Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File:                     w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier:          jnBtm4X415T7dVA7A8JF1IUb29mzQNZVbq0Uk/laUSI=
Subject key identifier:   27:BC:44:F8:65:19:C2:25:CA:22:42:05:5E:4C:1C:0D:CD:97:61:DD
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer:       /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial:       01988D346012B6AC67516C9470BA8BA51F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number:          0AD2
Signing time:             Sat 09 Aug 2025 05:01:16 +0000
Manifest this update:     Sat 09 Aug 2025 05:01:16 +0000
Manifest next update:     Sun 10 Aug 2025 05:01:16 +0000
Files and hashes:         1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=)
                          2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: XngjjRoX8wxUv6mi6k09Q2tuavsP1rXQKnUoLB4XMgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:34:60:12:b6:ac:67:51:6c:94:70:ba:8b:a5:1f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
        Validity
            Not Before: Aug  9 05:01:16 2025 GMT
            Not After : Aug 10 05:01:16 2025 GMT
        Subject: CN=27bc44f86519c225ca2242055e4c1c0dcd9761dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:48:48:dd:51:4c:e3:d7:9c:31:85:7e:4b:
                    a8:bf:4a:e9:3e:74:3f:fd:bf:f6:c9:73:fb:da:d5:
                    36:60:ce:26:f9:03:82:f6:29:10:71:b9:4b:af:34:
                    ae:f4:9b:f5:bd:d6:0d:0e:6b:60:72:ec:0d:ac:bd:
                    1f:c9:f6:6c:0a:68:1f:aa:37:c9:61:32:12:41:bc:
                    1f:5d:fc:9a:93:6c:b9:71:02:c3:97:d4:2e:cd:29:
                    75:54:24:2c:50:68:89:85:ef:9a:de:c5:0c:7f:8d:
                    3d:77:7d:3f:af:09:a8:b1:eb:e2:4e:78:4c:89:85:
                    07:94:dd:88:14:dd:17:85:16:60:10:18:2c:d9:11:
                    0c:9a:55:0a:cc:93:be:e4:7c:ce:c6:e7:da:fd:49:
                    f3:03:4a:c7:0c:64:00:8f:84:a4:c2:99:a0:c6:cd:
                    65:84:cd:38:c8:a8:ae:6d:67:21:be:d2:dd:a5:0b:
                    1c:41:94:a5:90:9c:55:3d:65:03:51:4f:44:cc:13:
                    b7:e0:36:a1:71:6d:23:2f:4c:68:bb:27:e9:f8:59:
                    61:28:61:19:f7:1a:c9:51:59:12:42:fd:f7:53:60:
                    45:01:8b:b2:1a:69:98:2f:d3:74:52:ff:91:f8:dd:
                    e0:56:98:b3:0e:4f:79:19:2b:41:f1:f0:0f:66:f6:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BC:44:F8:65:19:C2:25:CA:22:42:05:5E:4C:1C:0D:CD:97:61:DD
            X509v3 Authority Key Identifier:
                keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e1:ec:d1:46:b2:43:85:d5:a1:38:b4:3a:b9:db:65:fc:29:
         63:39:89:15:a1:df:cb:fd:32:12:c2:6b:28:c6:2a:5e:1d:4c:
         5c:1e:35:57:b3:93:6d:87:ea:ae:e9:9c:0e:22:01:8d:82:97:
         2c:49:52:05:c7:63:9c:aa:13:90:7c:aa:68:92:6c:c7:d3:34:
         2d:42:b4:b9:7b:47:f7:1e:54:c0:36:7f:be:33:02:3a:3c:98:
         ee:dd:41:f3:f0:23:d8:e5:1c:ba:36:09:08:0e:8c:f4:3f:fa:
         20:dd:45:74:6d:76:2c:3b:94:0e:70:7c:73:ad:b3:0b:38:1f:
         f5:45:7f:f9:86:40:0a:a1:c7:62:94:b3:ba:8b:3e:f1:d1:ba:
         6f:3a:16:8c:3c:9c:c2:f0:2f:ab:70:17:9f:07:de:08:9f:f7:
         eb:81:f7:b3:79:22:2c:0d:0d:9d:c3:06:e4:16:da:b7:07:09:
         79:95:e4:3b:62:29:42:18:0e:c8:13:bf:a9:cf:1b:b8:5a:28:
         bb:ae:69:18:da:8d:ea:53:c2:d8:f9:8d:62:12:0e:6b:85:7b:
         6f:bd:93:08:db:22:96:53:18:7d:e2:44:fb:17:ab:ca:18:fe:
         c8:bd:79:55:cc:1e:af:15:17:83:31:84:93:fc:97:aa:f8:46:
         27:71:92:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:07 2025 by rpki-client