Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File:                     WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier:          gdoSTYgZnPgXyIHlfD1BY9URcBmRh9JCqKMj1s+cApg=
Subject key identifier:   04:6C:56:C4:1A:D6:25:CE:CF:FE:C1:D3:57:FC:3F:EC:EC:DD:95:19
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer:       /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial:       0198D4DFD6E57FFC3DD231D3A8C854182A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number:          15EC
Signing time:             Sat 23 Aug 2025 03:01:35 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:35 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:35 +0000
Files and hashes:         1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=)
                          2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: kb/spKV5wkzWqOjUo6gmog4tH8k9e/UgZjp5nH5jMfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:d6:e5:7f:fc:3d:d2:31:d3:a8:c8:54:18:2a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
        Validity
            Not Before: Aug 23 03:01:35 2025 GMT
            Not After : Aug 24 03:01:35 2025 GMT
        Subject: CN=046c56c41ad625cecffec1d357fc3fececdd9519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:88:f5:c9:c4:fe:5c:33:a4:f1:21:46:d1:
                    0c:bf:e0:bf:60:56:8c:d5:25:2a:0d:93:3a:52:54:
                    09:48:1d:57:ab:ca:55:17:44:bb:9e:3c:7f:08:0c:
                    63:d5:f7:aa:7f:a5:02:07:af:d0:80:a7:f9:79:aa:
                    de:c1:85:8f:5c:8b:4d:40:bf:06:a7:bc:58:93:90:
                    95:12:8f:4b:f5:50:4c:da:3b:64:1b:98:b5:4f:9f:
                    c3:30:40:63:57:0e:1c:cc:ea:ff:f5:58:02:7f:bc:
                    64:91:66:84:49:90:21:0b:aa:d6:aa:14:80:37:4d:
                    8d:db:ab:e4:60:51:bf:a2:80:33:4f:5b:a2:33:2b:
                    a0:5b:09:2d:b3:b2:87:e3:49:63:4f:6e:b6:7b:b3:
                    b9:ab:fe:db:ce:8d:bf:3a:43:d2:c0:0d:87:0c:34:
                    bc:ee:f4:ed:13:6c:55:dd:c3:d9:df:78:82:3d:ac:
                    08:c6:8b:f5:ef:ff:20:a3:65:8b:16:c8:ca:52:34:
                    08:49:a8:b1:b6:e0:9b:1a:7a:64:ee:18:cb:af:83:
                    e8:e1:9a:83:e3:0c:51:44:2a:29:de:98:7a:c8:28:
                    35:a8:19:d2:0e:3f:7b:7e:bc:c8:bf:01:4b:a7:38:
                    11:85:f1:5b:f2:37:03:89:02:30:08:25:bd:f3:76:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6C:56:C4:1A:D6:25:CE:CF:FE:C1:D3:57:FC:3F:EC:EC:DD:95:19
            X509v3 Authority Key Identifier:
                keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:75:99:03:3b:fc:71:4d:9e:ab:f6:48:1c:d2:1b:ee:1c:cd:
         d7:2b:87:c4:67:31:a9:c6:12:2b:58:52:c8:12:0f:32:76:49:
         a5:92:04:cb:52:74:6d:a0:ab:b5:be:51:b8:0f:67:9c:8c:d9:
         f1:55:e5:1c:e4:61:15:cc:c1:af:41:0c:48:98:4c:a2:a8:58:
         f0:e6:0e:13:33:df:b7:51:91:37:10:c4:07:d8:13:cb:6f:0f:
         21:bf:e7:06:59:e1:2b:c0:5e:2a:89:29:26:8e:22:7e:9f:73:
         79:48:b6:ac:2d:a9:5a:91:7f:cf:30:44:a0:e9:6f:31:85:e2:
         42:34:01:c0:ee:c5:a6:03:81:9f:1f:f8:e8:f4:84:83:a3:be:
         fd:dc:db:fa:56:f5:3c:81:97:c8:a0:9e:45:33:4a:ef:c4:bf:
         8d:bb:26:7f:b1:f6:18:38:d2:6b:36:fa:da:98:2b:f5:0c:8c:
         c5:53:c4:a9:1d:30:c1:cd:f0:cb:92:ca:73:b4:10:48:f3:aa:
         6d:3b:21:42:a7:28:52:e7:8f:20:26:96:8d:69:06:42:d0:ca:
         e5:dc:89:e6:39:c8:37:ec:82:ed:8e:b4:1b:20:09:cc:72:2e:
         ed:ad:8d:d9:54:0a:03:3f:f6:58:c3:a5:25:2a:d1:46:c9:e0:
         03:32:f0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:04 2025 by rpki-client