Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File:                     WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier:          u7rHnpzw1fAd3Ib60JPsaw/vrHQVcDi4pQzuy9HdTuM=
Subject key identifier:   18:DF:D2:4F:E9:A2:7A:45:DD:53:3A:B8:F9:C1:36:9D:10:57:C5:2C
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer:       /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial:       019872CF1EF9AD7E10925F23DD0D91EEE414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number:          0B3C
Signing time:             Mon 04 Aug 2025 02:00:33 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:33 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:33 +0000
Files and hashes:         1: FdWV2F8xywrkJr_ZVSWY8qWRv_A.roa (hash: X0QnMJo/L6uBm6V2nWu9aN26xqXlZf++2BNldb6DVIg=)
                          2: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: RCClEfStLMcPDISZfUyP3ySk1aqMZAhuNxiQUx87ukk=)
                          3: b2nv7c16taiMY7lqlyo1vW0yars.roa (hash: cEulSKA26PCcgT5q7VJTUwPAnJnY+2U0A9I6b42tRhY=)
                          4: tizL6qWbIsOeypyIPPPfmLusGE0.roa (hash: sAyubtv15VYxRHUf9fkBNCBE+xwZmyTEiVd/Zqvt42M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:1e:f9:ad:7e:10:92:5f:23:dd:0d:91:ee:e4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
        Validity
            Not Before: Aug  4 02:00:33 2025 GMT
            Not After : Aug  5 02:00:33 2025 GMT
        Subject: CN=18dfd24fe9a27a45dd533ab8f9c1369d1057c52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:9b:f9:e1:a7:f7:f5:17:90:f6:e6:b5:10:
                    16:2a:cd:a1:23:3c:3a:3e:21:80:c2:cc:64:56:da:
                    71:9d:1a:00:df:67:67:ab:bc:40:00:41:af:3e:94:
                    32:e6:0c:5f:54:bf:43:5c:c8:45:da:78:f0:2c:1a:
                    ef:76:53:85:f2:33:e6:98:07:4b:d2:74:5c:1b:0f:
                    42:61:81:54:85:1c:02:17:1c:e5:8f:fe:98:c9:87:
                    a4:3a:c4:c1:40:71:c0:e7:5f:0f:db:bd:26:44:4a:
                    c9:ec:77:5a:3a:b6:f3:93:d6:43:15:4c:55:3f:46:
                    48:2b:08:93:02:19:30:cc:9b:6d:45:04:70:49:0b:
                    7d:47:71:19:33:de:07:72:8b:fa:af:37:33:f2:b1:
                    fd:7a:1c:18:17:0a:3c:71:4a:1e:bc:42:11:d3:f1:
                    ab:f3:6f:d4:e9:47:07:31:0c:6e:73:0c:95:33:86:
                    3f:c1:bf:61:f3:c9:61:78:22:72:01:67:54:75:6f:
                    a9:b2:eb:a4:79:b9:c8:5c:76:81:e8:86:e3:00:73:
                    db:13:e1:12:42:de:ba:c7:ac:59:e1:d7:05:6d:7f:
                    94:ab:cb:a0:2a:19:be:fa:96:fe:46:9e:02:d9:0e:
                    b1:15:64:8a:e8:42:fe:49:ae:5a:92:24:44:39:32:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DF:D2:4F:E9:A2:7A:45:DD:53:3A:B8:F9:C1:36:9D:10:57:C5:2C
            X509v3 Authority Key Identifier:
                keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a6:85:88:ef:eb:e1:67:ee:4c:d1:1c:3a:4d:5a:87:b2:00:
         8c:54:fe:b0:a1:b7:6a:4f:8a:83:47:24:ea:5a:fa:7e:e8:8c:
         2e:6d:09:56:45:92:b0:a7:23:95:5c:c9:b5:7c:18:81:af:db:
         4b:53:a7:50:ce:df:46:1d:73:31:91:5f:54:45:f9:72:2b:da:
         46:6b:d4:e4:53:79:4a:78:ec:8d:02:66:7c:92:f3:f8:fb:d4:
         51:f8:a9:de:a7:f1:c6:07:76:73:b2:a5:63:cd:3c:f2:83:f3:
         cc:18:54:60:fa:e3:84:01:3d:2f:94:78:d8:fd:2d:de:6b:16:
         69:23:34:d1:8d:69:ce:e9:66:89:90:12:ae:30:19:50:05:09:
         d5:c9:91:6a:08:54:00:50:ce:b5:a8:6e:04:ae:d8:08:25:6f:
         af:a6:96:a2:28:4f:9f:75:49:25:71:dd:65:74:c4:92:54:84:
         f2:2c:f0:57:b4:69:ff:01:4e:fc:39:6c:4e:f6:9b:23:00:74:
         47:f4:59:a3:2b:35:a3:56:7e:44:92:b6:a0:0c:63:e9:45:c5:
         45:e9:0d:2a:2d:29:c5:cf:3f:e0:ca:1e:c9:1a:e2:5d:08:ac:
         85:da:cd:13:c1:12:50:39:e6:f9:b3:79:66:91:b8:e2:c4:bf:
         b0:4c:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:11 2025 by rpki-client