Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File:                     WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier:          9sd6/2RNz5jFu9T1b/gfg8NvcVsjwU7PZrYpR/nTi80=
Subject key identifier:   F0:EE:B3:2A:72:3F:2D:01:D6:8C:DF:7B:C9:4B:A2:7F:A6:71:92:C0
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer:       /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial:       0198891FE6AFB3D151E268F128C3244480C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number:          0388
Signing time:             Fri 08 Aug 2025 10:00:25 +0000
Manifest this update:     Fri 08 Aug 2025 10:00:25 +0000
Manifest next update:     Sat 09 Aug 2025 10:00:25 +0000
Files and hashes:         1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: xIGcJZcT2zkA8R3sx8LfPvQWQjA1S5gKPa20F+Y0qfg=)
                          2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:1f:e6:af:b3:d1:51:e2:68:f1:28:c3:24:44:80:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
        Validity
            Not Before: Aug  8 10:00:25 2025 GMT
            Not After : Aug  9 10:00:25 2025 GMT
        Subject: CN=f0eeb32a723f2d01d68cdf7bc94ba27fa67192c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:84:ac:e1:d9:7f:f0:bf:a3:b9:7a:22:da:5a:
                    04:01:25:f0:37:2f:a5:98:28:9d:53:7c:67:2a:e3:
                    34:64:f2:58:e2:38:ee:f2:57:17:cb:9c:e9:07:1e:
                    e3:2f:2b:0b:5c:0a:2b:30:41:64:07:a8:2f:fa:65:
                    35:dc:5e:36:46:71:4a:9c:ab:28:a1:43:b6:93:db:
                    e7:88:5d:60:6d:b5:b8:52:50:25:44:34:78:20:d8:
                    59:82:bc:74:23:89:d9:6c:c5:4c:9c:46:04:81:e6:
                    3d:02:d4:bf:5c:c5:3d:3e:ad:89:d3:70:29:1e:eb:
                    32:b6:09:1a:32:07:88:7b:7b:f4:42:d9:81:4c:56:
                    f8:df:08:b7:dd:3d:56:8a:25:2a:9d:b7:9f:cb:be:
                    92:d7:c8:67:2b:3e:c7:1c:88:d6:f0:26:08:20:cd:
                    3d:a3:be:a6:f5:06:5f:bc:93:a5:d3:e2:56:6d:7c:
                    dd:95:76:f8:cc:da:d6:18:d1:36:ae:94:84:76:de:
                    83:5c:39:7d:eb:fb:98:bd:3a:37:23:14:4c:46:3a:
                    3b:4f:07:48:d2:43:65:27:a3:24:ae:6d:8b:46:55:
                    42:fd:1d:e4:2c:a5:16:33:ba:04:72:a7:5d:30:4f:
                    c3:3d:b6:57:a2:7a:9f:84:01:c6:64:19:ca:eb:dc:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EE:B3:2A:72:3F:2D:01:D6:8C:DF:7B:C9:4B:A2:7F:A6:71:92:C0
            X509v3 Authority Key Identifier:
                keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:08:ec:0a:69:d5:16:a0:ea:fc:59:3c:66:12:2f:80:79:b0:
         c7:e4:90:48:0e:f9:10:76:ba:3f:62:d9:b8:93:1d:67:11:4b:
         f5:5d:26:c8:8c:01:f3:ca:a2:a2:49:09:06:32:14:95:73:ac:
         6e:23:6c:c1:57:1a:1e:5a:11:78:81:81:c6:28:2e:07:d2:bf:
         d5:15:85:ef:c4:a4:a0:be:ef:20:d0:fc:f0:42:47:a3:7d:8f:
         2f:a1:8b:2e:b4:7f:7a:54:81:c3:ae:c7:cd:e1:44:4f:9b:ea:
         30:1a:d7:ed:c8:83:29:c0:62:c1:11:7d:42:a5:1a:b0:20:4b:
         4b:f0:68:2f:1e:d3:68:a1:77:71:2c:08:7b:59:39:df:94:cb:
         c1:5a:0a:08:db:5d:de:63:eb:cc:bf:ff:4e:a0:7b:55:bf:14:
         c5:3c:8e:4f:8a:61:56:4e:1d:f2:25:a3:c9:cb:55:ba:31:cc:
         ec:d9:fd:3d:05:c1:70:7c:85:f6:9a:82:32:2f:e7:c8:89:9c:
         94:27:b7:b3:a7:3e:ed:14:e7:9e:81:bc:f8:f9:b3:40:5c:36:
         cf:68:e3:7b:30:f2:da:ba:07:1d:ff:36:c4:ea:39:17:65:cd:
         37:8c:c7:89:7f:82:12:75:0c:bc:f1:a5:78:c6:28:5a:bd:66:
         89:90:c3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:37:17 2025 by rpki-client