Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
File:                     WC8uFTMWTruNhxz28sSaVn6iZjU.mft (raw, json)
Hash identifier:          u4+YK8SHsKFRptjB8GN27DlSxersVIC9YkNRXj46XxE=
Subject key identifier:   67:8B:97:2E:64:66:BF:D7:BB:76:4A:A9:66:BB:A7:10:FC:BE:CB:4B
Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
Certificate issuer:       /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Certificate serial:       0198D5BC07B60590F1548A646A1D37CA0634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
Manifest number:          0D68
Signing time:             Sat 23 Aug 2025 07:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:06 +0000
Files and hashes:         1: WC8uFTMWTruNhxz28sSaVn6iZjU.crl (hash: ed9goZ/yQTrJEX/dSegO5CKEX3Z5Y7f2SHqpcidtBgI=)
                          2: Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa (hash: bVLYhkF2BtQwTz9AAyN5WatAhOO7gcaRPVhwXWE9H14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:07:b6:05:90:f1:54:8a:64:6a:1d:37:ca:06:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
        Validity
            Not Before: Aug 23 07:02:06 2025 GMT
            Not After : Aug 24 07:02:06 2025 GMT
        Subject: CN=678b972e6466bfd7bb764aa966bba710fcbecb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:d4:b1:42:37:3d:08:6e:60:36:af:ad:de:
                    21:01:32:a7:9d:01:84:6f:28:a5:6e:ac:75:fd:a9:
                    ec:55:87:68:79:19:15:35:ec:23:92:e7:27:11:e7:
                    8b:5c:43:3c:2b:68:b1:00:d7:57:9a:f0:e6:ef:14:
                    e9:eb:b6:ff:10:39:1b:a7:e6:cb:00:f9:3b:1d:77:
                    e5:58:25:6d:36:cf:d2:04:68:74:09:64:d0:be:93:
                    81:16:37:d6:20:05:9e:0d:c5:a1:cc:fc:80:6b:ce:
                    5f:93:39:1a:f6:63:cf:92:76:28:8b:a0:fb:43:84:
                    7b:05:76:60:0f:99:dd:67:86:e1:9a:b9:33:2e:04:
                    1f:ff:0f:38:ba:c3:66:71:1b:13:c2:7b:07:9d:81:
                    6f:90:72:a9:e2:35:85:47:23:53:c3:b8:63:f6:89:
                    3e:ab:ac:bb:d2:b9:dc:fd:e2:a7:6e:7e:c9:b6:a7:
                    f6:ce:b9:14:dd:09:6d:68:77:a6:99:69:8e:d2:67:
                    b3:72:f4:8f:23:bf:5c:d2:7a:2b:74:3e:2d:b5:26:
                    70:c7:18:ce:dd:99:dd:43:35:11:81:63:95:bc:cc:
                    f5:44:b7:4b:f3:a8:40:bc:b6:72:de:4a:49:06:e7:
                    d8:85:2f:44:ba:3c:6c:b7:09:cc:8e:14:18:ef:2a:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8B:97:2E:64:66:BF:D7:BB:76:4A:A9:66:BB:A7:10:FC:BE:CB:4B
            X509v3 Authority Key Identifier:
                keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d9:31:f0:87:80:7c:a2:02:f4:97:6d:99:08:a7:f1:ff:92:
         a7:9b:19:9e:71:4c:0d:00:41:1b:02:29:63:e5:20:0e:93:ad:
         c2:35:a5:6b:1c:4a:0f:0b:7d:fa:0c:5f:de:b0:c4:56:8d:37:
         c4:8c:bf:b2:9b:d2:3b:13:cb:cc:a9:46:65:ae:65:06:bc:24:
         41:bd:ad:4d:86:e4:fd:c5:cb:b9:74:07:c4:f9:72:21:81:63:
         b5:f6:56:2b:99:09:fc:87:de:7d:ca:7f:50:c3:7f:75:91:2e:
         bb:3e:4f:51:9b:b9:c2:ff:4c:37:c0:4b:cf:f1:0d:36:32:1b:
         1b:74:15:e4:ef:e4:25:8c:41:30:f3:a9:da:15:ec:25:39:41:
         09:ef:7c:65:e4:77:8f:a0:f4:ff:23:77:f6:e2:c5:36:93:d3:
         31:b2:4b:a1:37:8b:99:de:b4:5b:98:3a:9d:56:ad:0e:d6:8f:
         35:d1:ab:23:d0:bb:4e:1a:d6:7e:14:8a:72:8b:d2:7e:fe:48:
         a8:6d:ea:8d:a2:2b:17:27:98:e2:64:1d:10:f5:a7:dd:ac:82:
         e7:7f:c9:36:e3:dc:d8:af:19:ad:b3:28:9d:17:0e:5d:f8:2b:
         79:2a:fb:74:fd:79:dc:54:53:b9:ad:31:84:75:36:72:c8:4d:
         05:26:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:50 2025 by rpki-client