Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File:                     ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier:          yDOSqy/aDf0ovD7OjB97+h6tfNn3Ol1QRpQru+6SyL0=
Subject key identifier:   83:B4:78:1E:6E:83:51:8F:18:4D:7A:A5:2C:C4:7D:84:2E:FD:12:25
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer:       /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial:       0198D4732FF12397D91F8E411DD4F0929146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number:          10CD
Signing time:             Sat 23 Aug 2025 01:02:55 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:55 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:55 +0000
Files and hashes:         1: bXwup2eDRWJRx9GTrYPVFoErhfk.roa (hash: UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=)
                          2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: d0ddy47YiCKykreRnHYiVtINSPxwTnxre3CFkAbaOC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:2f:f1:23:97:d9:1f:8e:41:1d:d4:f0:92:91:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
        Validity
            Not Before: Aug 23 01:02:55 2025 GMT
            Not After : Aug 24 01:02:55 2025 GMT
        Subject: CN=83b4781e6e83518f184d7aa52cc47d842efd1225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bd:76:29:14:47:0f:7c:fb:d6:89:43:ab:80:
                    42:d6:a3:5c:65:d1:d4:9d:77:9a:1c:75:6b:5a:e6:
                    3c:5b:43:4a:42:6e:7b:b2:97:0e:b9:00:65:b1:8d:
                    23:5d:ad:df:84:7b:03:90:9a:1e:7b:6b:c3:cc:dc:
                    f4:e4:d5:19:13:ca:e6:cb:eb:0b:0f:89:8e:fc:a3:
                    15:9f:fb:9b:14:14:a3:b7:e5:3f:97:b6:c0:4b:bb:
                    28:3f:78:a6:92:e9:66:5f:74:c2:9a:f6:c9:59:a5:
                    59:75:c8:c0:57:31:ea:9c:85:02:07:ba:87:32:5c:
                    22:e8:88:ce:73:14:0c:5a:8b:d9:95:69:a7:d1:35:
                    5f:55:af:23:18:31:b9:f0:8c:c1:29:01:de:a7:79:
                    0e:10:08:97:05:b5:e9:6f:e2:76:b0:b9:1a:12:3f:
                    44:7a:b3:d2:42:92:2c:d8:91:9f:78:7e:1a:67:90:
                    31:83:89:2a:69:f5:0e:63:33:f0:57:a6:15:2a:10:
                    28:34:1b:76:6c:a2:dd:aa:f2:30:d5:16:39:55:38:
                    9a:e9:74:83:f3:98:a2:07:33:e3:44:e9:d1:02:15:
                    98:94:a7:e0:03:29:c0:9b:19:c6:8d:f6:aa:4d:39:
                    28:b3:41:96:04:04:15:3c:d6:8e:39:ae:0b:a5:34:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B4:78:1E:6E:83:51:8F:18:4D:7A:A5:2C:C4:7D:84:2E:FD:12:25
            X509v3 Authority Key Identifier:
                keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:2a:82:15:83:31:71:8e:93:5f:67:4e:48:ad:ac:b7:bc:
         1b:d7:0f:d0:5b:30:b4:2e:35:a8:e1:4a:01:48:d5:37:a3:08:
         7b:ef:41:55:66:93:14:e3:45:fe:9c:13:f8:ad:75:63:01:e4:
         9c:1c:97:01:e9:d8:37:ce:52:53:88:94:5c:a9:15:89:0e:57:
         d4:84:d9:bc:67:a3:9e:e3:aa:43:4d:69:6c:37:dd:02:f1:40:
         aa:63:52:d7:76:01:00:7b:7f:53:a8:d8:59:9d:99:bd:cc:a3:
         3f:57:f5:bf:1e:db:14:8a:ce:ee:8a:bc:f9:a0:15:3d:fa:16:
         7c:08:76:b8:19:1c:ef:49:e6:ef:42:78:93:d0:1f:d5:fb:4e:
         c0:28:87:2e:b7:71:6d:e5:3f:fd:dc:69:18:18:98:a8:9e:34:
         58:37:2d:a5:0c:d6:41:7c:98:1d:70:a7:cc:17:66:e1:15:f2:
         fd:f6:f0:b5:81:a8:76:1d:15:10:68:ed:f8:d3:1f:d7:1a:7d:
         e5:e0:e7:02:e1:80:c5:b7:49:58:af:36:31:bc:6d:10:d7:1b:
         d2:73:63:6c:d7:16:41:a4:fd:1b:b2:22:4d:71:36:da:52:cc:
         d1:ff:e9:c4:14:8d:2a:17:19:90:1f:fd:11:ce:54:9d:53:29:
         76:ba:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:18 2025 by rpki-client