Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
File:                     wrUuo8q9FGpXffzfuHX_WjV1ctc.mft (raw, json)
Hash identifier:          3dmtcCnoCywbWIqq90o1OlHyRNRhwp3IS9wQ0/ybxhg=
Subject key identifier:   BF:10:0D:4B:78:CC:C1:09:30:E8:6F:6A:BB:EC:A7:F3:8B:37:B8:AF
Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
Certificate issuer:       /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Certificate serial:       01987C09D51B087ED0E797E03DC998330111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
Manifest number:          05A0
Signing time:             Tue 05 Aug 2025 21:01:15 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:15 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:15 +0000
Files and hashes:         1: MG_LemiZ4GgmFKwuBUT8GzFCS9o.roa (hash: OHMWKPBCF82oEvnytVAEpjmK3rUs3XOc7SKkHkxU2KQ=)
                          2: wrUuo8q9FGpXffzfuHX_WjV1ctc.crl (hash: SbMvLcZu4nOYfMDquzIIjWod8LBxh3Wu1x1ToHjNyYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:d5:1b:08:7e:d0:e7:97:e0:3d:c9:98:33:01:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
        Validity
            Not Before: Aug  5 21:01:15 2025 GMT
            Not After : Aug  6 21:01:15 2025 GMT
        Subject: CN=bf100d4b78ccc10930e86f6abbeca7f38b37b8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:d8:10:c9:fe:0e:b3:e8:ca:04:f5:da:ba:
                    b9:f9:74:03:64:f7:ed:ea:39:06:9b:be:4e:65:b4:
                    33:e0:29:d9:66:a4:eb:43:9f:7d:ab:85:51:63:d7:
                    09:a5:d3:09:39:b8:61:39:e6:de:14:37:23:fd:27:
                    70:02:4e:10:82:d5:6c:36:65:0e:f3:25:ae:84:e1:
                    4e:93:3e:2b:1e:64:75:8f:21:6d:18:c5:b5:0b:c0:
                    dc:75:ec:c1:a0:d8:d1:fe:37:1d:8c:31:95:c6:5e:
                    d1:89:6b:59:7e:64:e0:ae:4b:e0:fd:91:7c:51:1c:
                    ff:89:c1:73:0e:fe:10:f5:aa:10:21:89:99:ec:aa:
                    71:88:ed:5a:51:21:d1:36:0f:e5:f2:72:d0:c2:95:
                    21:cd:18:62:aa:87:bf:d9:61:6e:72:b8:21:0d:a4:
                    ab:00:b3:cf:33:c4:5c:9e:c9:fc:ac:7c:23:69:de:
                    bf:48:44:9f:48:55:35:7d:da:6e:b6:b3:c7:c4:d1:
                    b1:a1:fd:3e:13:57:fc:df:4c:d9:8f:0e:71:4b:d6:
                    ef:f8:09:8d:93:5e:d5:6c:66:75:c6:03:ec:e1:ef:
                    16:1d:c7:28:7b:e2:26:f6:2b:28:a1:90:04:99:38:
                    7f:2c:7d:ea:65:91:f7:86:a7:5a:d4:57:60:de:12:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:10:0D:4B:78:CC:C1:09:30:E8:6F:6A:BB:EC:A7:F3:8B:37:B8:AF
            X509v3 Authority Key Identifier:
                keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:88:87:d7:c8:dc:ec:54:e3:e3:27:f6:ec:6d:29:6e:e4:
         d4:bf:45:38:bf:12:fd:61:35:64:34:3f:dc:cb:de:b7:b5:15:
         50:84:e3:75:8f:f0:aa:81:4f:12:1f:1b:a0:6a:9f:bc:4d:4e:
         9b:fc:ba:08:3b:ae:ce:de:5f:9b:7b:94:dd:86:65:65:74:b1:
         f5:e6:2e:08:e6:82:34:ee:79:7f:88:0e:d2:dc:9b:4c:12:a9:
         ee:75:01:ae:fa:65:f1:c3:9c:c5:52:1e:77:3b:10:be:8d:df:
         a7:b5:ce:48:ec:14:48:f4:69:3a:3e:d3:d4:50:6c:67:96:7c:
         c9:a9:9c:42:9d:40:c2:99:22:23:1b:d1:06:28:3a:21:01:cd:
         d7:47:45:60:61:86:f6:63:ba:f8:bf:2a:c2:0a:b6:0a:7b:53:
         df:32:5c:30:f8:a9:a9:cc:2c:55:d9:ec:31:c2:fd:b2:aa:92:
         f6:81:72:0a:b5:8b:e5:54:26:e8:04:d4:9e:c2:95:b7:99:64:
         1a:14:60:e6:1d:e8:d1:11:88:6d:b0:7f:d9:93:dd:82:73:49:
         f7:72:18:72:3a:81:64:69:3e:2d:1f:c8:53:b4:de:e5:4a:2c:
         64:b4:2c:83:f8:eb:1b:74:74:8f:ae:cb:f5:4a:45:e7:02:1d:
         96:fc:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:19:15 2025 by rpki-client