Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          m3qqZnr8GDp69hZn5Do6pg2ftm+DmmMhC5YSbTjRLdQ=
Subject key identifier:   2F:D7:3B:54:A8:78:C8:37:BD:CA:8A:B6:3B:1F:21:A2:E1:CB:F9:26
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       01987ED35D085411C2B3D02E3D1405B259D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0D78
Signing time:             Wed 06 Aug 2025 10:00:37 +0000
Manifest this update:     Wed 06 Aug 2025 10:00:37 +0000
Manifest next update:     Thu 07 Aug 2025 10:00:37 +0000
Files and hashes:         1: Fuwpc4A-TRfgVPSV8ewciJSWczY.roa (hash: Y0uk9yq3kYnde4ofaqo2ePCwnF8vYGybwjzGM4J+Glo=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: IZWhvSt3SnSV0cqpuxmrv/dP1SsKWTF0ULZXCLMJyvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:d3:5d:08:54:11:c2:b3:d0:2e:3d:14:05:b2:59:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Aug  6 10:00:37 2025 GMT
            Not After : Aug  7 10:00:37 2025 GMT
        Subject: CN=2fd73b54a878c837bdca8ab63b1f21a2e1cbf926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2b:20:c6:59:8f:cd:61:15:6b:7f:11:dc:fe:
                    36:f8:49:06:67:24:8c:3d:74:1a:81:e4:8d:ea:e2:
                    f6:e9:70:2d:36:29:b7:19:bf:19:e4:38:66:f8:df:
                    cf:80:2d:eb:fb:79:08:38:50:81:1c:75:39:de:b4:
                    58:a6:d9:a7:c7:11:0d:28:05:08:21:4b:5d:fc:21:
                    27:10:ab:ba:55:4f:6c:68:1b:b1:5a:30:5c:f3:15:
                    f8:b4:c4:84:2f:c1:e8:52:65:62:bd:49:f6:ea:7b:
                    28:c5:08:da:65:07:4f:b9:79:1e:e5:dc:dd:de:74:
                    4f:ee:16:0d:a8:56:d0:f2:f8:ee:ca:fc:94:38:75:
                    61:d7:95:66:c0:6e:3d:a9:c9:e7:48:2b:9b:93:4c:
                    5b:1b:87:e0:e8:78:7d:65:04:88:50:5d:85:60:a1:
                    df:cf:10:e8:ee:b7:ae:07:ba:89:46:21:50:24:a9:
                    4a:64:bb:9a:b0:1e:69:e3:fb:cf:37:d3:f4:0a:b2:
                    a6:bc:37:93:26:d4:92:84:2f:1e:94:b1:09:31:cc:
                    2b:d8:13:c5:a9:2a:10:0d:32:72:24:cc:54:15:d9:
                    01:d6:09:d6:6c:12:1d:5f:d0:8a:43:a5:ad:45:0d:
                    f5:89:8f:9d:03:56:47:10:a9:01:a5:06:77:31:54:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D7:3B:54:A8:78:C8:37:BD:CA:8A:B6:3B:1F:21:A2:E1:CB:F9:26
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:8b:8e:a7:76:dd:d4:4b:f2:52:18:ac:e4:d0:67:e8:7f:
         36:58:01:a8:0f:b8:6b:6c:a9:23:a2:3d:c1:52:38:32:27:9f:
         50:ed:8c:1e:b4:19:c4:28:3e:4e:8b:37:5c:09:d5:7d:3e:7e:
         e7:6f:da:d2:d3:75:d0:08:b1:5f:91:a4:cf:e6:ab:b1:70:c1:
         22:e4:1c:65:21:49:d3:8e:d3:ea:59:a5:38:d7:c5:d8:22:0d:
         b0:6b:84:04:3c:15:62:d4:28:b3:36:e3:ca:da:e1:02:80:76:
         8a:87:64:be:fc:fc:0e:e1:4d:bf:69:1e:aa:44:09:3d:8b:03:
         12:d4:15:3b:a1:7e:11:8f:6d:bb:9f:a2:ed:fa:70:31:cd:68:
         76:87:94:1c:65:d1:16:29:03:cf:a4:2d:02:44:3e:ec:cc:c0:
         91:e1:87:49:3b:dd:28:94:a5:89:72:d8:0e:02:6c:ac:91:e7:
         f0:ef:81:05:a3:d1:12:ad:f3:8e:e9:57:52:92:75:91:41:e3:
         e3:d7:12:3b:7e:c0:db:9c:1b:59:44:82:0d:9c:5f:3b:0f:8d:
         3f:7e:75:2e:90:05:83:8f:6b:d5:91:e3:34:89:d9:16:f8:cf:
         d5:1b:2a:cd:78:f3:2c:fe:9b:8c:e5:a5:9f:d6:0f:ab:c7:8a:
         2c:58:ed:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:20:43 2025 by rpki-client