Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
File:                     wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json)
Hash identifier:          eiD4dkMVXazOqp/CLA0StSbO45qWycuKGY82noD0xvs=
Subject key identifier:   88:CC:6A:22:7C:7F:10:13:5A:C0:ED:FA:27:C8:AF:8A:3D:06:45:21
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Certificate issuer:       /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial:       0198955BD178106AD0C14A1DD6D059B62198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 19:01:19 +0000
Manifest this update:     Sun 10 Aug 2025 19:01:19 +0000
Manifest next update:     Mon 11 Aug 2025 19:01:19 +0000
Files and hashes:         1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=)
                          2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: noa2AAchZM5Isx3/LNr2qni4jw+fRI97ZRwANxzPtwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:5b:d1:78:10:6a:d0:c1:4a:1d:d6:d0:59:b6:21:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
        Validity
            Not Before: Aug 10 19:01:19 2025 GMT
            Not After : Aug 11 19:01:19 2025 GMT
        Subject: CN=88cc6a227c7f10135ac0edfa27c8af8a3d064521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:55:ba:14:cc:4f:98:ad:9b:69:3a:33:c2:f8:
                    b5:88:6c:94:b8:48:3a:5a:74:07:16:e8:1c:2c:54:
                    83:32:c1:06:d9:19:75:ca:3f:8d:77:b7:b7:9d:43:
                    d5:dd:85:a3:14:e0:61:73:fa:ea:84:16:25:5f:a4:
                    ff:db:64:61:ef:f3:98:7b:7e:94:26:77:3f:25:82:
                    b3:ff:9b:57:b1:b3:a6:33:85:f2:d7:35:b2:b2:21:
                    6f:c9:d6:aa:ab:9d:1c:e6:e8:40:d5:1f:3e:86:90:
                    1e:cf:45:c6:9b:b4:b9:fb:d4:25:a7:59:97:f3:23:
                    3b:e7:d8:eb:00:10:74:a5:a4:0e:eb:05:6b:53:f1:
                    54:50:e2:ea:59:4a:39:82:74:fe:ec:80:3b:3a:cd:
                    09:ba:97:7a:d2:9b:7c:21:d0:49:87:8b:11:6f:57:
                    5d:e7:0a:9d:fc:a2:1f:21:64:db:31:85:4e:77:93:
                    c5:0f:18:47:ea:f1:1f:57:b8:a2:46:07:1d:ed:41:
                    e0:4f:9b:7c:9c:09:a3:46:a2:31:9e:ea:a1:c4:5a:
                    fa:8b:f9:22:6a:c7:d4:79:47:b1:92:37:49:00:e1:
                    f9:93:e8:1b:be:d7:32:20:48:73:2d:4f:fe:ec:d5:
                    e2:3e:ed:dd:c7:22:cd:ab:cb:14:eb:f9:c4:0f:5f:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CC:6A:22:7C:7F:10:13:5A:C0:ED:FA:27:C8:AF:8A:3D:06:45:21
            X509v3 Authority Key Identifier:
                keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:9f:f7:3d:c0:f5:fd:3d:6b:14:d7:51:dc:18:61:f4:01:
         d7:c2:be:42:19:ca:34:f2:cb:bd:ce:15:39:ac:61:5a:07:70:
         ca:4a:6a:b2:41:be:8a:c8:b4:df:fe:eb:7e:51:02:c0:15:2d:
         56:c1:ce:a7:1b:81:59:aa:ce:2a:2d:28:5a:92:b9:00:e1:ea:
         e3:29:dd:35:6a:39:12:d8:da:d4:05:d4:f9:ed:e9:69:5f:7a:
         61:4e:62:00:94:c3:67:64:67:8d:28:22:1f:d6:b1:47:81:9a:
         6c:1d:50:fe:fa:40:eb:90:a8:16:58:0a:1e:bf:b3:d0:bc:47:
         a4:88:3b:c3:d1:0a:b9:9d:8a:9a:8b:de:0f:f0:6c:a4:bd:57:
         28:cd:02:74:ff:73:c9:b5:4a:0a:20:ea:37:64:de:a0:5c:7b:
         60:92:ad:bd:67:c1:18:67:80:09:3e:fe:d1:2e:8a:81:8f:e0:
         e3:84:aa:a5:84:01:45:98:00:19:50:ea:6b:b6:f5:72:c5:0f:
         1d:1f:fe:c3:22:cc:bd:f1:20:a6:56:18:c8:4f:e1:23:7d:ab:
         4d:fc:b9:03:e6:14:f4:77:27:45:bb:63:8e:c7:b5:92:e4:47:
         65:ba:4b:26:45:b0:c6:01:b8:4f:41:b2:4b:d3:c0:ed:0b:dc:
         14:0a:fd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:40 2025 by rpki-client