Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File:                     _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier:          BaTnBZiW5zaZUTaMcmd3TzlMte9CftrB/DEtNn0UPJA=
Subject key identifier:   D5:EF:0F:54:6B:3D:23:CE:19:F2:4F:BE:EA:BC:1A:25:6E:F9:33:C0
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer:       /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial:       01987450653F88D0E28E014D3581FD98BA08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number:          0494
Signing time:             Mon 04 Aug 2025 09:01:22 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:22 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:22 +0000
Files and hashes:         1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=)
                          2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=)
                          3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=)
                          4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: 2ytz5AIOWGCP3FTcK7MpDciWRvc3AeIgxscYNeVNkqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:65:3f:88:d0:e2:8e:01:4d:35:81:fd:98:ba:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
        Validity
            Not Before: Aug  4 09:01:22 2025 GMT
            Not After : Aug  5 09:01:22 2025 GMT
        Subject: CN=d5ef0f546b3d23ce19f24fbeeabc1a256ef933c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:68:45:32:a0:2d:20:e4:be:c1:10:b6:a2:
                    98:55:b9:0d:c2:e1:18:22:da:a7:2f:3a:4e:ac:b6:
                    d6:d1:79:d2:f6:15:86:7a:2c:b9:a2:71:ca:79:a2:
                    84:3b:23:44:14:ea:b8:c4:3d:3e:71:e1:2d:fd:cd:
                    da:ec:2b:31:07:e5:8e:e2:48:58:0a:4a:0b:62:ee:
                    e9:bf:d3:1a:fb:5d:de:aa:88:84:51:4d:ba:be:2c:
                    eb:81:4a:ce:02:b6:6c:5f:bb:8e:88:8d:cc:55:a3:
                    16:ac:43:d0:b9:d0:2e:74:71:52:bf:b7:c9:0a:b5:
                    b4:1d:25:05:f7:0b:cf:fe:ef:97:77:75:58:a5:ec:
                    34:b1:d9:da:7d:ee:4a:9b:ff:85:dc:ba:a5:93:ac:
                    0b:c1:04:81:3b:a4:e0:c2:31:99:70:1e:ad:c0:37:
                    49:a5:92:58:8b:59:bf:96:c4:6c:d1:bc:a2:77:28:
                    33:b2:65:4a:b1:ef:48:1f:3c:97:07:da:6d:13:2c:
                    f1:08:9e:85:76:89:d2:d2:6f:00:4c:b3:5b:c1:4c:
                    26:e8:d1:0e:a5:a4:b3:8f:d4:50:88:c2:36:c0:99:
                    a0:af:c4:11:8f:13:12:4e:72:37:8f:1f:fe:e2:79:
                    35:3c:49:8b:60:07:46:2f:7a:dc:c6:5a:0f:04:64:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:0F:54:6B:3D:23:CE:19:F2:4F:BE:EA:BC:1A:25:6E:F9:33:C0
            X509v3 Authority Key Identifier:
                keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:63:60:b9:e8:84:b0:b2:c4:84:c3:4a:83:56:8f:dd:a6:b2:
         73:89:8c:09:6c:69:fa:63:62:4a:24:6a:20:17:d6:05:e7:d4:
         0e:45:84:da:39:28:bf:e3:10:5f:b2:04:9e:34:d8:6f:86:9c:
         be:eb:e2:5d:f6:1a:d6:ab:b9:54:71:47:0d:db:74:3d:24:5c:
         70:31:cf:c1:83:37:28:67:44:07:70:2c:bc:9a:4a:f3:26:b5:
         44:a0:e0:3d:89:2d:ca:fb:3b:c1:62:48:9c:f8:e4:0f:7d:9c:
         9f:c2:fc:c1:48:bb:d1:a9:c3:1f:f9:e7:5b:d2:9a:27:b2:da:
         e4:21:67:17:b2:a2:d1:fb:0b:57:b8:77:f5:c1:38:9f:9c:60:
         4e:f8:86:fd:ba:c3:57:b4:f0:b4:5a:f8:dd:e3:68:89:83:71:
         7a:98:75:d7:e8:d0:c4:73:be:2c:2f:3b:4b:6c:64:e3:3d:5c:
         8d:63:16:c9:47:61:a4:08:bd:55:44:60:48:09:f9:9d:d7:51:
         d9:01:e8:6e:b4:dc:65:34:df:29:8b:91:fb:74:74:cc:6f:a1:
         5f:70:ab:0a:54:64:58:b8:38:4b:27:66:ab:82:54:25:e0:ea:
         c1:0c:11:28:9b:61:fc:44:a2:c7:ff:74:da:0a:70:7c:c3:b6:
         7c:f8:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:25 2025 by rpki-client