Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File:                     _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier:          v5FmE/aIMPcIjSaAAiau/4lRdyK6FVmyMcKItKY0XxM=
Subject key identifier:   DA:F6:E7:B6:65:92:F8:2B:E2:41:98:00:12:29:69:CB:B0:93:E7:84
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer:       /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial:       019872985B67A5361DEE56844058425C3855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number:          130B
Signing time:             Mon 04 Aug 2025 01:00:44 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:44 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:44 +0000
Files and hashes:         1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
                          2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: IwO25iiaivw91OJRDZEqcxa7XYpjWHbl8NkbenUmBAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:5b:67:a5:36:1d:ee:56:84:40:58:42:5c:38:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
        Validity
            Not Before: Aug  4 01:00:44 2025 GMT
            Not After : Aug  5 01:00:44 2025 GMT
        Subject: CN=daf6e7b66592f82be2419800122969cbb093e784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:85:8a:4b:5b:91:8b:5c:dd:f1:81:22:2b:
                    c6:0f:97:67:7d:41:c6:83:e0:09:06:25:43:c8:35:
                    6f:a9:04:d6:79:0e:fd:a1:17:2c:6c:db:8c:f3:31:
                    9e:1a:c2:2c:9b:04:33:f1:02:79:68:7e:5d:71:94:
                    58:e6:c5:a3:c6:71:c7:41:d3:eb:7e:30:45:b0:f5:
                    04:6b:80:56:91:d6:30:a1:5b:74:f5:11:6f:c8:d1:
                    3a:ac:92:3c:12:26:76:01:f4:38:75:f3:38:c3:1b:
                    75:ca:cf:98:fe:af:93:1f:2b:23:6f:9b:66:b8:c1:
                    54:53:fb:b3:43:0c:d2:c5:07:eb:28:b6:47:b0:bd:
                    f4:c1:67:e3:82:9f:5a:8f:b8:4e:e5:7e:1e:64:c6:
                    e3:b5:88:fa:1e:b8:03:49:29:b7:bb:d6:fe:c7:6b:
                    3a:3c:0f:e2:8d:f1:38:f2:d5:8a:e1:1a:7e:d6:f9:
                    36:ba:8d:df:8b:1a:39:b0:f9:1f:df:42:e6:24:6e:
                    09:95:02:f8:2e:81:c5:1c:85:22:b9:76:64:dd:fe:
                    68:50:22:6b:79:b4:aa:98:f8:5f:47:7a:f3:5f:02:
                    58:b8:25:2d:af:d4:37:2e:cc:79:3c:e7:a7:e6:14:
                    bd:26:7a:09:f0:a5:91:c0:2d:50:c5:40:3b:35:7b:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:E7:B6:65:92:F8:2B:E2:41:98:00:12:29:69:CB:B0:93:E7:84
            X509v3 Authority Key Identifier:
                keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:af:e9:12:5e:7b:3b:b0:8a:56:c7:0a:66:04:fd:0b:db:98:
         1a:18:6a:28:8b:82:68:1b:ff:03:1e:a2:86:41:15:0c:2d:36:
         93:06:22:2d:53:ad:59:37:27:fb:79:63:c7:2f:c7:52:81:b0:
         f6:7d:30:06:c4:f0:89:33:68:63:9c:5a:af:86:ad:63:cf:45:
         50:63:8f:c4:32:b7:07:34:d7:83:99:58:26:2a:43:59:7b:7c:
         b4:88:3f:61:39:09:ee:24:ab:ae:b9:2a:b8:b4:76:62:63:43:
         35:36:2d:40:72:0d:42:fe:3b:e0:3a:7c:6b:8c:75:1a:91:6b:
         4f:cf:d2:ef:02:cc:cc:a9:d7:e3:f2:2b:19:a5:02:64:61:ce:
         e8:b4:16:9d:90:e3:a3:95:db:07:75:d3:b1:5b:a0:4a:00:86:
         b4:df:0b:04:30:39:61:83:80:89:8c:61:ab:61:65:bd:07:3f:
         6f:75:4b:b2:47:3b:e6:f8:8b:5f:74:b2:bf:e2:02:e5:d6:91:
         ff:38:0e:56:e5:0b:ef:9a:7f:30:31:b5:94:25:27:7c:0b:34:
         12:79:5e:91:75:4d:6d:c5:f6:80:6b:51:6a:98:23:44:df:d4:
         25:d1:1e:9d:de:fd:9a:e3:c8:58:71:24:2a:9c:fe:71:88:46:
         44:b8:88:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:27 2025 by rpki-client