Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
File:                     wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json)
Hash identifier:          +TO2cBsbC1iaKe3aWWBb5qfzvNq9q4QsnoEElpBnyj8=
Subject key identifier:   5C:42:7E:29:CE:9B:F9:53:03:1B:43:EE:F4:16:49:00:AE:A2:13:6E
Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5
Certificate issuer:       /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
Certificate serial:       019873E241D3CE710D5B160764EE6D020B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 07:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:04 +0000
Files and hashes:         1: AMYGfvxAWSGgHnKu_QntycSpGmI.roa (hash: QcPElnjpeBVJZHljf/0lA1BJWaDX6zX8ch7k4Gzc5Ng=)
                          2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: EQ5uUi3crhF2AGbbf8X1UgQ9oqAm4TUUzbhovxi1lPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:41:d3:ce:71:0d:5b:16:07:64:ee:6d:02:0b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
        Validity
            Not Before: Aug  4 07:01:04 2025 GMT
            Not After : Aug  5 07:01:04 2025 GMT
        Subject: CN=5c427e29ce9bf953031b43eef4164900aea2136e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:a6:f2:6f:4c:d9:c8:c4:e2:15:e8:14:0b:
                    8a:4b:4e:20:24:1f:14:a3:8d:ea:18:33:90:43:8f:
                    37:19:7e:35:db:fa:f3:38:46:8b:bb:00:13:c0:07:
                    5b:7f:bc:e6:1f:12:57:d4:34:59:c1:32:20:d1:59:
                    45:68:62:f3:06:40:bc:e5:fc:0e:e9:88:9a:b7:2c:
                    95:df:c3:fc:14:a6:f1:23:6d:d1:2a:80:f7:1c:04:
                    88:c3:61:3d:7a:6a:10:0e:3c:cf:34:ac:92:2a:81:
                    84:ad:d4:81:cf:f6:ac:66:5c:06:9d:dc:b3:5d:37:
                    c7:1e:58:e1:44:10:e9:2d:20:9f:23:72:e9:13:30:
                    5a:40:bd:a8:cb:14:72:b9:e2:51:cf:e1:f1:6d:6b:
                    d4:f8:95:17:91:b1:c8:8d:7a:5c:1c:48:01:a2:c3:
                    53:56:b3:1e:4f:54:1f:03:ca:1c:bd:65:4f:ea:0c:
                    89:af:f7:e0:4e:e7:11:39:14:56:50:f1:90:45:48:
                    24:42:71:f5:53:ec:6a:cd:0d:b4:55:2f:86:66:1e:
                    91:4d:c6:fb:b0:3c:56:50:50:59:a0:ff:37:a9:5e:
                    66:63:3f:5d:17:95:8c:3c:e2:32:6c:eb:ac:a1:a0:
                    e4:fd:c9:81:19:41:05:80:5c:1e:a1:da:dc:71:65:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:42:7E:29:CE:9B:F9:53:03:1B:43:EE:F4:16:49:00:AE:A2:13:6E
            X509v3 Authority Key Identifier:
                keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:75:75:b1:c0:c3:51:32:0f:79:55:ad:49:05:34:1e:d7:3c:
         7b:e4:7e:d9:ad:03:2e:86:33:73:4f:b7:79:7b:4e:d5:1e:7a:
         fd:d4:79:af:fc:a0:66:6f:5f:96:2d:77:94:cf:ae:aa:40:81:
         f8:4c:f5:22:df:2d:9e:ba:80:b3:3d:47:25:f1:0b:55:f7:05:
         e2:68:47:27:c4:ef:b8:2b:c7:47:1d:ff:14:60:ae:61:8e:80:
         d2:b3:36:b4:c8:37:db:0b:d8:cf:8e:11:0c:26:07:02:af:11:
         fb:9f:f9:5d:5d:56:f2:ca:af:dc:30:0c:d2:7d:b8:c4:c6:10:
         63:ad:74:81:0c:6d:b6:ff:d0:67:18:d9:d2:17:4d:eb:70:9a:
         be:77:37:ac:2c:c0:c7:2a:9d:ec:4e:66:0d:57:a3:f0:6b:45:
         eb:ba:dd:ac:17:4b:ca:bb:63:91:19:f6:00:76:b9:5e:8c:c6:
         3f:07:ea:2d:76:00:d5:ff:b3:e8:4a:f1:ab:27:5f:6a:1f:72:
         43:6f:9a:ed:6a:cb:24:61:01:bb:1e:d9:bf:4b:00:56:68:39:
         f1:55:dd:de:68:25:b7:4e:ad:0f:3d:ac:4e:1b:9c:f8:f0:c5:
         72:34:a3:cf:38:29:de:76:a0:59:ed:78:c3:68:1f:3a:74:2c:
         b8:f1:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:20 2025 by rpki-client