Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File:                     w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier:          lTGxPWuGH1xHZ3J5Gsu293IlAZHSl+blGipqaSf0HkE=
Subject key identifier:   15:1D:E1:1B:A6:96:59:E2:02:99:BA:95:87:E9:6D:94:5D:A8:66:FE
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer:       /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial:       0198D58389407971E69C98E9FC88427BB97E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number:          158F
Signing time:             Sat 23 Aug 2025 06:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:23 +0000
Files and hashes:         1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=)
                          2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: VUodmtWxcdpEszFcozzedq9h53GAoXKIyr0n67gwaXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:89:40:79:71:e6:9c:98:e9:fc:88:42:7b:b9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
        Validity
            Not Before: Aug 23 06:00:23 2025 GMT
            Not After : Aug 24 06:00:23 2025 GMT
        Subject: CN=151de11ba69659e20299ba9587e96d945da866fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:00:e4:2f:2e:fa:97:8b:90:94:5e:13:42:
                    fd:0b:dd:1e:18:31:0d:c7:ec:0e:fb:39:91:46:a2:
                    f1:3e:f4:09:f5:f6:55:84:e7:8c:07:bd:31:ce:bc:
                    e9:ce:88:14:64:46:fe:af:70:c4:29:90:0c:fc:45:
                    22:fa:28:3a:6d:a3:f2:22:d8:9c:74:db:66:65:49:
                    a7:26:a4:be:5f:92:18:09:90:2f:c9:8a:fa:ec:5d:
                    33:22:a1:66:c4:ba:b5:98:82:31:8b:a3:9d:2a:fa:
                    73:55:c5:af:ac:14:bf:18:05:cc:b3:b2:7a:e7:cf:
                    5b:bd:b9:40:40:a9:4e:36:2e:c5:39:85:96:75:32:
                    7e:c8:5b:9b:58:f6:d3:15:e8:47:00:9d:1f:0d:41:
                    c8:0f:15:ca:c1:27:cf:4a:49:68:d8:a2:75:a1:e2:
                    6a:88:47:e0:64:0f:f9:50:7b:0f:d7:2f:d8:ad:7d:
                    4b:64:2b:f5:b2:45:f8:05:d8:29:3a:b8:27:ec:84:
                    55:6e:76:25:b4:90:bf:62:d2:b1:7c:cf:f6:95:75:
                    fe:d6:9d:33:0d:7b:6b:fa:ec:a8:60:97:90:28:37:
                    d5:ad:cb:9b:96:bd:19:4b:4b:40:fe:51:bc:44:ec:
                    af:be:fc:12:fc:df:6b:a4:dc:7d:93:0a:af:d2:3d:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1D:E1:1B:A6:96:59:E2:02:99:BA:95:87:E9:6D:94:5D:A8:66:FE
            X509v3 Authority Key Identifier:
                keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:04:fe:1d:b2:a9:15:b4:b4:32:10:1a:dc:3e:7c:54:d4:75:
         3b:f8:ed:2e:10:72:2e:b9:b1:83:a3:90:13:19:43:3b:85:f7:
         91:ad:f7:03:85:e3:17:3d:6d:68:c8:dd:5c:06:7c:4b:b4:50:
         19:99:a2:7b:26:8c:98:c4:a6:83:f8:4e:b8:ae:a6:4a:4a:ff:
         9b:86:30:2f:8d:be:7c:03:67:17:9b:1d:75:15:ed:c1:65:74:
         78:4b:b1:5b:c9:af:ca:4e:7c:88:0b:eb:5b:32:20:be:c3:10:
         45:9d:e2:db:ed:da:ec:22:2f:5a:1d:9b:6e:b4:af:df:bc:d7:
         5b:dd:96:b4:93:e7:80:ce:51:4c:72:09:a6:13:ea:6c:80:36:
         7e:5b:7c:7a:59:f3:4c:38:40:e4:83:4b:4e:30:e2:09:a0:c7:
         0d:a2:5f:e4:12:44:7a:29:bd:e1:93:f8:b7:1e:7f:b1:58:29:
         00:6a:30:34:23:39:ef:11:f3:83:8f:b2:0b:7f:3a:cf:cd:71:
         c7:7b:cf:b0:b0:1f:54:a0:9f:42:2c:a0:e4:e8:ac:75:19:dc:
         d2:60:7f:0e:63:20:e7:5a:c2:80:be:81:2e:70:b1:b3:aa:ff:
         d7:9d:46:f6:4f:5a:ee:da:e4:f0:6a:f2:e0:84:17:6b:54:67:
         06:79:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:59 2025 by rpki-client