Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File:                     WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier:          T6p9iViI0sCtIswDDx+FXWM3a86bNE/joPq/CJnkvxE=
Subject key identifier:   88:DB:CA:12:4C:48:0F:48:C3:87:5E:76:DE:4E:C6:9E:01:82:3C:3E
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer:       /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial:       01988AA0FCBC6A2D55C567FD624CC582D8E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number:          119F
Signing time:             Fri 08 Aug 2025 17:01:02 +0000
Manifest this update:     Fri 08 Aug 2025 17:01:02 +0000
Manifest next update:     Sat 09 Aug 2025 17:01:02 +0000
Files and hashes:         1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: +rtGtwiP6+o54lGRmeimaVBidQBBSjFFmsGefJ+Svos=)
                          2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a0:fc:bc:6a:2d:55:c5:67:fd:62:4c:c5:82:d8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
        Validity
            Not Before: Aug  8 17:01:02 2025 GMT
            Not After : Aug  9 17:01:02 2025 GMT
        Subject: CN=88dbca124c480f48c3875e76de4ec69e01823c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:06:6f:cd:b3:2a:93:a0:db:6d:0b:54:2a:
                    5a:4b:47:31:35:3c:30:c6:5e:2b:b7:7c:b3:53:5d:
                    ed:7c:c5:aa:a9:7a:2d:8d:5a:45:be:80:66:13:54:
                    f6:fc:8d:69:d4:66:e2:a2:9d:3b:12:dd:14:76:d0:
                    7c:57:73:38:58:df:ee:6f:57:a5:f2:c5:79:b1:0e:
                    e8:ba:b4:7e:0c:dd:5c:1c:4a:85:65:83:36:9d:79:
                    d6:15:0c:99:27:e8:e3:8d:c8:93:4e:78:52:27:9a:
                    9b:88:f0:be:fa:96:72:db:98:2d:db:71:82:0a:9b:
                    da:6f:ae:85:39:e3:54:e2:7a:74:c0:79:59:17:1a:
                    83:52:0b:5a:68:ff:55:e7:af:c4:28:c8:77:6d:73:
                    94:a5:73:01:04:e6:ed:33:cb:79:22:8e:fa:99:eb:
                    bf:d8:0c:b2:94:af:55:31:28:35:63:75:68:d1:bb:
                    22:30:48:8e:bc:4b:b0:5e:b8:c9:f3:43:33:7e:65:
                    f5:5b:51:e8:15:9a:05:af:6d:30:ca:fc:c6:8b:9d:
                    5a:c7:26:15:eb:56:72:cd:98:e2:97:d6:02:8f:b3:
                    87:d4:f3:17:8c:d6:4a:fd:e1:3c:2e:85:c1:60:41:
                    f2:da:64:41:62:a9:34:9a:5d:d3:f1:0a:7c:a3:4c:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DB:CA:12:4C:48:0F:48:C3:87:5E:76:DE:4E:C6:9E:01:82:3C:3E
            X509v3 Authority Key Identifier:
                keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ce:cd:fd:70:c3:da:1b:45:36:78:6c:8c:03:28:85:98:e7:
         ef:39:10:d8:2e:ec:f1:77:94:29:e3:7b:2c:03:cb:58:b5:60:
         e9:10:c3:47:5c:fd:c6:e3:d2:8c:f4:73:28:2f:4d:a8:1f:18:
         4e:09:bf:5a:d9:1c:ce:d2:aa:4a:b8:a2:96:7d:7e:c8:dc:b2:
         c8:7e:ac:2f:74:e7:e7:54:34:d1:09:78:70:22:af:39:84:bd:
         5d:c6:61:88:76:7a:59:9b:dd:bb:1e:4a:7b:ff:f4:98:92:ad:
         03:61:b7:55:da:cc:0a:f6:27:bb:d8:6b:4b:ba:9e:4d:7e:3f:
         64:d4:ab:02:a5:53:fb:23:1b:95:bf:c0:5c:46:75:04:0d:80:
         4d:c6:90:73:57:83:87:b4:2e:f5:e1:79:36:37:8e:ad:52:26:
         b3:2d:a7:f4:d0:10:4d:37:3f:62:c0:4a:08:d1:41:6a:3c:5d:
         9d:39:dd:21:a9:ab:89:a7:23:3a:a5:79:f8:ac:13:f6:70:25:
         a4:df:3b:ee:30:05:58:c3:fa:34:e8:09:de:6b:ad:b1:4f:ee:
         67:50:d0:3f:6a:5d:2d:c6:50:a9:6c:8e:a4:b1:2f:74:8d:92:
         e5:83:d7:5a:d7:e7:a6:1b:02:ad:1a:68:70:0e:d4:47:68:1e:
         7b:90:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:51 2025 by rpki-client