Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File:                     WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier:          etNU4gklD5ByFfgT/uEeS7Zi3JgmE4NXqSxsbRRx5vk=
Subject key identifier:   CC:CC:29:E6:85:E3:D5:A7:DC:86:5C:B2:4D:06:F2:C4:78:68:79:C1
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer:       /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial:       0198D4E03B56B80A45E49F3BA99BC9B9FAD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number:          03AC
Signing time:             Sat 23 Aug 2025 03:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:01 +0000
Files and hashes:         1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=)
                          2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: qyHaBe/cT1w/g6/yITYaxB8siQ0Lu9n/9cu3yaT/0dM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:3b:56:b8:0a:45:e4:9f:3b:a9:9b:c9:b9:fa:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
        Validity
            Not Before: Aug 23 03:02:01 2025 GMT
            Not After : Aug 24 03:02:01 2025 GMT
        Subject: CN=cccc29e685e3d5a7dc865cb24d06f2c4786879c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:56:11:d8:c5:9b:06:7f:76:1c:22:6e:40:
                    e9:b4:ea:c5:31:c5:13:40:a6:3f:1e:05:7d:f3:b1:
                    22:d1:4b:13:5a:f0:18:c0:46:bd:f2:c4:ca:df:64:
                    5a:db:35:26:94:ab:53:57:ea:52:62:2c:61:e7:6c:
                    48:88:77:d3:fb:9b:a9:b4:ca:10:49:7c:db:84:73:
                    bc:91:fb:85:50:c7:b1:51:60:e7:69:58:4e:9d:21:
                    08:f1:b9:95:84:46:f6:3f:ac:1d:5c:0a:6b:bd:69:
                    97:0d:15:4d:5f:8f:5b:ec:65:25:64:c3:f0:02:ba:
                    87:63:8b:71:d8:e0:10:c9:c0:53:b3:b8:1c:9c:fd:
                    e0:27:3d:b0:c8:1d:00:10:de:d0:74:43:c3:29:2b:
                    ef:a8:7f:b8:86:54:0d:9b:fa:19:94:1f:4c:c1:0d:
                    ff:57:aa:75:8c:67:62:09:01:3e:74:aa:3d:f3:28:
                    82:02:d6:5b:85:e0:0b:14:4f:c2:5a:67:8f:28:ae:
                    ed:d1:9f:9b:a2:30:a3:5f:a2:f8:60:9d:f2:45:70:
                    2a:d5:b5:95:42:33:fa:a2:9e:1f:dd:8b:f8:45:ee:
                    b5:ab:6b:6a:98:ef:4c:f2:ec:f7:dd:30:8c:c1:f5:
                    88:3f:20:05:f9:ea:43:85:a1:77:db:bb:ec:66:6b:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CC:29:E6:85:E3:D5:A7:DC:86:5C:B2:4D:06:F2:C4:78:68:79:C1
            X509v3 Authority Key Identifier:
                keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:ee:d7:1d:be:0c:d8:71:76:42:8c:51:e0:bc:ce:ab:ed:
         fc:39:8c:ea:a2:3e:64:09:92:b5:e9:e9:48:d9:a3:ac:83:b3:
         6c:f0:f7:ab:70:5f:b6:41:cc:76:f1:0c:fb:51:59:25:53:59:
         0c:72:63:fd:90:69:7c:11:ac:de:ca:5d:cc:2d:1a:77:c7:66:
         1b:6c:b1:ca:5a:f1:bb:77:d6:2b:a0:8c:92:e2:80:25:74:e5:
         80:4f:d7:87:0c:a1:6e:75:bb:1e:18:74:8a:aa:4b:ef:f2:56:
         e2:33:00:ee:50:0a:d9:1f:41:80:3c:e0:1d:cc:77:16:a5:b2:
         e6:7b:e5:8c:7c:68:63:29:cf:95:23:4d:e5:55:b5:59:5b:39:
         e2:b3:97:1f:38:9b:26:5d:bd:5f:fb:bc:90:8b:0d:10:ad:eb:
         df:a7:b0:92:8c:d9:ef:bb:90:c6:ea:09:07:e0:ec:31:ee:57:
         07:88:64:1a:b3:ed:57:46:d5:f1:b3:47:a2:91:2a:9c:c7:ad:
         a2:31:d5:e6:0b:fb:cc:be:53:2f:94:6f:61:73:28:52:6e:cd:
         79:24:f4:81:c3:e7:57:17:cc:07:f7:c4:82:63:af:fc:af:08:
         7c:ed:35:0a:7f:e1:4f:2c:b0:33:52:b4:b2:24:16:fc:4b:9a:
         b2:87:09:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:25 2025 by rpki-client