Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
File:                     W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json)
Hash identifier:          CZI0x3QMXj0vQYPZvlykX5YNTVc6YMOkgU3nXFxUtnE=
Subject key identifier:   5C:95:DE:9F:DB:96:22:0F:40:F2:3A:AC:4D:D4:EB:B1:FE:FD:DB:CA
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Certificate issuer:       /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial:       01987306E400347D85E0F09C1D462986AB1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 03:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:28 +0000
Files and hashes:         1: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: td5ELaEcNroJ02qSLFb8M5Hu0kgVsJy/NfGGaZDS8qQ=)
                          2: YSvlEI-QwRaOJVEKhPo-n7hFfMs.roa (hash: 2D47YFaNK7fea1JKhXlBWUic8EXXrjyXZMVK5ghBVPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:e4:00:34:7d:85:e0:f0:9c:1d:46:29:86:ab:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
        Validity
            Not Before: Aug  4 03:01:28 2025 GMT
            Not After : Aug  5 03:01:28 2025 GMT
        Subject: CN=5c95de9fdb96220f40f23aac4dd4ebb1fefddbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:5e:d3:9d:f7:71:cd:62:1b:8b:99:0b:d9:
                    d1:ea:85:5e:c6:8f:a3:63:24:d9:d2:e7:7d:b1:66:
                    ad:a8:eb:30:4e:fb:5c:7c:03:48:f5:02:2b:9d:4d:
                    76:2f:d6:a2:e6:56:7e:cd:0e:84:f6:51:fc:a8:b1:
                    93:d4:d6:54:20:8f:a6:ed:18:c5:0a:d7:c6:5a:9f:
                    fc:4c:dd:3b:dd:c1:48:4b:0a:4e:84:73:fd:d8:5c:
                    e8:5f:05:05:05:fa:c1:7f:6a:03:6f:1d:63:4d:71:
                    b9:0e:ee:3d:77:30:99:bd:9b:38:1b:dd:7e:e2:13:
                    50:d6:96:b1:7f:98:2b:ff:0c:bc:8f:c9:6b:ab:25:
                    28:14:be:8c:9f:ef:b1:88:2b:ab:54:4b:c0:59:bd:
                    f3:cf:62:29:31:95:9e:a2:05:d6:1b:51:3d:92:74:
                    7c:29:3c:cd:fd:5f:d0:76:e3:f6:a0:6b:89:43:51:
                    c7:e2:90:d3:07:13:b4:0f:56:85:8c:a1:d1:6e:23:
                    2b:22:2b:de:d5:6b:d3:5e:4e:b8:4b:65:53:4b:2a:
                    22:1d:4b:1e:19:2a:9c:54:bb:54:ae:7d:2e:d2:93:
                    9d:51:fe:d5:0e:ed:7e:00:76:2c:0e:ea:c9:eb:d7:
                    a5:98:d2:4b:30:6c:b3:85:ef:f7:b7:44:53:02:7e:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:95:DE:9F:DB:96:22:0F:40:F2:3A:AC:4D:D4:EB:B1:FE:FD:DB:CA
            X509v3 Authority Key Identifier:
                keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:84:02:db:f4:e4:5f:1f:b4:ba:1e:ad:1a:72:ad:e9:7f:da:
         de:a6:53:b8:09:fa:ec:7c:84:c1:2c:7d:06:e5:fe:58:5b:b1:
         79:fb:56:d8:d5:25:84:5d:07:4b:9d:e7:67:81:70:69:6a:a8:
         90:90:14:d8:f8:d9:fd:31:af:c4:71:49:db:b3:53:46:33:09:
         63:90:21:6e:c6:70:0f:2b:df:96:a1:7c:b7:05:3f:f3:e7:22:
         76:65:42:88:4a:0f:bc:2d:49:fb:5b:3d:df:58:05:4d:c8:33:
         63:be:b9:79:92:76:fd:04:79:43:04:a3:55:0c:ad:61:da:d7:
         dd:83:38:10:f3:56:a0:1c:15:15:e3:48:46:d5:72:df:ad:46:
         42:5e:61:78:50:d4:d1:b9:67:88:d3:7a:e2:ef:23:40:a6:97:
         da:4f:52:a7:1d:10:fc:05:6f:29:1f:0f:4a:77:85:01:77:38:
         54:77:10:f9:2f:06:bc:98:78:a6:50:d3:f5:a7:52:2b:5d:fc:
         6f:af:bd:c8:46:24:93:ec:1a:83:15:f2:11:bb:d3:da:8c:5f:
         25:29:bc:4f:0a:0c:21:5b:06:74:55:e7:6d:a5:75:26:0f:5b:
         87:dd:3b:af:aa:f4:70:ab:c2:a9:4d:13:ab:7b:db:cb:81:96:
         1f:08:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:28 2025 by rpki-client