Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File:                     W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier:          j3XBX7izl89NqsS8Twfkp7oZsK02rb/fy/eSouyrTSA=
Subject key identifier:   71:0E:B8:8D:6E:DE:34:34:F2:BB:E9:C1:04:4F:65:D6:21:09:51:01
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer:       /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial:       01988BEA1AB784B71CBFD5D4324E9C9F7528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number:          1242
Signing time:             Fri 08 Aug 2025 23:00:31 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:31 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:31 +0000
Files and hashes:         1: 63salWhc3QRvjl4PRdN20jEnN1g.roa (hash: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=)
                          2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: vLf9u7e5eOs22znCD3GE1NhlY3xs9Z7fG41mT2QsrjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:1a:b7:84:b7:1c:bf:d5:d4:32:4e:9c:9f:75:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
        Validity
            Not Before: Aug  8 23:00:31 2025 GMT
            Not After : Aug  9 23:00:31 2025 GMT
        Subject: CN=710eb88d6ede3434f2bbe9c1044f65d621095101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:06:9b:7e:d8:d4:ef:9e:a2:76:42:7e:d5:
                    99:00:b5:43:78:67:8f:88:ba:93:c9:f6:9b:bd:fd:
                    43:8e:ae:f3:d2:bf:3c:16:4a:4b:7e:51:2c:a4:92:
                    e9:ce:f3:c0:3c:46:70:78:d1:b2:09:93:aa:de:7c:
                    2b:20:62:f6:49:05:e1:0b:c4:00:c7:ad:0c:5b:e1:
                    84:89:87:b2:f3:c4:a8:1e:15:c3:1d:1e:d0:b3:14:
                    f7:bf:c4:2d:2e:92:ea:21:ad:61:19:df:23:a0:21:
                    6c:12:24:c8:c7:18:c3:e8:be:f6:03:d4:e3:38:9f:
                    04:c0:78:af:0f:c9:56:3b:9a:a3:f4:90:0a:a2:37:
                    0f:14:d4:bf:5e:49:b5:5e:12:a4:f1:8e:24:b5:59:
                    7d:c1:72:13:6e:87:53:10:a9:2a:9a:87:e7:d3:8e:
                    d9:47:87:4c:73:c6:74:c5:db:70:f7:7f:c6:06:ad:
                    c3:28:a7:8b:c0:6a:cc:91:e7:e7:e3:29:1a:cc:55:
                    d7:73:e7:c1:57:c6:33:8f:b5:62:4a:de:5d:f1:d0:
                    9c:b9:75:e8:ce:a2:0f:0d:14:df:44:10:9e:c4:55:
                    81:d3:b8:bc:67:cd:67:de:cf:6e:2d:1e:5e:8e:e5:
                    a9:08:be:ec:0e:23:b3:57:9b:57:39:d1:e9:c6:fa:
                    9b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0E:B8:8D:6E:DE:34:34:F2:BB:E9:C1:04:4F:65:D6:21:09:51:01
            X509v3 Authority Key Identifier:
                keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:03:c2:7b:55:e2:a6:75:7c:b2:89:13:c7:40:f9:f2:d1:16:
         30:de:97:23:2b:3c:0e:36:1c:b2:52:0b:ac:58:58:c7:5d:3b:
         ef:2d:7f:4d:0e:f3:42:ee:c6:1a:47:a9:c4:b5:2d:bf:04:b2:
         a9:c0:b1:47:fd:f0:af:02:e3:e4:52:31:d3:53:fe:f9:96:e1:
         97:4d:01:fb:40:f2:31:ea:5c:fd:b0:d3:a3:02:f4:ad:88:12:
         ac:f2:c5:37:84:84:16:a5:ba:92:a3:23:d6:66:33:90:97:83:
         ef:e5:04:41:6c:c1:2f:49:bb:e4:ba:2a:f6:21:a5:a4:9c:e3:
         c3:a2:8f:27:91:b3:a1:4c:a0:47:e0:57:ad:9b:26:ec:50:6a:
         fc:a2:9d:a4:5d:54:b9:d0:20:e6:98:ef:83:fa:c4:de:4f:ba:
         de:4a:35:6b:c5:34:3c:9d:23:22:bf:b9:39:d8:e4:a7:af:d2:
         bf:12:17:72:07:5c:21:5f:51:b1:23:92:0f:d8:0a:84:e0:d8:
         95:fa:7c:e2:3a:d9:a0:bb:41:f1:93:5d:18:0d:5a:0e:5b:a1:
         8a:de:1a:44:d5:c8:45:de:ad:85:8c:c3:c6:81:7c:8a:1e:d2:
         ae:f4:33:eb:db:49:75:06:aa:8e:cc:cc:3d:5e:25:21:72:90:
         f7:65:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:39 2025 by rpki-client