Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          qj6+6VikljG8MG9z0DNhyHfBzjTNZwsuA85Gy9QOvyY=
Subject key identifier:   33:AF:7F:7D:5D:98:09:A4:D0:9A:E0:9B:A8:E0:77:42:8B:FA:83:20
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       019873064B9E51CEECE7FEAF5458AB7F05A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 03:00:49 +0000
Manifest this update:     Mon 04 Aug 2025 03:00:49 +0000
Manifest next update:     Tue 05 Aug 2025 03:00:49 +0000
Files and hashes:         1: QHN1mo-chw8woBmyHxpHaobOHVY.roa (hash: xauKLlFs3GtWKAmak4uwPaBujz4eKBRABiwipmCaZzM=)
                          2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: iS3NdX95egK1FAqUmalBko4fPnhAw1OREocx827AJzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:4b:9e:51:ce:ec:e7:fe:af:54:58:ab:7f:05:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: Aug  4 03:00:49 2025 GMT
            Not After : Aug  5 03:00:49 2025 GMT
        Subject: CN=33af7f7d5d9809a4d09ae09ba8e077428bfa8320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:b0:e2:2c:b7:61:cd:82:88:ab:e9:9a:8f:
                    98:ca:11:80:bf:d1:df:87:78:d5:e8:b7:d1:65:06:
                    c5:75:6e:5b:32:39:73:02:5b:46:45:46:b3:d9:5d:
                    af:df:4e:0c:2c:d3:88:72:ea:5c:08:1e:e1:17:8f:
                    5c:db:7a:7b:70:60:63:d2:7f:a3:75:7a:25:ea:39:
                    db:f7:5a:f9:7d:fd:24:de:78:57:fb:17:6d:a1:47:
                    51:08:fc:11:9f:83:09:44:5c:2b:a9:54:aa:5f:f0:
                    81:fb:63:06:69:8c:7d:00:00:2f:e9:87:5e:d6:5a:
                    c4:a6:51:f9:71:fd:7f:ce:24:1b:f2:4f:24:90:13:
                    c9:1c:85:7f:df:98:0e:69:80:da:9e:74:78:91:47:
                    c8:db:fc:5e:fb:16:f7:a5:e4:7a:6d:87:70:9a:66:
                    57:ad:47:f5:e0:98:87:f4:95:15:4c:71:e3:85:96:
                    37:d6:14:cb:58:8a:cb:28:64:a9:db:83:33:df:e7:
                    3a:ed:43:a7:53:58:e3:c8:02:3b:bd:97:9a:70:a0:
                    95:61:68:a9:7f:fb:31:e0:64:8a:ae:67:e4:e9:ac:
                    3d:9f:cf:be:a1:c1:e8:fa:9f:25:67:d1:06:07:3e:
                    6d:81:82:02:a8:e2:84:ab:06:09:2b:93:49:6d:82:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AF:7F:7D:5D:98:09:A4:D0:9A:E0:9B:A8:E0:77:42:8B:FA:83:20
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:27:c1:3b:fb:00:dd:7a:f0:8a:90:f1:23:52:99:e5:92:67:
         df:56:78:08:f9:5e:85:cb:b7:31:fd:fc:f9:eb:f2:14:88:fc:
         f3:c1:71:0a:f3:30:31:54:e8:4c:f5:f0:9a:b8:e1:ee:34:03:
         73:ca:34:b9:7b:ee:f7:09:15:d7:25:5f:58:a0:c8:06:63:74:
         50:81:b8:19:c6:58:df:5f:6d:d3:7d:16:9d:b1:3f:2f:c2:8a:
         39:49:3a:78:9d:03:8b:fa:45:af:8c:79:3d:ae:43:bf:75:aa:
         61:4d:ab:34:86:54:56:71:65:03:a7:db:ff:82:61:a8:b5:b9:
         f4:2e:c5:7f:12:bc:c9:4d:20:71:92:35:05:00:ca:a7:d7:25:
         af:5b:e0:23:48:4e:3f:69:37:97:9a:22:60:2f:98:aa:46:e6:
         85:77:47:d8:a2:9d:94:3a:8a:92:ad:7d:93:2b:ed:7c:74:e1:
         80:aa:e7:72:b2:6d:76:59:20:a7:e7:df:38:50:98:08:90:1b:
         5c:7d:db:d7:cb:27:f5:1c:9b:02:b0:e7:ae:3d:15:90:09:3d:
         f0:7c:75:79:93:bc:b6:b2:72:48:c1:bc:a1:e7:1d:ad:c6:68:
         33:ca:78:18:14:cc:22:73:ec:82:81:ce:d9:50:e9:ed:e0:57:
         32:aa:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:11 2025 by rpki-client