Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
File:                     cwLNwp_coJ6aDz99IRPahafh1lQ.mft (raw, json)
Hash identifier:          zbLQdmFtNOgqQekQFS8KeA1pKyzL/THFH7n0C2arm9A=
Subject key identifier:   71:4C:BD:DE:B8:C1:F5:0E:11:C3:AC:1B:55:B1:0A:42:3B:C0:6C:CA
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       01987C0A6A37FD7D157B6FEA8CEB79AC0E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
Manifest number:          1630
Signing time:             Tue 05 Aug 2025 21:01:53 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:53 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:53 +0000
Files and hashes:         1: 1b0YLKL7-iTCHbE9CdUd3XA5y7g.roa (hash: rIogoNu1hzVKlpslv16w1RSjAhJwMYGtMcjGmVqGYDI=)
                          2: 3OrpPYLoIXvd5Z078UIjv-o45HE.roa (hash: 7OkFl+S/WJrI7zN/5kL1WgsZR4fsHSw0RK0hWnDrWeA=)
                          3: 6hgKpsdlK6GUgCq-rwztVz_Bhck.roa (hash: x7Nnzb3+BjsMGfCWv6tnmGZkmedf5cnHnxqvvpjotow=)
                          4: BclF8ogFJm7SHbbSauqgIPuVgI8.roa (hash: 6BijkZjD88M35uPP9hk20CG6BMPOZYagpsfeWkqpwqw=)
                          5: FZc4W_DS-zYGeo6V-YV56NvLSjQ.roa (hash: Y7NpnMtxGd1OVNPFS3Fggo5HticHh8zC2s5H72cAKJA=)
                          6: cwLNwp_coJ6aDz99IRPahafh1lQ.crl (hash: X5HCePbpJffl0gD21BqWkU1lSPycfS5G/YshOXlb7RA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:6a:37:fd:7d:15:7b:6f:ea:8c:eb:79:ac:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Aug  5 21:01:53 2025 GMT
            Not After : Aug  6 21:01:53 2025 GMT
        Subject: CN=714cbddeb8c1f50e11c3ac1b55b10a423bc06cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:5a:a9:d1:81:1f:0d:f8:ed:99:4b:dc:1d:
                    01:b3:27:96:48:2d:b2:1d:78:30:87:e5:d9:55:e0:
                    f3:b9:f1:c2:a9:02:68:a4:dc:5b:b7:f0:ba:26:98:
                    fb:3a:6a:60:c7:6d:12:d5:2a:c7:87:69:d3:46:23:
                    d0:a4:46:13:33:b0:50:6b:ba:c5:5e:f7:27:5f:4e:
                    85:8c:7a:62:78:20:b8:47:24:4d:09:19:81:c0:57:
                    43:39:67:bd:5d:b1:f1:2a:6b:ba:64:74:02:d2:0b:
                    f7:77:bc:c5:c0:91:ab:00:d1:b2:c8:0d:c1:98:40:
                    6a:f5:c3:cf:d4:d2:77:74:20:dd:2e:58:5d:90:94:
                    78:7b:28:ca:f8:c6:75:30:05:87:2a:ec:7f:d3:0b:
                    5c:3d:ec:1e:09:bf:80:74:41:a7:af:b0:9e:70:10:
                    96:2b:d4:a6:28:7c:02:26:cb:51:13:e7:80:8e:18:
                    00:91:37:4f:33:57:50:4a:7c:71:55:04:97:8f:6a:
                    71:39:92:f9:95:10:3a:3c:4f:d8:cf:0e:e4:30:a6:
                    0b:0e:be:af:e9:80:98:d2:ba:7b:47:8f:11:80:a8:
                    cd:dc:b7:5b:59:33:5b:eb:2f:d5:4b:a4:22:ec:62:
                    1b:aa:49:c0:8e:bd:9b:81:f8:e0:b6:f9:36:33:db:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4C:BD:DE:B8:C1:F5:0E:11:C3:AC:1B:55:B1:0A:42:3B:C0:6C:CA
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d2:72:83:37:b2:99:98:2a:51:cf:11:f8:ba:42:be:ec:12:
         ff:88:d6:e4:f6:97:a8:54:28:de:b6:6d:9e:f7:d1:6e:9e:a4:
         76:bd:2e:10:ee:b8:1f:ba:43:63:44:3d:d5:03:68:22:bc:41:
         e3:3c:90:1b:09:2a:20:0d:0f:f2:77:b9:cb:47:4b:1d:63:a7:
         2c:5f:df:fd:99:2d:db:b2:a6:56:c4:21:8b:1e:40:da:f3:36:
         0a:0c:9d:0d:8b:5b:6e:2e:25:63:20:00:f9:09:f2:57:6d:d4:
         65:08:77:fe:f7:81:a4:20:99:dd:cc:d1:8a:01:53:c6:f7:ff:
         a4:82:e3:59:c2:03:63:44:d0:dc:23:a5:6a:0e:7f:cd:50:18:
         b5:97:50:e7:8d:9b:c9:4e:ca:3e:f7:49:fc:0f:82:6e:c0:d9:
         2b:48:96:d7:af:02:cd:65:89:ba:71:61:c9:f0:99:ee:f1:dc:
         d5:bf:b3:da:5b:2b:00:f8:72:db:9d:92:99:c2:af:9a:b8:63:
         3e:85:71:53:1b:04:38:9c:dd:73:b0:79:cd:19:3e:fa:f8:74:
         64:28:d5:81:fe:32:ef:a3:97:5d:fa:a4:a8:8f:d8:b2:9e:e6:
         b1:ff:db:39:86:09:88:7e:ae:b0:d7:d7:af:6f:2e:8f:1b:f3:
         73:a5:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:28 2025 by rpki-client