Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File:                     wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier:          7Zpjy5Ka+scgFT+qHGYBdTXUiFYtwSRa58+rknmi4cg=
Subject key identifier:   DB:64:0D:15:F0:97:6A:73:5F:9C:35:3A:F6:3C:D5:CD:00:73:7B:F1
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer:       /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial:       0198D515FC675BA4B3F476945CFBB03082B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number:          0210
Signing time:             Sat 23 Aug 2025 04:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:44 +0000
Files and hashes:         1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=)
                          2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: Six3oeapdp2Ysa8+vXLqFoYM3RcE9nzlHFPgGOZYEvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:fc:67:5b:a4:b3:f4:76:94:5c:fb:b0:30:82:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
        Validity
            Not Before: Aug 23 04:00:44 2025 GMT
            Not After : Aug 24 04:00:44 2025 GMT
        Subject: CN=db640d15f0976a735f9c353af63cd5cd00737bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:dc:d2:8c:d4:de:2b:56:0d:ff:89:f1:f1:
                    ed:0c:40:37:9a:59:46:29:40:c3:32:3f:0e:5c:40:
                    00:aa:42:d1:e1:b6:75:94:1f:72:97:e2:02:06:ba:
                    62:20:bf:f6:c4:f2:9c:5e:59:53:8e:c7:b0:ca:db:
                    d1:70:68:46:6c:e1:b6:cc:b2:e5:74:50:07:37:2b:
                    dc:69:83:c6:21:39:8f:49:d0:52:94:6c:08:6b:a5:
                    e6:b0:88:b1:e5:9b:f2:e4:2e:60:cb:16:96:fe:99:
                    e5:5d:c9:7a:d7:7d:f4:13:8b:a4:17:4c:4f:67:5c:
                    c1:d5:ad:09:fd:dd:c7:54:65:01:fe:3b:77:31:ce:
                    da:9f:2c:6e:80:74:09:2d:66:3a:b4:19:03:3f:7f:
                    22:0b:c3:57:43:47:f3:36:47:dc:99:74:45:f5:9d:
                    bc:8e:25:c0:c4:91:10:19:2d:70:ca:0e:1f:11:1d:
                    c6:d9:10:a9:55:d0:76:17:be:5f:50:78:58:27:f5:
                    b1:08:b4:0d:cb:e7:63:35:41:7c:24:0d:47:3f:ee:
                    c6:af:84:7d:2e:be:8e:8b:e7:52:97:fd:7f:7e:12:
                    4c:08:c8:ed:af:e3:74:3e:3c:f6:14:8e:2a:4e:28:
                    3e:fe:9b:91:42:92:b9:91:42:7d:85:94:70:7a:39:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:64:0D:15:F0:97:6A:73:5F:9C:35:3A:F6:3C:D5:CD:00:73:7B:F1
            X509v3 Authority Key Identifier:
                keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:20:ae:71:f1:e4:68:e4:e5:7e:aa:54:ba:77:5b:0c:58:74:
         87:09:31:9d:27:25:d5:6d:88:65:ba:b3:fb:eb:cf:ac:4e:84:
         ef:6b:45:6f:49:ef:6a:f2:c4:fb:61:5e:fc:cb:70:1c:4b:e7:
         ce:64:6a:ad:5a:60:4e:bd:c8:50:8e:19:d1:11:1d:18:99:ff:
         51:bc:60:a4:51:8a:84:ea:c6:c9:4b:a7:09:d4:ab:31:da:1a:
         7d:15:46:4d:53:a2:f1:5b:ce:fe:d5:19:03:8e:f7:6b:4f:5b:
         3e:85:71:82:98:d1:60:a4:e7:57:99:17:9e:b8:fb:a7:08:a3:
         23:4e:3e:9d:cb:8d:11:b9:0a:0e:09:c1:63:6e:02:41:5d:68:
         51:6b:02:3c:4f:3a:4a:52:cc:96:ea:13:d0:06:3c:fa:64:c7:
         cd:1c:c5:4a:22:87:10:ef:98:e0:fc:48:1c:8d:73:bf:a4:7d:
         20:43:69:5d:97:1d:26:78:e4:34:5b:c3:29:6e:71:e2:46:b3:
         7f:c4:49:de:81:01:ee:b2:43:da:13:8c:e7:c7:21:ce:40:a9:
         5a:3b:c8:f4:00:27:9b:12:e0:d4:a5:37:fa:22:94:59:d1:9d:
         5a:b6:15:75:08:55:da:8c:3f:44:9b:77:b1:63:08:34:39:12:
         4d:b7:59:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:00 2025 by rpki-client