Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File:                     WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier:          82kO6MPRapCaFNemSECGYLrvFIYqjMZmt6goF/34C6E=
Subject key identifier:   0D:8B:8C:38:6F:9F:24:F5:06:D1:51:D2:C7:91:5E:69:69:D4:FB:28
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer:       /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial:       0198793F4922FC5D72320A6EB1FBBE7E4CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number:          1374
Signing time:             Tue 05 Aug 2025 08:00:47 +0000
Manifest this update:     Tue 05 Aug 2025 08:00:47 +0000
Manifest next update:     Wed 06 Aug 2025 08:00:47 +0000
Files and hashes:         1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=)
                          2: 42BmTsViJXz2WqlV4_io6K3VIjk.roa (hash: 2MyAlESNR6eqmGKBHGCnds8446wWXVt2CWU4C9xt8MM=)
                          3: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=)
                          4: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: ZeA8Qci9Anr1F1MrEgUH/Kd79dG9AeauT81qaKsZfzU=)
                          5: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=)
                          6: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=)
                          7: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:3f:49:22:fc:5d:72:32:0a:6e:b1:fb:be:7e:4c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597a01de87e011803f890ae17749020f995f140c
        Validity
            Not Before: Aug  5 08:00:47 2025 GMT
            Not After : Aug  6 08:00:47 2025 GMT
        Subject: CN=0d8b8c386f9f24f506d151d2c7915e6969d4fb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:a5:6a:51:f5:69:67:75:84:de:56:bc:1b:
                    3f:55:01:21:d4:3b:b8:6b:00:41:68:ac:54:37:13:
                    4e:f1:76:58:22:dc:00:d4:ac:7d:28:3f:db:ef:dc:
                    62:ba:6a:fc:59:9c:ab:18:bb:c2:86:3c:4f:d9:24:
                    10:34:62:69:35:3a:df:d2:5a:c4:2b:8b:b3:c1:da:
                    8b:5f:b6:7f:f7:6c:18:b7:b6:ae:2a:80:d5:b8:49:
                    0e:b5:23:40:e3:d5:7f:9b:3e:0e:a4:97:ab:4f:43:
                    55:6c:40:7a:09:92:e7:f6:14:11:a0:d6:07:e9:45:
                    3b:a6:c5:41:26:07:78:2e:92:67:6b:41:68:e1:fb:
                    71:c0:79:68:9a:33:5c:5f:f4:b6:2d:a6:00:1b:57:
                    67:c2:66:2a:eb:57:61:8b:aa:53:5a:d3:d7:64:83:
                    ba:02:1d:97:36:f7:3f:f9:42:f8:07:52:70:f3:82:
                    5b:06:be:fb:25:84:f4:4a:45:3f:44:ed:49:49:49:
                    85:81:c4:e6:ae:e9:ad:b3:b8:65:08:d1:c5:66:c2:
                    85:d3:41:1f:ee:f4:c4:87:e1:53:05:c4:22:7f:4c:
                    a8:66:5c:96:f6:5b:8f:90:03:e9:63:8e:92:35:74:
                    38:5c:f9:79:15:9e:1e:74:cf:0a:44:f8:04:a7:8e:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8B:8C:38:6F:9F:24:F5:06:D1:51:D2:C7:91:5E:69:69:D4:FB:28
            X509v3 Authority Key Identifier:
                keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:77:a6:75:a9:fe:6d:2f:94:8e:f1:d2:20:e0:7e:5d:10:eb:
         8e:d3:13:e3:d3:a0:54:d3:9e:48:b8:b1:a9:25:2e:02:d7:7a:
         e2:aa:2f:4c:cb:f4:6d:8c:ad:20:33:bc:5d:10:71:05:e4:a3:
         5a:72:61:38:7b:20:4b:c0:34:30:f8:e2:f2:b4:a3:50:4b:1f:
         db:f6:49:85:88:d6:ce:49:1f:9a:61:6b:ef:c7:2b:45:ee:57:
         dd:df:d0:ba:a9:d7:7e:f5:96:e9:56:7c:a1:95:04:88:33:15:
         62:7e:3b:92:d6:8c:b0:16:41:b6:e4:db:e2:7c:d6:ad:20:78:
         1a:38:57:3e:67:18:42:89:37:f1:27:9a:f5:84:36:2e:12:e3:
         0c:94:97:e9:7a:dd:ec:73:79:fd:91:7a:05:09:26:fb:9b:d6:
         d6:1d:16:71:ec:7a:3f:61:b4:49:f2:63:08:af:6b:80:c0:2c:
         98:4d:43:33:31:49:2a:aa:22:e1:42:01:03:b9:60:dd:60:c5:
         2a:86:4e:b3:f6:28:17:2d:57:60:43:cd:49:e3:d5:59:f1:a1:
         79:15:92:65:23:42:14:61:cf:7b:4d:dc:30:52:8e:9e:e1:dd:
         44:31:e5:51:6c:ef:b5:ea:d6:ad:2a:15:90:fd:b0:4e:82:74:
         61:2f:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:26 2025 by rpki-client