Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
File:                     Wddq-QkdoVgbul7BPl29tzYtnQ8.mft (raw, json)
Hash identifier:          6ettBMm02BE4K3iDEhJMbrCG5RRxGJrsq+xF1q2Bs5E=
Subject key identifier:   6E:0C:A8:16:FC:D0:C5:5F:C4:E0:27:D0:BC:BF:B1:91:81:66:9D:E6
Authority key identifier: 59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F
Certificate issuer:       /CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
Certificate serial:       019891485E6C8F6E76C24E7CC2C4F67D22E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
Manifest number:          10B3
Signing time:             Sun 10 Aug 2025 00:01:35 +0000
Manifest this update:     Sun 10 Aug 2025 00:01:35 +0000
Manifest next update:     Mon 11 Aug 2025 00:01:35 +0000
Files and hashes:         1: Wddq-QkdoVgbul7BPl29tzYtnQ8.crl (hash: P+iri6EBtwPaIVyGB3rc/Y9iWfIzsPdeGv/6mnSqdt0=)
                          2: WxX1Hu2E5PBSUGmsXjK9hC9MNwk.roa (hash: yTqA3ZGTODQnxMnTADEBGt1VqhX3aMRxsME8/St0wzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:48:5e:6c:8f:6e:76:c2:4e:7c:c2:c4:f6:7d:22:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
        Validity
            Not Before: Aug 10 00:01:35 2025 GMT
            Not After : Aug 11 00:01:35 2025 GMT
        Subject: CN=6e0ca816fcd0c55fc4e027d0bcbfb19181669de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:9f:e0:09:78:72:e7:ae:12:5a:d2:56:ae:
                    52:58:b6:d3:a3:b5:32:29:c0:e2:b8:52:84:0f:82:
                    9d:cd:20:93:76:a2:3d:8c:24:e3:30:21:8a:81:c3:
                    07:c9:42:46:ac:39:0f:71:b2:cc:54:b3:4f:3d:63:
                    4b:b9:65:c7:be:b0:69:4c:66:cf:14:1e:e1:3d:d0:
                    a8:a5:b2:64:d1:d6:02:fe:1f:f4:f8:26:f5:4f:bc:
                    29:24:70:62:54:f3:86:30:ea:aa:74:79:03:0f:54:
                    85:cd:2a:03:6e:c1:3c:c7:88:b9:7b:c1:40:ff:07:
                    28:37:a6:1e:f1:a6:28:ea:3c:94:11:5e:51:39:c0:
                    5d:b8:c1:26:a5:98:15:f6:92:83:c4:3b:82:09:b3:
                    8d:55:49:c8:a1:83:52:73:e1:34:04:69:c6:1e:8e:
                    47:11:b0:19:96:13:39:ff:b9:5c:05:e3:d7:ea:22:
                    77:52:51:03:a8:fe:cb:03:e4:25:a3:0a:7d:7c:63:
                    1b:5b:bf:f7:ab:c1:cb:a6:67:8c:10:ef:af:28:c9:
                    eb:44:13:77:66:3b:77:5a:de:af:ea:71:aa:ad:24:
                    aa:a7:40:6c:56:d7:fd:1a:6d:56:64:02:d6:9a:39:
                    d9:2c:97:94:24:8e:16:4f:4d:2f:f2:0b:a8:3b:a2:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0C:A8:16:FC:D0:C5:5F:C4:E0:27:D0:BC:BF:B1:91:81:66:9D:E6
            X509v3 Authority Key Identifier:
                keyid:59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a0:3b:ca:9e:97:77:5d:a4:a0:c9:2a:5f:ba:b5:46:43:17:
         88:18:e1:28:59:97:55:63:3b:21:37:6e:4c:0e:2c:8d:c7:88:
         5c:c7:b1:de:71:c0:c1:0d:ac:10:ff:4f:60:f2:82:14:c0:19:
         13:50:3e:12:4f:bb:56:48:b2:45:7d:63:cf:1a:33:ab:56:14:
         72:da:2c:3a:8d:ad:bc:74:9d:54:5b:5a:3d:b5:79:a9:06:5f:
         8a:ca:db:20:79:d6:79:09:81:4b:65:02:e2:9f:19:24:52:4a:
         dd:c8:1d:68:02:ca:21:ff:e3:85:91:7a:fb:1c:ba:7e:8c:b6:
         de:37:ea:1a:1f:75:ae:87:50:d8:84:a9:cd:30:e7:1e:d4:07:
         01:50:b7:8b:a4:41:c7:de:38:77:07:5e:fd:1c:ec:ab:5b:51:
         a8:a1:19:da:3f:71:06:7d:68:9c:5c:35:a5:cb:30:03:8c:17:
         fb:8e:b1:93:75:15:9c:4a:4c:54:a9:fd:85:30:6d:ae:da:18:
         c1:7b:7a:7d:85:0e:60:46:b6:09:64:83:4f:46:ba:3d:c6:23:
         f2:65:06:78:3c:3b:c3:f3:a3:42:0f:33:71:9d:d4:9f:45:c4:
         41:a5:b5:a0:87:32:b2:b7:ea:e0:e0:35:3f:b8:9a:22:18:97:
         9b:c1:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:04 2025 by rpki-client