Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
File:                     wmxJkkbYEuUuy6e39V4m7a71NG4.mft (raw, json)
Hash identifier:          4UJrUvWAHWZCt7zY6NYabhtdIseayiWJPwy5Ck2Nke4=
Subject key identifier:   48:1C:98:CF:F6:2C:30:93:E4:F3:A4:18:BA:6C:65:24:7C:E3:07:09
Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
Certificate issuer:       /CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Certificate serial:       0198A2725C631D98401749B7C0B55C158637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
Manifest number:          0913
Signing time:             Wed 13 Aug 2025 08:01:00 +0000
Manifest this update:     Wed 13 Aug 2025 08:01:00 +0000
Manifest next update:     Thu 14 Aug 2025 08:01:00 +0000
Files and hashes:         1: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (hash: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=)
                          2: wmxJkkbYEuUuy6e39V4m7a71NG4.crl (hash: uxNSeCY740tiKJgfM9D7V2EwWxmXUmMkfvwxLgefPL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a2:72:5c:63:1d:98:40:17:49:b7:c0:b5:5c:15:86:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e
        Validity
            Not Before: Aug 13 08:01:00 2025 GMT
            Not After : Aug 14 08:01:00 2025 GMT
        Subject: CN=481c98cff62c3093e4f3a418ba6c65247ce30709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:1b:42:2f:61:4b:b1:62:75:eb:91:84:39:
                    3f:f9:d4:63:d4:7f:6d:fb:88:58:88:91:93:27:c1:
                    62:fc:91:a3:34:54:70:6b:54:6f:ef:46:5f:74:06:
                    77:66:c1:56:f6:ab:ee:48:ba:98:ea:22:c0:c8:df:
                    77:21:98:b1:34:da:a7:a8:be:3a:18:90:fa:92:ba:
                    db:c6:fc:a9:93:36:98:f7:d3:40:9e:70:c2:d5:92:
                    92:ed:fa:5d:e8:d0:66:c5:f4:91:bb:5d:31:be:dc:
                    2a:14:f3:8b:f3:67:04:3b:4c:3a:1e:27:93:7e:3c:
                    ee:3f:08:fe:36:fa:5f:2b:d2:89:d2:5d:07:26:83:
                    43:49:43:57:aa:38:cc:7e:66:a5:ed:0b:0d:47:e4:
                    a3:e9:ec:47:e0:67:13:8f:5a:1a:72:18:44:0c:24:
                    e6:3d:89:69:cc:ab:15:94:cd:79:c3:21:98:cc:4d:
                    48:e8:46:8a:30:a4:b6:8e:67:01:6b:ec:52:a9:c5:
                    e4:61:e9:f8:1d:6c:44:92:d3:7a:24:cd:2e:67:d3:
                    37:2f:4d:5c:a2:5f:8e:d5:d5:09:c8:04:3b:76:06:
                    5a:2d:41:c3:c0:c3:22:7f:88:96:cc:1d:06:57:61:
                    9e:ac:89:e6:86:c0:91:7e:6f:80:0b:7e:88:7d:42:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:98:CF:F6:2C:30:93:E4:F3:A4:18:BA:6C:65:24:7C:E3:07:09
            X509v3 Authority Key Identifier:
                keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:74:9b:ac:4e:f4:d9:23:d0:a9:2a:71:ba:d9:2a:fe:5d:
         3f:a0:96:b3:45:f3:76:96:42:dc:85:7e:1c:01:f1:e1:b3:fb:
         a9:9e:09:48:37:55:43:fc:6a:ff:b4:94:3e:42:32:38:0d:3b:
         ca:4f:29:62:67:64:8b:9b:df:75:c5:3e:3c:07:76:84:c1:a9:
         c3:c9:9c:a8:d0:a5:05:fa:9a:2d:4e:f3:e1:ee:4a:45:cf:b0:
         d7:2e:1c:00:1b:17:75:bd:9d:34:fd:b7:82:43:ad:63:82:e0:
         41:d4:09:a4:64:5f:12:d6:2e:57:21:d1:12:ec:e4:78:ac:49:
         75:9e:3b:42:96:16:1d:fe:0e:8b:66:7c:e6:e6:4b:46:58:eb:
         b8:09:d5:da:f1:5c:dc:8d:a8:f5:ee:b3:5d:2d:de:ed:58:ba:
         4a:5d:47:50:de:f6:22:ea:30:5d:30:ba:7f:e8:ca:4b:0d:16:
         1b:0e:34:b7:2f:62:d5:23:34:26:69:d5:81:11:75:15:27:9c:
         74:2c:17:87:08:56:b5:d8:c1:37:77:50:ff:6e:19:69:c8:61:
         b6:b4:a8:e6:8d:bf:b2:f9:7d:47:fa:81:8c:3c:95:57:02:d2:
         cc:f3:14:65:6b:49:af:6f:19:74:9c:98:a3:a2:80:9a:cd:35:
         00:d3:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 16:11:22 2025 by rpki-client