Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File:                     wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier:          IjG3HckhD6QZ6VbnktEZWFGUK+vWJlCv5NAHxyTXTDw=
Subject key identifier:   DF:D1:1E:79:ED:CF:AC:A2:F7:1C:00:AD:5E:42:8D:05:96:D0:40:32
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer:       /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial:       01987F78F34EC66350B33F827A1CAB92836C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number:          1038
Signing time:             Wed 06 Aug 2025 13:01:29 +0000
Manifest this update:     Wed 06 Aug 2025 13:01:29 +0000
Manifest next update:     Thu 07 Aug 2025 13:01:29 +0000
Files and hashes:         1: lXUonjcSHCnymM91YbnZZiIsRN8.roa (hash: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=)
                          2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: bmffioSqizsn9wX2kRgYRWPPgbvWad8NI21tdjuUFlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:78:f3:4e:c6:63:50:b3:3f:82:7a:1c:ab:92:83:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
        Validity
            Not Before: Aug  6 13:01:29 2025 GMT
            Not After : Aug  7 13:01:29 2025 GMT
        Subject: CN=dfd11e79edcfaca2f71c00ad5e428d0596d04032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:90:b6:86:47:4c:c0:a9:f3:33:05:39:74:e9:
                    d8:05:26:c4:bc:0f:93:02:0f:b1:ff:f3:d7:1a:c8:
                    5c:fe:c0:da:13:99:5d:3f:cf:35:8a:83:c3:84:57:
                    d2:97:a2:09:41:b9:97:7f:6d:04:91:16:0b:df:25:
                    cb:5e:6d:00:bd:ee:3d:83:40:2b:5c:9a:8c:52:10:
                    e8:ce:28:d9:4b:66:63:f7:88:9f:a4:ba:4d:02:aa:
                    ff:41:e1:9e:aa:af:38:1d:e5:ad:b4:c3:f1:7e:74:
                    e9:b6:d5:87:1b:58:15:ae:07:d5:1d:76:71:ef:53:
                    53:b6:6d:88:a6:27:bb:29:ee:bb:d8:dd:20:ab:90:
                    6f:3b:93:02:05:57:be:98:63:a2:fd:cc:b1:a0:99:
                    27:a6:3b:09:a3:84:82:74:78:49:da:9f:63:be:ab:
                    ad:72:e9:09:e1:b5:3c:ad:6f:f6:7f:59:4a:65:5c:
                    ed:f2:2c:9a:3e:1f:e0:0d:d3:18:76:81:54:ed:95:
                    4a:d0:5f:2a:7b:d5:ee:ac:a2:57:c9:2a:6b:f1:cb:
                    7d:15:9b:10:df:c5:09:22:ec:1e:34:a2:6e:be:37:
                    0c:60:f0:3f:6e:2f:c3:bc:e4:51:90:60:93:ec:21:
                    13:0f:d8:97:4b:27:57:27:0c:10:06:ac:1c:3a:7d:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D1:1E:79:ED:CF:AC:A2:F7:1C:00:AD:5E:42:8D:05:96:D0:40:32
            X509v3 Authority Key Identifier:
                keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1a:65:83:ac:c0:26:28:d3:72:ca:db:ff:c5:98:8a:5d:e6:
         1c:74:9d:a7:49:16:94:01:25:81:64:2d:a4:21:be:ac:38:ba:
         84:aa:c6:8b:a3:02:9c:86:61:46:ac:04:45:22:e2:19:37:a8:
         eb:86:15:ae:ae:47:e9:68:2c:0a:64:80:c6:60:a5:88:06:1b:
         b2:20:60:f1:ac:28:5e:78:24:e0:23:12:56:88:e2:19:76:18:
         8f:f8:29:e4:a2:25:c2:56:5c:a6:9b:03:ea:b2:bb:d7:13:81:
         50:62:74:cb:05:bc:3d:b3:71:45:3d:86:d0:0b:1b:1e:b1:b0:
         1c:18:06:59:88:a6:1b:34:2f:0b:32:c4:0a:ad:68:ef:5b:c8:
         66:8d:54:9f:d5:cf:d2:93:82:84:75:9f:a7:9d:2c:69:e6:cd:
         5d:b1:a8:86:46:68:f8:dd:32:2a:b4:21:41:9f:e0:51:22:19:
         39:89:59:e3:f5:dd:57:80:db:bd:97:38:23:33:ab:54:9a:7e:
         f2:80:2e:bc:be:23:4c:77:f3:33:fb:7f:f9:16:29:b4:99:46:
         88:48:64:eb:92:ef:ea:99:a7:3f:c4:45:10:b4:49:8c:f3:26:
         93:98:83:d2:a3:f5:43:29:0e:6a:a3:dc:ea:96:56:80:3b:ae:
         e4:ab:eb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:24 2025 by rpki-client