Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
File:                     W5sFqT1fP8xaCwEEwbD20kws0fY.mft (raw, json)
Hash identifier:          QQVTiLsxJYfErfgyaUQtLVPCJuzMxpKaG38oGuxC3zg=
Subject key identifier:   B6:39:CA:09:95:B3:CB:02:6D:26:25:E1:49:DF:13:A8:0C:65:AD:63
Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
Certificate issuer:       /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Certificate serial:       01988FC6F27FA8AA5090D106F4F465764763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
Manifest number:          1627
Signing time:             Sat 09 Aug 2025 17:00:36 +0000
Manifest this update:     Sat 09 Aug 2025 17:00:36 +0000
Manifest next update:     Sun 10 Aug 2025 17:00:36 +0000
Files and hashes:         1: EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa (hash: t2UDAq4DzGmTsnjWgogyVQ3r8Ls90WheZWHhRn0w6Ws=)
                          2: W5sFqT1fP8xaCwEEwbD20kws0fY.crl (hash: d61GkA04NbsvAYiINlK6WS9CCMWeSHwS6Fi0omjKqOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c6:f2:7f:a8:aa:50:90:d1:06:f4:f4:65:76:47:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
        Validity
            Not Before: Aug  9 17:00:36 2025 GMT
            Not After : Aug 10 17:00:36 2025 GMT
        Subject: CN=b639ca0995b3cb026d2625e149df13a80c65ad63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:00:c7:65:90:9c:42:25:cb:2f:4d:24:25:
                    aa:1a:e8:35:34:1d:21:73:8e:2a:9b:a0:67:86:b1:
                    41:5e:ee:e3:3a:4d:8e:ca:31:94:8b:25:89:32:ab:
                    7c:8f:7e:1b:32:76:a8:dc:2a:6b:6e:41:65:9b:5f:
                    3b:8e:8f:74:f9:6c:c9:1b:01:60:0c:5c:be:c1:6f:
                    7d:61:e2:e9:48:c3:b4:35:ea:b0:e5:88:41:30:a8:
                    3a:a8:42:f9:14:1f:e8:b2:35:33:f0:18:1c:86:8e:
                    7a:33:c9:30:3c:cd:97:a3:62:d1:f8:d0:47:42:ab:
                    9e:44:d2:d9:ee:20:77:a3:00:aa:07:40:44:89:71:
                    95:39:26:d3:5e:28:5e:35:27:b6:7b:f5:82:73:2f:
                    80:f2:ad:c4:58:47:ab:33:51:cc:82:3d:b2:4f:e1:
                    ca:b9:01:90:41:71:eb:35:0b:f2:a9:55:c3:a2:08:
                    10:65:f2:71:89:07:1f:da:5b:86:5c:ae:e6:c3:d1:
                    0d:87:f4:35:2d:24:3e:89:86:de:b7:d8:c4:4e:69:
                    a2:9c:dd:19:6d:9b:00:f5:bf:2e:28:0a:a2:c4:84:
                    01:52:0c:55:7d:ac:64:fa:2f:5d:d1:73:83:5d:d9:
                    45:21:5d:c0:56:20:ad:b2:b9:b2:0f:16:f4:2c:0b:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:39:CA:09:95:B3:CB:02:6D:26:25:E1:49:DF:13:A8:0C:65:AD:63
            X509v3 Authority Key Identifier:
                keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bf:50:a9:7f:86:ad:3e:5f:76:79:9c:00:2c:43:39:75:32:
         04:c2:82:44:41:0b:7e:7b:05:01:ab:d6:34:1d:a3:1b:c5:42:
         a1:59:57:46:35:f2:ac:9e:19:4f:20:56:4f:3c:50:a8:b8:0e:
         02:60:dd:81:bf:63:ea:50:e8:4f:82:d1:73:b7:ed:05:57:c7:
         34:65:88:d6:fe:46:81:b2:84:35:4b:1a:71:75:ec:a9:3e:22:
         d1:c3:c2:9a:c2:00:21:2c:dd:16:78:54:dd:b3:dc:c4:a3:2f:
         54:38:6a:b6:0a:93:74:77:4b:0d:0b:11:8f:5f:ec:6a:87:29:
         99:2b:3a:69:09:03:5e:c2:38:ec:21:40:25:86:fc:39:7f:8c:
         af:af:a8:de:a0:6c:88:a1:f2:94:9a:38:4d:ed:18:80:72:f7:
         12:49:f2:87:c7:73:d0:4c:b6:a7:19:bd:76:9b:b7:b2:f7:de:
         f5:af:46:30:13:ce:5b:00:77:01:fd:d1:34:55:56:91:28:d8:
         d3:2a:02:c1:db:5e:ac:bf:81:fa:0c:46:ce:44:70:29:4f:35:
         5f:b9:d7:d5:e7:76:78:03:1a:67:0f:99:70:a6:1a:9e:1c:90:
         64:70:75:38:41:b9:6b:45:f4:5d:4e:16:d9:8f:08:6b:e4:7f:
         1b:de:ce:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:31:57 2025 by rpki-client