b4:07:4e:0e:6b:d0:52:a2:7b:fc:
                    27:2b:5a:0b:c2:bd:67:c1:4f:cc:d2:60:6f:5d:1d:
                    1c:ef:ed:67:15:13:80:5f:be:dd:06:12:cf:52:b5:
                    cd:c3:a8:1c:18:13:ba:8f:22:e7:a3:6a:ac:6d:c5:
                    9a:70:a9:b2:2c:da:60:06:07:72:cf:d4:cb:f2:44:
                    d4:32:43:1f:0c:fa:e3:b2:51:6b:68:6d:91:c7:34:
                    9d:4a:ae:91:96:85:2c:42:8e:e9:47:27:07:df:2e:
                    a3:d0:71:6e:34:f9:ba:7b:8d:4f:a7:c3:b0:fa:44:
                    8c:b0:f1:96:15:d4:a3:7c:de:f8:33:1e:4a:f1:f2:
                    60:9b:8e:ce:a5:e0:59:01:da:b9:16:97:13:80:f6:
                    1d:02:06:07:f8:b6:e2:16:70:45:fe:d2:29:2e:90:
                    74:ee:0d:cc:3c:3e:a7:79:cd:28:52:95:95:35:fe:
                    70:c3:3c:e0:e5:ef:42:d6:cd:1e:f5:49:aa:4e:b4:
                    4b:d6:17:2a:da:37:59:3b:ad:2c:67:0f:45:91:c7:
                    a8:11:7a:8d:e3:92:15:0a:eb:92:14:8a:f0:01:b9:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C9:4A:6C:3C:FF:53:AB:F3:70:8F:AD:71:09:1F:95:3B:68:D2:B6
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:c5:bc:f3:e6:3b:25:3d:82:12:04:9b:1e:4d:11:2c:24:
         15:b5:ab:c9:c9:94:be:e8:1b:5d:bf:39:16:61:6a:fa:23:e6:
         36:3c:69:e0:42:70:57:34:d2:94:c3:28:60:94:44:a0:b6:8f:
         89:c8:2b:8f:6f:3a:c9:97:d9:35:3f:6c:7e:2a:6e:17:14:9d:
         88:15:a5:5c:1c:60:1e:43:e5:db:72:c3:76:87:eb:4c:6b:87:
         e3:93:48:ee:1b:73:4e:5e:ac:c7:d8:27:50:4c:21:3b:06:ed:
         b0:1a:b8:c9:7a:aa:2e:50:39:7a:18:66:90:7e:8c:16:1b:c2:
         47:c4:64:df:1a:15:de:a1:b0:96:0e:d0:e1:e7:3a:67:f7:08:
         24:43:9e:62:97:42:a2:a5:41:8f:ab:08:8b:e2:02:cf:29:0c:
         b2:2a:91:de:e5:00:88:84:db:ca:b2:76:f4:21:a6:0d:d2:97:
         3e:d9:89:98:08:60:7a:28:05:7d:22:be:3c:e0:26:f6:cb:8c:
         0b:e6:de:84:a7:2b:64:48:f8:47:0f:9e:2f:69:96:03:c1:db:
         bd:cd:02:f6:8f:95:1c:52:b6:6a:a9:fb:e1:c6:c5:6b:b9:aa:
         d0:a2:91:d2:7d:c1:00:4c:ea:39:e0:f4:57:ea:06:91:6f:da:
         bf:a3:d3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:18 2025 by rpki-client