Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File:                     1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier:          8SXUm2FidzH0jfosm+I3nsAb2iBy16P+2zQkoxHh8Ok=
Subject key identifier:   2F:1B:7D:9A:E0:AD:35:51:9A:7C:38:77:FE:A9:78:0E:BA:EB:25:80
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer:       /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial:       0198D5BBEBC6E0341752FBBCED588554A24E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number:          06C4
Signing time:             Sat 23 Aug 2025 07:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:59 +0000
Files and hashes:         1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: 223H0tHdB5S9DrKXx780MDWNc9d71psJW9JdEdpHZNo=)
                          2: 3nfIx05AjEYVNh0f8uhQsoNdvl0.roa (hash: kNmQ6q+KoIWrsskhw+6QTieUtnc2+n6TEwJFoX3Do3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:eb:c6:e0:34:17:52:fb:bc:ed:58:85:54:a2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
        Validity
            Not Before: Aug 23 07:01:59 2025 GMT
            Not After : Aug 24 07:01:59 2025 GMT
        Subject: CN=2f1b7d9ae0ad35519a7c3877fea9780ebaeb2580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:19:36:df:a3:b7:7f:2b:03:5c:ea:e7:4a:
                    2c:ab:82:d1:06:8c:fc:db:f8:22:97:d3:aa:92:d0:
                    82:99:3e:6a:db:f3:ea:b0:96:ae:50:bf:31:f1:74:
                    57:93:21:16:b6:7c:c5:fa:23:9a:48:a6:25:6f:71:
                    e5:59:88:dc:99:99:b6:72:69:de:ac:63:ac:a7:e8:
                    51:ca:49:04:51:91:91:c0:6a:ce:be:ad:b3:98:dc:
                    7e:37:01:9d:fc:7f:11:7b:83:a2:a5:2d:3a:c3:5a:
                    48:ce:ae:02:d6:d1:f4:f5:e6:15:d8:a5:9f:13:51:
                    8b:86:e1:08:d8:ef:18:2e:6d:e2:fd:eb:75:f3:0f:
                    76:c6:0e:c8:6c:60:9f:81:e9:ad:e8:65:ff:b4:0c:
                    02:c0:69:85:e9:d5:60:33:46:26:c3:51:ec:ee:45:
                    6b:7a:c0:6f:5d:8c:b7:3e:c2:8d:1a:3f:81:e9:54:
                    5e:24:81:50:ff:c4:91:d7:32:fa:08:d0:34:81:2d:
                    8c:e4:a3:8d:39:d7:86:07:65:49:b3:10:dc:2c:fe:
                    76:14:7a:de:57:15:0e:63:a1:1c:15:16:80:03:3a:
                    98:84:b5:b0:c2:2b:ec:75:10:69:eb:d2:5b:97:92:
                    0d:de:ea:b5:fc:81:3e:90:87:87:b6:ee:4a:36:85:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1B:7D:9A:E0:AD:35:51:9A:7C:38:77:FE:A9:78:0E:BA:EB:25:80
            X509v3 Authority Key Identifier:
                keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2e:0b:8f:90:20:a3:e7:98:09:d7:96:64:b0:9c:d6:1e:cf:
         76:9c:48:1a:73:7c:9f:5e:69:e5:eb:7f:31:f0:a6:8e:34:4a:
         1f:4d:d2:56:62:3f:68:cb:8f:22:0c:0d:21:4c:02:5a:fe:78:
         62:f9:97:19:0c:67:39:dc:42:9d:7a:89:58:1e:63:c4:d5:34:
         de:e2:89:9d:78:c7:10:05:07:d0:37:a4:7c:03:b1:a8:a7:75:
         b3:63:be:45:36:3a:56:2e:ab:e7:21:95:2f:a3:87:7d:1b:d6:
         d2:ef:c2:12:cb:84:65:b4:87:25:ef:b3:06:a7:c1:b3:12:26:
         b2:6e:ac:fa:31:6d:70:9d:d3:df:3b:71:8e:55:00:2c:b1:bb:
         cd:bd:e4:44:c0:1d:40:47:8a:33:9f:c7:4e:ed:4e:71:78:ba:
         01:a2:18:73:49:e9:87:78:af:e9:96:4d:92:af:70:48:d2:6b:
         a2:ea:f3:49:72:16:f8:14:1e:7c:71:75:5d:a8:0b:32:3a:18:
         73:75:35:62:e6:df:6c:ca:23:9a:75:36:d1:80:5e:44:d9:29:
         68:0a:11:4f:fa:86:67:f5:7c:5f:30:ac:03:4d:86:dd:b4:6f:
         dd:e5:4b:2a:a6:47:8a:9b:09:6a:d0:10:cc:59:d2:c6:0d:eb:
         1d:86:1e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:45 2025 by rpki-client