Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File:                     wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier:          M4TUrIgw6q6IG3qatV17OFrjoOQUGO1unZVFoCdD7tA=
Subject key identifier:   ED:87:66:0E:84:A9:1D:70:F1:ED:6E:4F:09:09:EF:AA:D5:56:7D:E5
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer:       /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial:       0198D5BBDAA89EFB6C77909D0DF43BCF16C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number:          059E
Signing time:             Sat 23 Aug 2025 07:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:54 +0000
Files and hashes:         1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=)
                          2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: VGuWsVCi1g5hsge1+7sIzhUtQmyy4wQgI9Vz+XKId8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:da:a8:9e:fb:6c:77:90:9d:0d:f4:3b:cf:16:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
        Validity
            Not Before: Aug 23 07:01:54 2025 GMT
            Not After : Aug 24 07:01:54 2025 GMT
        Subject: CN=ed87660e84a91d70f1ed6e4f0909efaad5567de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9d:03:3e:ad:ec:0a:fe:85:57:5c:f7:cd:6d:
                    6d:53:42:00:7b:71:ef:6b:b2:67:87:87:ba:22:4d:
                    b4:a2:cf:78:f1:38:ed:6f:6d:c9:b3:9a:5b:91:f6:
                    1e:0e:d4:e9:cb:18:8a:5f:c7:89:49:d7:5b:dd:e1:
                    cd:de:c5:90:d1:fa:4c:9a:fe:e6:b8:9a:17:e7:2d:
                    bf:61:41:07:b7:1d:5b:0c:14:86:e9:08:15:d3:43:
                    d8:dd:11:77:11:4e:aa:76:78:49:25:6f:ac:8e:05:
                    f6:b1:1f:f7:fe:47:3f:85:66:88:9f:41:28:10:1d:
                    fd:2e:c9:dd:2b:a9:32:a6:b2:f0:39:ee:12:66:55:
                    d9:5c:c1:6e:03:ad:20:26:74:99:d2:46:28:38:9b:
                    08:77:a7:02:77:fd:d7:af:b6:16:9a:93:16:47:7d:
                    75:2c:6f:24:a7:ae:4e:cb:ef:07:ce:58:45:68:67:
                    80:2e:ef:3b:49:36:67:2f:c0:c0:a7:d6:90:31:d8:
                    bc:62:2d:79:a7:28:d7:90:16:ca:98:40:eb:41:6c:
                    cb:05:7f:0e:19:dd:ff:1a:2d:bf:ee:9b:5e:d5:c1:
                    1a:42:f9:2b:b3:04:1b:14:5c:d0:9f:df:f3:9a:8b:
                    85:06:17:61:5f:dc:1f:fd:25:44:7d:a0:7c:3d:8f:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:87:66:0E:84:A9:1D:70:F1:ED:6E:4F:09:09:EF:AA:D5:56:7D:E5
            X509v3 Authority Key Identifier:
                keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6d:0d:38:8c:88:fe:ec:aa:80:72:a1:c6:9c:e5:18:9d:da:
         26:1d:6f:5d:ad:c8:60:6e:ff:04:b5:8f:6f:ca:78:3f:4c:91:
         b0:25:23:7b:3a:9e:16:fb:64:b9:00:b7:79:50:15:e2:4a:0d:
         45:53:62:7e:2e:51:1c:80:9d:d0:54:3d:e5:ff:d2:4e:2a:ba:
         23:ff:54:40:cb:89:2c:c0:32:bf:8d:86:54:5e:3a:d1:8e:e1:
         c0:31:2f:f3:44:86:6c:58:df:a3:55:7a:b7:cc:3e:f5:db:f3:
         d7:b9:0c:b3:db:73:73:87:4e:01:47:c1:f3:33:97:8a:3c:af:
         7f:0f:d4:3f:f4:15:13:25:57:2c:88:84:fa:c2:7d:6c:31:cf:
         cb:eb:52:42:a5:e2:61:23:a6:9c:af:40:9e:cd:11:83:a8:ff:
         5f:28:44:c2:e5:b2:76:83:2b:60:95:60:2b:8d:b3:53:f3:d9:
         d8:78:c7:be:63:90:b1:1e:d1:05:29:e7:b9:1c:fd:6f:90:60:
         47:db:e9:b3:0d:cf:f7:54:2b:b6:8c:79:03:3d:0d:7b:07:ae:
         d0:ff:c1:fd:f8:32:23:e1:40:18:f9:ec:03:35:51:f1:ad:6e:
         91:78:08:24:46:4c:49:e5:c7:b5:d1:36:4e:bd:3b:0b:f6:d6:
         d8:5e:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:39 2025 by rpki-client