Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
File:                     w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json)
Hash identifier:          mj4Wdc1Rl9Z13E4pmh1OLYWxlVq5ik5qe/Mslr2hTR8=
Subject key identifier:   4B:47:D9:C7:98:3B:42:B7:B3:53:DD:39:D5:14:45:CD:0E:C7:56:84
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Certificate issuer:       /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial:       0198820BE9A6D73791DF0CB1A012CD12D2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
Manifest number:          0EE3
Signing time:             Thu 07 Aug 2025 01:01:15 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:15 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:15 +0000
Files and hashes:         1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: z/56GSHPkq+EACGZ/ryJxONyIy85vQ1iXsc0mdMEz5s=)
                          2: zwDf_kkH_sbuGk9WPwUaPDjfffs.roa (hash: EodK3W1jmYTJC73uP7dzhnrwbPzudn9QK+eDEFeCQfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:e9:a6:d7:37:91:df:0c:b1:a0:12:cd:12:d2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
        Validity
            Not Before: Aug  7 01:01:15 2025 GMT
            Not After : Aug  8 01:01:15 2025 GMT
        Subject: CN=4b47d9c7983b42b7b353dd39d51445cd0ec75684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:39:df:99:09:52:ab:53:75:59:c5:6a:e4:
                    3d:c1:ab:16:fa:41:0d:07:44:05:9f:d1:4a:e6:02:
                    dc:be:76:b0:10:09:aa:5d:73:d2:81:3d:01:92:97:
                    26:53:8c:67:56:1d:d6:e9:39:2b:a9:e8:18:39:a5:
                    74:41:5b:26:7c:b6:12:d1:eb:23:86:a3:a5:6a:9c:
                    05:86:2a:3f:7b:b4:ec:f4:ca:03:83:97:f9:c0:44:
                    36:b3:37:58:03:0e:6a:b8:ab:af:74:e2:6f:de:b0:
                    78:6f:d9:ab:48:bf:8e:7c:58:08:92:26:3c:4d:da:
                    f7:ff:2a:dc:9d:21:8f:02:e0:95:4f:49:13:a6:1c:
                    d4:a2:a8:90:8a:22:e5:96:06:b6:50:e7:8d:e3:ef:
                    45:81:55:87:be:3b:56:49:b7:af:5b:36:68:9e:cb:
                    3b:cc:f2:8d:c2:b2:11:ab:27:c9:4a:8a:f1:da:fb:
                    e4:d4:6e:db:08:53:12:b4:c2:43:98:e5:ea:4a:54:
                    25:ff:c0:e9:c6:48:1d:bd:e9:90:1b:c6:0e:83:2f:
                    b2:7f:2a:cc:56:cc:7c:7c:de:76:64:a9:13:de:24:
                    b6:7d:f1:da:55:67:17:8d:22:87:1f:91:d7:0a:0a:
                    39:f3:30:11:a4:c5:fc:7d:af:94:e8:ea:04:0c:32:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:47:D9:C7:98:3B:42:B7:B3:53:DD:39:D5:14:45:CD:0E:C7:56:84
            X509v3 Authority Key Identifier:
                keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:8e:70:b3:c7:a7:d4:ff:04:30:5d:d1:be:35:92:63:37:
         0d:17:54:20:26:67:4c:5e:ad:47:71:87:ce:39:8e:b3:42:28:
         b9:d2:0a:d3:55:e6:1c:f7:00:a5:f1:60:40:3e:7d:3b:1e:e9:
         08:19:81:b3:2f:07:9a:a4:43:a2:ef:e9:7c:ca:40:e1:f5:53:
         3e:ab:cf:d6:f7:90:ed:79:34:12:1e:a8:5b:3d:17:52:af:34:
         a3:32:10:e1:c5:14:40:fb:e1:e3:7f:04:44:c5:b8:e8:75:3d:
         8e:07:24:6d:18:85:f8:f7:91:5d:7a:39:5b:0f:a4:53:a6:81:
         fc:32:58:01:ff:57:8d:28:29:ff:33:c8:10:86:a3:42:c4:b7:
         f8:8b:53:c8:dc:8d:7c:97:ed:86:70:dc:dc:61:47:83:d6:e9:
         d4:8c:75:c7:1e:90:02:6d:99:a5:38:a8:52:d7:66:37:00:4d:
         a2:5b:e3:17:68:04:2d:9c:01:dc:43:c0:fb:66:4a:22:f3:9b:
         7b:0f:10:47:04:21:4a:c0:17:21:cc:d6:59:86:4d:21:ba:10:
         08:72:94:7f:6e:23:a6:db:ea:9c:12:aa:7c:5b:ce:03:5c:18:
         ae:6a:d7:f5:22:35:e0:8a:6f:8e:1f:d2:86:a0:c6:9b:78:cc:
         cd:b3:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:28:25 2025 by rpki-client