Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File:                     W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier:          CcYO8YnyOn+dXFe5mPD9QOl757El9mIcatlP+gtvVOg=
Subject key identifier:   D7:36:6E:93:7B:B1:35:4B:E2:6A:3D:B3:17:55:54:D4:FB:9E:29:36
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer:       /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial:       01987FE72FBABD8E4F9AE2CEB6D14DBC1D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number:          1624
Signing time:             Wed 06 Aug 2025 15:01:54 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:54 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:54 +0000
Files and hashes:         1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
                          2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: C9ftZIJEtQEVPBTnzCrFHW9I8wZSCUFzvY/+VWB1Osc=)
                          3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e7:2f:ba:bd:8e:4f:9a:e2:ce:b6:d1:4d:bc:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
        Validity
            Not Before: Aug  6 15:01:54 2025 GMT
            Not After : Aug  7 15:01:54 2025 GMT
        Subject: CN=d7366e937bb1354be26a3db3175554d4fb9e2936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:e9:d4:5c:a3:ab:dd:d4:a5:47:03:04:98:
                    b8:c3:c3:0a:91:b1:0c:61:90:02:b1:a1:78:16:1c:
                    80:0f:13:81:d2:b7:e8:aa:3e:6c:c7:ac:c5:ce:e4:
                    e5:36:cf:b9:e8:02:72:c0:fc:bc:5c:69:43:7d:df:
                    c5:dc:13:b2:a6:ea:0e:92:20:aa:05:9d:fb:0c:51:
                    7f:46:8f:e9:40:36:f2:9e:7b:f6:44:fe:c3:5d:02:
                    34:f9:ca:f4:32:ae:85:ea:ac:ad:4e:c7:56:b5:aa:
                    85:11:4d:94:78:cc:90:5f:c5:ab:27:ea:5f:ff:63:
                    ca:3a:6f:ee:d1:37:d7:17:16:de:11:e7:fc:47:48:
                    9b:a6:b7:a7:a8:1a:01:0b:c6:a3:0d:c8:6a:41:6b:
                    0e:5f:c4:41:29:49:bd:20:c0:65:e1:94:05:9b:2c:
                    07:24:51:ac:d0:7f:2f:d2:8b:42:03:d3:f5:bf:ac:
                    3a:81:3d:10:38:13:52:37:99:45:a5:96:2c:ad:6b:
                    83:55:37:08:9d:09:ad:e0:2d:00:a0:da:be:c4:f4:
                    72:ea:d8:f6:2d:45:f7:f3:80:2d:f0:cc:88:46:91:
                    21:a5:b7:5e:02:18:16:fb:4b:5d:c8:42:73:61:cc:
                    b9:60:e0:f2:1c:4f:b9:21:48:11:7c:34:95:c7:61:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:36:6E:93:7B:B1:35:4B:E2:6A:3D:B3:17:55:54:D4:FB:9E:29:36
            X509v3 Authority Key Identifier:
                keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:51:8f:e6:cd:ee:47:2a:eb:91:3c:66:7f:7c:86:3a:02:92:
         35:31:7e:29:a7:f3:73:b0:f6:17:7e:8e:b2:f9:aa:e2:d5:ba:
         0b:4f:ca:32:f3:33:a9:57:b4:ba:57:17:86:77:d7:e1:0c:bc:
         c2:09:d5:b7:08:01:51:75:fc:da:92:31:1c:6e:ec:23:9c:19:
         8a:d3:ca:d2:2a:46:e5:e1:ef:55:d2:f3:01:d9:4b:5a:f0:10:
         08:e6:2c:a9:ef:d4:35:fb:13:82:cc:1c:cb:20:58:8c:f1:17:
         9a:5d:c9:46:33:d1:96:85:aa:4e:02:4f:b0:0a:e5:0b:90:92:
         c9:f3:3e:f4:db:96:60:57:a6:9e:f6:cc:dc:9c:84:4c:7f:6b:
         0f:1f:89:6d:c0:e6:a3:0f:0e:e2:8c:5e:52:ab:9e:7e:1f:5c:
         65:7e:1b:d9:de:b8:22:d6:d3:a3:6e:0f:72:b6:42:32:04:e4:
         53:08:b8:c1:59:67:7a:a7:49:d9:92:a4:cd:6c:64:f8:1c:8d:
         61:29:58:5b:20:2e:0c:93:95:79:10:fe:3e:d7:6d:66:2c:f1:
         76:0c:ee:13:15:05:e2:76:50:95:62:79:64:3c:d5:96:07:bf:
         7d:2c:1e:9c:d1:1f:8e:25:64:7b:60:5f:68:32:4d:08:a7:8e:
         61:42:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:13:09 2025 by rpki-client