Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
File:                     wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json)
Hash identifier:          IKQxLMuG6DeNe11BUwjcw7a6RwjiUn4a9nBAPZ73TvY=
Subject key identifier:   A9:44:65:C0:6E:FC:72:A7:40:CA:A0:18:05:8D:A8:77:07:60:5E:D8
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Certificate issuer:       /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial:       019873E2648D9E07A2FA03DE4D27799088A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
Manifest number:          1432
Signing time:             Mon 04 Aug 2025 07:01:13 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:13 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:13 +0000
Files and hashes:         1: fS3aIp_dstilOoZpsHs2fT3hEwI.roa (hash: ekL2u08a8PJkCPy3xwuS3H8hi/HVcBEIiMkXY+L534U=)
                          2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: gcjIPufe2V9wsNderHS5vCGIR7KtgPIGbjR0nOfyY3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:64:8d:9e:07:a2:fa:03:de:4d:27:79:90:88:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
        Validity
            Not Before: Aug  4 07:01:13 2025 GMT
            Not After : Aug  5 07:01:13 2025 GMT
        Subject: CN=a94465c06efc72a740caa018058da87707605ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:75:08:fb:9e:a8:bd:b4:25:87:c1:9d:36:
                    8b:00:d8:42:b1:19:a2:46:c1:c4:cf:53:de:17:46:
                    67:cc:a0:7a:51:3b:52:b2:7e:2e:31:c7:b9:0d:67:
                    8f:27:da:c1:cc:a7:69:f1:dd:dd:f8:f8:f9:c1:d2:
                    3c:de:da:c6:88:bc:1f:c9:25:ae:67:f6:fb:b7:68:
                    ca:ac:67:34:52:ba:7a:5d:d0:e1:cd:58:5b:5c:2d:
                    86:88:06:24:b5:33:71:e5:c0:5a:83:56:09:88:c2:
                    be:0c:3e:88:b9:d3:e3:1b:e4:af:2c:ec:42:ad:99:
                    d1:d9:26:41:7a:f7:ce:58:ff:b0:fb:2b:77:04:3e:
                    0c:93:05:46:73:6d:be:4a:44:16:a3:cd:a7:bd:7c:
                    20:b1:4b:4a:c5:0d:1d:4f:bd:24:e2:db:e1:33:98:
                    77:49:db:91:0b:7a:ef:85:15:90:2b:01:a4:9e:80:
                    34:b6:84:64:ee:17:b8:de:91:30:60:4b:11:5e:16:
                    89:5a:28:eb:43:5c:22:69:cc:2b:99:92:7e:cb:c5:
                    01:ef:24:c5:a6:93:02:0d:51:51:72:71:e0:7a:d5:
                    cc:cf:8c:a7:53:7e:0d:b1:a9:1b:8c:ae:05:83:8d:
                    6c:9f:6e:fc:40:da:34:62:80:37:ae:67:ae:1a:63:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:44:65:C0:6E:FC:72:A7:40:CA:A0:18:05:8D:A8:77:07:60:5E:D8
            X509v3 Authority Key Identifier:
                keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ab:57:7b:34:5a:09:e6:13:63:82:55:b6:eb:a9:17:41:4d:
         b6:5f:0e:1a:e6:d2:55:a6:7e:33:9a:2f:33:52:e1:50:3b:e8:
         35:21:db:21:ce:95:10:d8:85:61:c1:ad:ea:3f:36:59:a9:84:
         59:61:48:71:3a:74:35:af:0a:63:d3:53:94:28:1a:16:55:32:
         a2:b1:2b:f5:b4:31:16:7a:1b:c9:d4:0b:bb:04:be:60:20:7a:
         d9:47:3b:06:a2:8c:a0:9d:2a:49:32:28:62:6e:38:90:6e:41:
         31:37:15:1a:22:27:c1:bb:ff:de:69:35:b0:19:fb:28:22:7e:
         bd:71:59:38:0a:20:36:66:3e:81:f9:bf:c1:6c:33:d1:9e:73:
         18:da:f2:bc:22:e8:a5:03:8b:82:0e:b0:4a:0e:79:1f:5d:34:
         e3:1c:64:66:8f:22:f7:6f:c7:34:37:d6:37:ab:41:b5:e6:18:
         09:dd:37:cb:36:7f:3d:67:81:56:55:87:f1:92:e0:84:70:1c:
         e6:30:21:c7:4b:39:ba:65:10:f4:b9:09:bc:ee:e6:c9:74:7a:
         e4:fd:c3:b1:37:05:49:30:d3:5d:1e:46:1f:59:1e:df:fa:02:
         f2:d8:4a:9b:96:4f:35:3e:1e:ec:36:76:e8:4a:0a:a5:26:ef:
         51:ca:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:48 2025 by rpki-client