Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File:                     wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier:          bii3zcD9LtFok4cpj6ZfRixCrq6EqYhQAFjlEhUgMMU=
Subject key identifier:   F4:EE:42:7E:75:DE:2D:7B:1E:54:75:D0:1D:B8:0F:84:E9:71:DC:EB
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer:       /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial:       01988053EEE47CEAB9D77BA75B457CFC8AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number:          04FD
Signing time:             Wed 06 Aug 2025 17:00:40 +0000
Manifest this update:     Wed 06 Aug 2025 17:00:40 +0000
Manifest next update:     Thu 07 Aug 2025 17:00:40 +0000
Files and hashes:         1: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: W78oChtlnyD4/78vamB+jrDpD7F7FhRM0DhndJkWIZs=)
                          2: yDU1rEJ62ylcENkxxq9-gc-Am2g.roa (hash: 7IZ7rxbnUahaLcCnP9skdbmiM7UlbVpGLatma5hP9yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:53:ee:e4:7c:ea:b9:d7:7b:a7:5b:45:7c:fc:8a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
        Validity
            Not Before: Aug  6 17:00:40 2025 GMT
            Not After : Aug  7 17:00:40 2025 GMT
        Subject: CN=f4ee427e75de2d7b1e5475d01db80f84e971dceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:d1:81:3e:87:11:87:a5:da:26:bd:da:66:
                    68:c6:92:ad:eb:8a:cf:f0:ee:8a:66:f7:7f:a2:20:
                    89:b9:89:88:47:e0:33:4d:1b:2e:3c:1e:79:79:8e:
                    6d:ee:5a:26:c4:56:5d:3c:e0:e6:e2:e4:0b:44:bd:
                    ed:d1:e5:20:60:cd:bc:ca:ea:cf:c4:36:64:f5:34:
                    f4:2d:9c:25:02:49:af:91:18:41:53:45:02:9f:7f:
                    61:07:4f:1c:a8:45:82:ab:2b:01:4d:47:42:6b:80:
                    49:8a:81:80:86:1b:d4:70:93:c7:4c:d7:7f:69:a9:
                    94:83:10:45:fc:48:f2:28:9d:0f:55:f8:d7:8a:92:
                    a3:ed:ab:c4:85:9d:12:7f:ac:d6:23:73:f4:71:e9:
                    a3:8a:81:c7:45:9d:2a:05:46:0c:2c:b0:60:5e:73:
                    22:53:89:84:72:17:b4:15:be:44:51:c5:ac:38:fa:
                    e5:2d:64:3f:d8:1a:80:5d:08:c5:87:5a:ca:fb:52:
                    d4:81:a4:76:4a:27:05:50:49:09:bf:99:6a:2e:04:
                    e4:dc:a6:18:66:b0:df:a2:b3:5d:d7:8f:40:68:1d:
                    84:03:ba:e7:04:ce:6b:3b:e3:35:e0:c7:88:03:96:
                    58:ee:4c:4d:73:1b:16:ee:df:88:6e:1b:c7:2f:0c:
                    74:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EE:42:7E:75:DE:2D:7B:1E:54:75:D0:1D:B8:0F:84:E9:71:DC:EB
            X509v3 Authority Key Identifier:
                keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:02:67:00:1c:5d:cd:71:1c:0a:97:3b:45:d8:9e:33:e9:
         36:0a:d6:2f:30:67:27:90:74:1c:73:c1:fe:ae:78:11:10:11:
         20:44:20:97:e8:21:73:dd:ca:29:5d:d9:45:c5:b2:7e:69:fa:
         f7:c1:45:77:3e:34:d6:98:53:ef:fe:08:ba:83:10:4c:75:58:
         34:8c:80:0c:2f:a4:9c:ea:52:23:d4:32:fd:e6:6f:b8:1b:d4:
         f7:47:4b:59:66:e5:4e:bc:8e:63:f4:85:cf:bc:21:3e:09:03:
         6d:c2:7a:6f:0a:34:f5:dc:b4:3e:23:dc:a0:85:1a:52:65:49:
         45:ac:19:70:30:b9:68:82:63:51:de:cf:ed:b3:a5:ba:6d:2a:
         f5:c4:f3:3a:b1:8d:bf:e5:61:e5:80:03:e7:b5:8f:a6:31:5a:
         56:0d:04:f5:eb:20:e9:26:55:5c:f1:b9:ea:ff:78:b6:f1:cc:
         c2:11:ee:17:93:95:ae:05:50:7c:a1:26:ad:b9:89:64:68:04:
         b5:d7:a2:59:cc:e0:0a:af:c6:a4:18:be:91:0e:13:b5:38:a9:
         7f:76:0d:cc:a1:55:25:90:9a:72:38:be:a1:5e:29:e1:0a:79:
         bc:a0:96:1e:32:37:f9:dc:ae:a2:d8:85:5f:3d:9c:42:ab:46:
         90:5b:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:58 2025 by rpki-client