Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File:                     wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier:          ey4uil3qTllXvOuoOuUGeVZ3b2n6A6TtgiZyO16Cuno=
Subject key identifier:   02:53:09:59:87:43:2E:75:62:75:15:96:04:2F:1F:6B:AA:41:A4:18
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer:       /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial:       01988E0FBEC72CFF8421B39E1FFD9D890156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number:          11BB
Signing time:             Sat 09 Aug 2025 09:00:53 +0000
Manifest this update:     Sat 09 Aug 2025 09:00:53 +0000
Manifest next update:     Sun 10 Aug 2025 09:00:53 +0000
Files and hashes:         1: CAuOaF0DyRmCYIaIX9MOqTPSAYc.roa (hash: OgksKEIvnkHiH651enb6l1ninF2syHQEYUUQOdcbbz8=)
                          2: Ee1jCF-1mClSEqfFjmxX85gyL_Y.roa (hash: YHDEDxsAZ2bBTaAOCwBWd3d+f6kyqV9CwZkNGiqG6mw=)
                          3: rWkQj7TgOLZZA8E4J5xTwZUZtCA.roa (hash: iVc6rEsxLhBO15L95WXzTOEAvF+Pam9QPl5V09KJqGI=)
                          4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: 8yjzRyQep6BNTo10oGhjJ8ZgNKBMm2fSZKoorZ9O5bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:0f:be:c7:2c:ff:84:21:b3:9e:1f:fd:9d:89:01:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
        Validity
            Not Before: Aug  9 09:00:53 2025 GMT
            Not After : Aug 10 09:00:53 2025 GMT
        Subject: CN=0253095987432e7562751596042f1f6baa41a418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:06:46:90:fd:ba:bd:9a:42:c5:0b:f6:48:
                    8c:82:6b:b5:46:b1:63:47:8f:02:f5:f4:10:f5:70:
                    57:3c:07:b8:71:13:47:b0:dd:be:c3:fc:11:e5:fa:
                    06:5e:d6:4b:8a:47:78:de:ab:c9:3f:bd:61:ff:80:
                    e6:20:d2:f7:fd:05:ee:2a:fc:a4:10:96:97:1d:fd:
                    a2:16:f7:63:04:34:da:3a:c6:4f:71:75:69:71:bd:
                    2f:0c:59:6b:82:69:63:57:7d:a7:11:3d:b5:c3:ac:
                    28:99:f2:98:c9:45:01:77:a3:da:7d:2c:84:52:80:
                    40:d5:74:46:b3:e5:d2:0c:d5:ea:eb:f5:46:4e:10:
                    44:dd:46:e9:80:ff:a3:e7:11:79:e1:bd:68:ba:cb:
                    54:ea:66:1b:37:00:26:da:2b:ca:00:68:57:17:5a:
                    35:e0:67:0c:bc:4b:6e:b4:98:60:82:43:c1:b4:88:
                    75:50:5a:f9:e1:eb:9c:60:cf:62:0b:3c:69:42:f9:
                    af:aa:09:5f:93:1e:54:18:80:dc:cc:eb:74:71:97:
                    8d:88:ab:56:b9:96:8a:b0:84:79:77:ff:79:94:a6:
                    b9:07:c0:99:f9:cf:45:0b:1c:91:87:a1:86:21:dc:
                    62:42:46:e5:5a:cb:a3:d0:b2:be:9d:d3:2a:c2:dd:
                    03:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:53:09:59:87:43:2E:75:62:75:15:96:04:2F:1F:6B:AA:41:A4:18
            X509v3 Authority Key Identifier:
                keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bc:0a:02:9b:3c:fb:22:59:37:dc:46:da:f0:2d:b8:57:b6:
         1a:ef:bc:f0:7c:a1:56:b1:59:31:db:d9:7f:6d:93:da:bd:7b:
         16:79:1a:64:42:35:d8:e1:d4:95:3b:66:28:e8:53:5d:48:94:
         7b:48:2d:e2:1b:25:d6:33:0e:f5:4c:f0:78:6c:8d:0a:b9:2b:
         f2:4b:1d:da:e0:f8:1d:9c:bf:18:4c:f3:c1:ce:16:f1:5a:11:
         0b:1d:30:e3:50:0e:22:49:c3:ef:e4:17:1c:0c:2d:83:2c:55:
         de:8c:99:0c:4a:79:2a:b8:3d:54:1b:5b:8f:09:92:30:d2:79:
         ac:5d:b8:64:f7:9c:70:0f:02:e4:e7:0e:aa:0f:4e:95:94:02:
         1a:37:41:d9:45:a8:2b:23:e7:99:c8:5a:e1:63:15:1d:c2:6c:
         f1:55:72:68:3d:a5:04:fb:f2:0b:09:b2:ac:f8:e3:07:cb:0c:
         c3:88:08:d3:e3:30:94:4a:9b:6f:69:1c:2e:1d:c5:75:83:fd:
         fc:e6:30:2e:b7:48:33:08:03:e7:3d:87:84:de:94:9e:18:61:
         f5:09:02:0c:a8:a4:84:e7:d1:bd:ca:63:ef:3f:93:5d:ae:ae:
         ef:5b:b3:35:ec:e1:4e:1f:c2:50:dc:a2:3f:47:eb:71:8d:b9:
         c9:73:f2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:08:59 2025 by rpki-client