Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          e/wQRuhDjH5MWYN9ef+WsO+GadspQ1YyUK3gog13kRs=
Subject key identifier:   BF:99:73:B6:BC:34:BE:0E:E8:C4:26:00:8D:82:C2:5A:58:9D:4B:E8
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       0198868D7AD8167AC6BC9E79E9A762958AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          0A8B
Signing time:             Thu 07 Aug 2025 22:01:15 +0000
Manifest this update:     Thu 07 Aug 2025 22:01:15 +0000
Manifest next update:     Fri 08 Aug 2025 22:01:15 +0000
Files and hashes:         1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=)
                          2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: Bpg7VlMokCRm4k8EV9WLnNqfrqXNLMprRR8zyPyH03E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:8d:7a:d8:16:7a:c6:bc:9e:79:e9:a7:62:95:8a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: Aug  7 22:01:15 2025 GMT
            Not After : Aug  8 22:01:15 2025 GMT
        Subject: CN=bf9973b6bc34be0ee8c426008d82c25a589d4be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b5:a6:09:49:32:d9:d2:2c:f6:68:63:b2:48:
                    00:fd:96:e9:2d:5c:03:a3:1d:6d:89:b5:c9:0f:e5:
                    e5:92:91:50:e6:e7:44:b4:94:91:d7:64:8d:f4:8a:
                    25:c3:e8:e2:3c:27:14:84:8b:e6:f9:92:e0:00:61:
                    37:de:52:a6:ec:a9:36:86:1f:d6:8b:ed:c0:7e:ec:
                    d7:a7:e7:49:c3:63:60:6d:29:c1:cc:f5:3f:f5:b0:
                    52:c3:c0:05:27:85:5b:63:13:74:45:d1:74:fb:2d:
                    c7:0a:1d:64:8d:82:d7:24:0f:87:87:02:59:22:be:
                    97:47:ec:59:70:be:cf:7c:75:5f:34:67:9d:2c:b6:
                    5c:67:b3:36:a9:80:55:99:a3:61:9d:e1:45:b7:e0:
                    67:e1:6b:40:a6:9e:7a:d2:67:0d:8e:35:83:dc:7d:
                    e7:db:24:76:ed:dc:ef:cc:72:a0:f0:e9:6b:39:16:
                    14:73:ad:55:15:99:56:eb:a4:f4:18:93:c5:f0:39:
                    04:53:96:de:00:83:39:32:2d:ce:f4:4d:d7:72:47:
                    65:40:d0:29:ab:82:49:41:d3:ed:e3:86:6d:18:cb:
                    c1:d9:2b:56:3f:89:2f:7d:6a:78:d2:16:7f:d5:49:
                    d7:da:3e:ec:08:c3:ff:bf:c1:4c:eb:e7:77:16:62:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:73:B6:BC:34:BE:0E:E8:C4:26:00:8D:82:C2:5A:58:9D:4B:E8
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:35:59:43:66:09:82:a7:dd:63:62:6b:bb:1b:91:da:18:
         61:c3:74:21:5f:97:89:2c:a9:d7:1a:f5:dd:ba:46:79:c2:c7:
         32:04:d7:53:6b:c5:42:ef:40:13:ed:24:8e:c5:95:e6:68:ac:
         ca:5c:25:60:77:16:59:7d:af:00:12:0c:a7:77:a0:37:f7:ad:
         2e:30:c4:d3:60:f3:9a:27:8d:6b:6d:c9:f9:9b:f5:a1:a3:9b:
         40:05:c8:94:95:2d:05:1d:87:01:be:55:0d:76:28:5c:3f:dd:
         53:d4:e9:8f:43:7c:49:ac:54:a3:ff:b4:a2:5a:ca:9f:b2:fe:
         ac:bd:5c:ea:e7:d2:2b:1a:57:17:f8:01:9f:d9:79:08:ad:a7:
         46:8b:44:9f:a3:a7:e7:bc:06:e6:84:0e:27:0b:fd:e4:67:6a:
         cf:9e:5a:65:c5:a9:d3:76:06:a8:cc:32:9f:fa:e6:27:9a:b7:
         74:fc:c5:58:42:7d:24:ca:56:e4:32:79:c8:ec:67:98:7d:d0:
         88:25:5e:14:8e:f4:84:f7:a1:0a:24:85:ec:27:d5:57:c1:c9:
         b6:77:9e:07:b0:9a:89:8a:77:47:f3:68:87:d1:6d:79:f1:bc:
         85:52:87:f3:ac:9d:aa:99:f7:cd:c3:62:d1:a2:9a:8b:ce:cb:
         90:01:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:11 2025 by rpki-client