Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File:                     wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier:          YmM+LFgfGgBqFd88yq4zxvAMpauxvsADxVVtBPGRW4A=
Subject key identifier:   D4:E2:22:9E:CC:6E:85:98:61:EE:7D:E0:02:8E:5D:8D:05:29:7C:32
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer:       /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial:       0198D47357DA6F2776CC333FE6DEFFCFEEAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number:          1658
Signing time:             Sat 23 Aug 2025 01:03:05 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:05 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:05 +0000
Files and hashes:         1: U48ecbKwcHeg61Lsn-9oJV9fZ1M.roa (hash: 4OZhDTAYRi1p6Bim6OrHHauK8Tj1XNwxbEYFfDDGDS8=)
                          2: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (hash: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=)
                          3: rbSVHILo7KFdyfKkJiVN3ULREeA.roa (hash: +QOKE2skzry0xtqfIBGKUWUhJ09lXvKf9/a8XMywLNU=)
                          4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: J4j/0zwDgKfWDC/Ko1nR5qXZbOozuA6jDMn6N2r7CVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:57:da:6f:27:76:cc:33:3f:e6:de:ff:cf:ee:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
        Validity
            Not Before: Aug 23 01:03:05 2025 GMT
            Not After : Aug 24 01:03:05 2025 GMT
        Subject: CN=d4e2229ecc6e859861ee7de0028e5d8d05297c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:51:6a:dc:f3:5c:0a:4f:db:8d:c1:d8:4a:
                    8c:3c:9e:1b:c3:09:5d:4e:03:fb:08:88:71:cc:54:
                    86:55:a3:27:50:61:34:b7:08:83:52:6f:5f:bd:92:
                    8a:5b:7c:0e:c2:b4:22:8b:cb:03:85:64:5e:1c:fb:
                    24:cd:dd:42:50:85:fe:3c:ff:2a:c5:e9:4b:bc:8d:
                    af:c9:de:d4:08:8e:d1:20:4c:ee:c7:d9:e6:f7:b2:
                    db:a9:6f:b2:a3:16:d6:a3:4f:7d:b2:70:cc:2a:c0:
                    ed:13:3e:83:cd:1e:bb:97:d5:cc:03:9c:e4:ca:1a:
                    a3:dc:84:53:c6:d4:b4:52:a8:95:6c:6c:fc:88:ff:
                    bd:4e:f0:22:27:a9:6a:c2:60:d6:72:ca:88:37:7f:
                    d5:60:2d:a7:15:a8:96:0c:e9:5e:36:57:2c:ee:4b:
                    bd:c8:c3:5c:6a:78:32:7e:1f:dd:50:7b:82:7a:be:
                    7c:d7:b9:5e:0b:90:ff:5a:c1:4a:61:46:f6:68:d0:
                    42:c2:83:dc:c7:87:56:a4:47:27:5c:bb:aa:0a:99:
                    3b:62:a5:22:0e:2c:fa:fc:ee:ba:f8:0d:3f:64:d6:
                    2e:ae:70:f3:4b:cb:80:4f:fc:25:9f:10:93:8a:8e:
                    7d:ae:79:2d:63:fc:8e:02:36:1a:18:36:d9:8f:21:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E2:22:9E:CC:6E:85:98:61:EE:7D:E0:02:8E:5D:8D:05:29:7C:32
            X509v3 Authority Key Identifier:
                keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f6:29:cc:fc:91:a1:d4:79:26:f5:b1:cc:dc:ac:75:97:5a:
         8b:64:06:49:8e:7b:ac:76:1d:55:ad:e1:49:3a:7b:ed:21:a1:
         0f:03:26:9d:cd:5b:6a:e2:2b:82:00:3c:04:dc:0e:76:4b:30:
         46:ea:51:6b:dd:a5:fc:4c:63:7d:17:c1:5f:c4:5b:79:73:ed:
         da:fe:97:12:93:dd:11:16:06:1a:3d:4b:aa:83:22:9f:3f:5c:
         02:72:a3:f0:fb:44:9f:78:66:3b:e2:57:66:2a:8f:4d:05:fd:
         f7:75:ea:d7:b4:10:f4:3f:be:09:09:fb:a5:ae:ac:71:3f:50:
         04:5a:77:19:b9:f4:3a:56:66:16:64:0f:8d:f9:e0:70:ae:ea:
         c0:d3:18:08:34:0d:8d:ac:28:63:75:d6:6e:21:ff:3b:e4:e5:
         d2:ae:9f:82:5b:89:5c:2c:e8:86:8f:1a:82:8a:18:c8:96:2e:
         f0:39:67:19:99:fb:b5:21:17:68:00:69:e7:65:99:78:fc:8c:
         77:fd:f1:f2:4f:20:cd:b8:19:25:93:2a:67:b0:88:4e:c2:bf:
         cc:08:e4:d0:89:aa:b4:75:fe:ff:16:db:ef:b0:b3:d9:a1:c8:
         3d:ed:ad:e6:fc:45:83:54:26:04:e6:14:58:47:d6:c2:de:78:
         a5:34:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:42 2025 by rpki-client