Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
File:                     wbYHxYUVNn03yfPmmUguV6M8c_U.mft (raw, json)
Hash identifier:          qnCwfw45AJi7FS5Nt69PLNuIjhowpPADYyh8hTlCVZo=
Subject key identifier:   0A:DD:0A:8A:62:7F:32:0F:7D:FF:CD:90:0B:BA:E4:20:F7:5B:19:63
Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5
Certificate issuer:       /CN=c1b607c58515367d37c9f3e699482e57a33c73f5
Certificate serial:       0198D4E04173BF46ED7787568F7E54E90635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
Manifest number:          1356
Signing time:             Sat 23 Aug 2025 03:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:03 +0000
Files and hashes:         1: MnIaRmi-qtJjMOo5DcZACYHEh7Q.roa (hash: DOu8g3e2V+bo5Ia9CdK+7hGNXc1/nocclAIwTEkGmxQ=)
                          2: wbYHxYUVNn03yfPmmUguV6M8c_U.crl (hash: IZT//YNFMNuuYt79zuh3Snp5x9HhZ0XgO3daqOsGXck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:41:73:bf:46:ed:77:87:56:8f:7e:54:e9:06:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5
        Validity
            Not Before: Aug 23 03:02:03 2025 GMT
            Not After : Aug 24 03:02:03 2025 GMT
        Subject: CN=0add0a8a627f320f7dffcd900bbae420f75b1963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:87:cc:54:e3:9c:a2:85:78:47:75:61:99:64:
                    e9:42:fb:08:66:35:c7:62:e2:21:c0:5a:13:0c:05:
                    31:4b:f9:0c:8a:bd:ef:d1:8e:b4:58:cc:2d:dc:29:
                    7c:03:14:38:29:fe:c9:eb:a1:4d:d1:8a:3a:4a:6c:
                    8a:81:58:99:1f:0e:0b:b0:68:8f:9e:34:4f:99:47:
                    5d:45:b4:c9:ac:93:0c:1a:39:a3:56:5a:0e:a2:6e:
                    bf:89:d8:fb:e0:b5:dd:7e:14:97:53:7c:a0:cc:5f:
                    a3:f9:bd:f2:dd:f8:10:72:cb:fa:0b:7f:d3:c2:ba:
                    d4:61:c6:98:34:28:49:97:3b:2b:22:d8:b6:c8:27:
                    34:d2:8f:1f:89:f7:35:98:26:d9:cf:d5:2d:2d:ac:
                    1b:12:fd:b2:c1:1c:83:de:00:37:10:d5:71:e1:45:
                    a8:32:5b:fc:3a:33:b9:2d:85:82:18:d7:af:bb:84:
                    58:5b:65:19:40:b0:df:cc:ae:2e:a1:37:a7:78:95:
                    d7:cf:b9:3a:c7:c8:05:e0:ef:39:46:56:27:ac:21:
                    f9:90:44:5c:b1:37:f0:0c:9f:a3:c3:6f:af:e6:63:
                    e2:9e:26:12:70:8a:02:d9:f0:de:45:46:0b:b2:3f:
                    69:ed:8b:72:bb:07:da:79:e3:4e:86:19:65:36:a7:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DD:0A:8A:62:7F:32:0F:7D:FF:CD:90:0B:BA:E4:20:F7:5B:19:63
            X509v3 Authority Key Identifier:
                keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:67:c6:89:82:a5:92:cd:41:ba:d3:5e:f5:df:7a:3e:c4:84:
         0b:fb:91:a6:0b:da:a5:d3:67:d0:1e:b2:7c:9c:6b:f7:71:cc:
         16:25:11:61:df:1a:57:2c:fd:65:d3:e6:12:df:d4:cb:76:78:
         47:4d:ef:f4:cf:7d:5e:88:8e:af:c0:15:19:52:06:11:e2:ae:
         d2:77:4c:67:4f:5e:63:59:09:fb:5b:18:c8:ef:71:58:ab:8d:
         31:d7:91:01:f2:16:af:d8:54:fd:09:eb:12:7e:be:9d:84:b9:
         09:0c:fa:f6:7f:97:2c:8a:8a:ee:80:3c:f0:40:0f:ce:1a:e2:
         7d:95:b3:ee:7e:de:6a:ff:51:68:3f:14:6a:42:f6:ee:6f:d4:
         7f:32:97:a4:05:35:63:9e:0e:0b:6d:d0:54:34:63:0e:29:ec:
         ff:4e:b7:b3:23:09:7b:fd:11:f9:e5:69:e3:6a:6d:2d:01:49:
         0c:43:84:57:e8:26:0b:3f:1b:17:f4:aa:99:a7:06:b6:8e:ce:
         f9:17:55:13:85:94:da:42:e9:e0:a4:4b:6a:82:8d:8d:ed:cd:
         36:3e:cf:42:59:f6:cc:41:2b:57:75:28:94:49:4e:b0:a2:f9:
         23:59:74:e3:b8:b4:23:f2:af:f1:fc:4d:01:6f:55:24:20:75:
         e3:2a:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:35 2025 by rpki-client