Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft
File:                     wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft (raw, json)
Hash identifier:          /mA9Rp3wUoPkWrZXjJxecJWV/y1IUioj7ljt3Q2GbZ8=
Subject key identifier:   EE:61:F4:05:7E:AF:DD:73:8C:84:96:AD:BE:2E:E5:11:B9:94:6D:CF
Authority key identifier: C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D
Certificate issuer:       /CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
Certificate serial:       01988EEB2FF1D1C8DFA2E0B1EA93E725954B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 13:00:34 +0000
Manifest this update:     Sat 09 Aug 2025 13:00:34 +0000
Manifest next update:     Sun 10 Aug 2025 13:00:34 +0000
Files and hashes:         1: OFZ7OM7STvn819zwpp9pHzVUjwk.roa (hash: Eidn50fbH6MVmQqAx/ZT1g48QZZQpQ8iS/V1m51/Eao=)
                          2: wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl (hash: FPll16PkV+RMZDp2Y0QeouZTZ2QCxhUUeN29AlxYMTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:eb:2f:f1:d1:c8:df:a2:e0:b1:ea:93:e7:25:95:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0979e20ffed9f89d07cea58c4c4106819ce662d
        Validity
            Not Before: Aug  9 13:00:34 2025 GMT
            Not After : Aug 10 13:00:34 2025 GMT
        Subject: CN=ee61f4057eafdd738c8496adbe2ee511b9946dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:b1:27:f1:6a:94:92:d2:34:f8:1a:4f:f9:
                    c2:8a:7d:dd:54:fe:e1:d3:5c:56:72:a3:ad:03:89:
                    ca:e9:8e:0f:6d:3a:93:82:55:ee:80:50:2a:3a:6b:
                    6e:06:49:d3:da:fa:7c:84:9d:d9:f7:7e:13:69:74:
                    08:bd:04:e4:d9:cb:46:de:d3:96:65:f2:41:10:3a:
                    b0:ac:65:26:75:5e:c3:2b:bb:f0:9d:60:92:ef:3e:
                    75:34:ab:09:98:07:73:c3:c5:e2:56:e4:8e:05:05:
                    46:53:ca:ca:d8:f4:7e:2e:e8:f3:18:29:f9:7f:d0:
                    8d:d1:a0:56:0d:4d:b0:e5:39:cb:f2:53:85:fc:60:
                    79:4b:02:0a:5e:44:52:0f:57:ac:81:6c:f6:ac:7d:
                    8f:6c:ae:07:c8:95:e4:b3:e6:82:ef:7c:cc:2e:6e:
                    fd:f9:ac:45:47:f1:94:99:36:b2:93:05:78:aa:34:
                    73:17:e5:5b:f4:93:13:cf:8b:d7:3a:ae:98:e8:cb:
                    6e:ea:3a:cb:b8:23:29:57:65:d6:95:53:6c:b5:01:
                    2d:08:c8:77:b8:b8:c6:06:68:5f:05:1e:2b:97:28:
                    53:66:6f:c6:f4:7b:33:04:28:68:78:2d:8f:b1:59:
                    bc:e1:01:12:35:74:37:b5:d3:09:1e:51:aa:3e:0c:
                    b0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:F4:05:7E:AF:DD:73:8C:84:96:AD:BE:2E:E5:11:B9:94:6D:CF
            X509v3 Authority Key Identifier:
                keyid:C0:97:9E:20:FF:ED:9F:89:D0:7C:EA:58:C4:C4:10:68:19:CE:66:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJeeIP_tn4nQfOpYxMQQaBnOZi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/50a352-6da1-48e2-9b83-5d4c9fec7ce3/1/wJeeIP_tn4nQfOpYxMQQaBnOZi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:02:80:45:a1:be:70:57:4d:18:8a:2a:b2:1b:59:3a:31:b0:
         c8:0f:2a:fa:72:79:c9:02:80:eb:9c:4f:5c:5e:3a:be:42:53:
         81:bb:c0:f8:c9:27:e4:45:50:d8:67:a3:ff:a4:36:1d:0a:ed:
         c6:82:9a:b8:6f:eb:f7:4f:a6:02:b8:71:90:af:ff:79:7b:2f:
         e0:13:bb:90:d7:85:5b:64:7c:30:16:d5:62:70:16:24:ca:96:
         e6:a1:43:e9:87:cf:0e:33:d8:38:d7:85:c5:dc:b9:5f:b1:e9:
         d7:d8:6f:87:68:78:02:f1:56:a3:09:0f:e3:77:4e:8e:43:3c:
         3d:a3:6c:bb:0d:4d:f8:2c:39:44:55:a8:e1:1e:40:37:8a:20:
         c8:23:1d:f9:44:f4:62:36:24:1d:82:5c:ff:a7:f2:c9:41:fd:
         16:2f:6b:be:41:43:59:5d:27:0f:6c:a7:a0:6d:04:23:1b:c6:
         8c:19:94:60:bc:33:4a:75:73:ef:22:b3:80:cd:c3:3d:8b:00:
         33:1f:a3:19:a3:51:5a:0c:c1:0a:e9:17:8a:e4:29:6c:14:96:
         f4:3e:d6:8c:41:90:ed:96:6c:ef:7c:75:b2:02:c2:31:43:2a:
         20:9a:23:2a:67:5a:24:c5:c9:32:86:4b:76:63:0f:08:8c:2a:
         bd:6d:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:33 2025 by rpki-client