Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
File:                     W81A0QtW87Uy-g39AdgX75PaGjQ.mft (raw, json)
Hash identifier:          C9uZXxQ+z39Hsg+2TNuElS8FD788VVyOm2mCaQconxU=
Subject key identifier:   65:27:99:BB:94:6B:3C:B0:A7:8C:96:0A:B3:93:39:65:65:89:27:D3
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Certificate issuer:       /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial:       019879AEEBEFE7E8B07D0BA4C0DE896F1BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 10:02:43 +0000
Manifest this update:     Tue 05 Aug 2025 10:02:43 +0000
Manifest next update:     Wed 06 Aug 2025 10:02:43 +0000
Files and hashes:         1: DVy9xxsaVAJcUU0BRfhNabOqMzk.roa (hash: C4OGc3b2gsAM2Wvi4DJ3HoKaAiDyltSi4czoAQFuPLg=)
                          2: OrKuFz27FK0P6O2bv_b1bL5Co9k.roa (hash: 8cEi5rfuQFGn6/7XwnoqTW0z0qfPYwGTHgFoatR1/Hk=)
                          3: W81A0QtW87Uy-g39AdgX75PaGjQ.crl (hash: ktqLP8IxwQ1O61npBAocyCROs4uK47B/h3FdUiWL28U=)
                          4: Xx29scVdCmRD00pM8gqZEG2S1V4.roa (hash: feKngEcDxdbtaZY/ULJeMiuTCLcr3i9MmDhJ5JXWDaA=)
                          5: cOdMT1vBakCVhXnPerLROe0CFnU.roa (hash: CSnBhh/tdtgz5OXvaaCBm6nd3YW23jsTZHsuFLrW+tw=)
                          6: s4w35wVjXE8sREZK7Oyh4IavL0g.roa (hash: TceK26zqEtmgDQ2uUNpaKfjQftmmHU4UqyAVULIuK4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ae:eb:ef:e7:e8:b0:7d:0b:a4:c0:de:89:6f:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
        Validity
            Not Before: Aug  5 10:02:43 2025 GMT
            Not After : Aug  6 10:02:43 2025 GMT
        Subject: CN=652799bb946b3cb0a78c960ab3933965658927d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:83:da:48:28:01:e3:04:84:13:24:67:b8:e8:
                    2d:8a:6e:9b:4c:3a:d0:03:44:c2:65:07:23:86:56:
                    89:f4:c4:7c:1e:af:af:76:d5:6a:02:d6:b7:68:0e:
                    d0:bf:9a:f9:fe:c8:62:0c:d7:56:90:4c:cc:43:c4:
                    c1:43:b7:42:61:fa:59:b2:89:70:2c:0a:8b:66:e3:
                    e2:fa:ab:38:ee:c3:65:35:a8:48:90:b1:71:7a:cc:
                    fe:f2:32:48:f8:e5:ae:2b:61:c6:05:ca:5a:88:75:
                    19:1c:83:ca:ae:4e:ae:e9:fc:87:d5:22:f9:a0:69:
                    26:eb:e7:0c:06:72:42:79:71:6f:53:1c:5e:72:d0:
                    3d:a7:12:5c:3e:d3:9b:7f:dd:91:44:e3:3e:80:46:
                    e8:7f:63:94:74:54:eb:fe:60:02:0a:da:fe:8c:fb:
                    6e:ab:3b:89:53:8f:1c:a7:2d:d0:b5:df:14:0f:c2:
                    77:b1:ec:b8:6c:43:b3:df:17:e7:4e:44:83:4a:d6:
                    0e:36:7c:12:9d:2a:1d:4f:36:5d:0b:f0:78:85:96:
                    a0:42:7e:a1:d6:ef:42:e2:46:bb:f7:6e:2f:82:85:
                    cc:e2:fd:c7:42:5e:4a:0b:4a:58:3e:28:bc:e5:1c:
                    0e:db:27:18:f5:7f:9e:f7:bf:98:81:08:be:30:55:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:27:99:BB:94:6B:3C:B0:A7:8C:96:0A:B3:93:39:65:65:89:27:D3
            X509v3 Authority Key Identifier:
                keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2a:35:75:8d:2e:c0:58:86:20:61:4b:07:87:df:70:42:69:
         3c:a3:d1:17:13:2b:11:a6:61:7e:fd:19:7f:84:77:9a:74:6f:
         6f:71:c1:02:3e:20:40:8e:9e:c9:e3:83:25:1f:09:22:1c:54:
         1e:65:31:2f:45:8d:c2:4c:1d:80:87:c6:ca:ae:7a:db:95:e3:
         84:52:5d:42:d4:51:4e:c2:75:4f:9d:d3:3a:98:f1:56:06:f1:
         75:4d:16:9e:81:40:8b:a7:5d:7c:db:52:0b:15:ef:c8:12:96:
         02:18:7f:90:b4:d5:e2:da:dc:ad:8f:a8:af:6a:cd:4d:8d:0d:
         36:66:75:fe:2f:57:4f:91:b7:c1:89:6b:9a:d3:60:19:55:cb:
         72:13:43:83:fc:03:0e:26:41:d7:1c:d1:df:3a:dd:ce:58:22:
         b1:da:06:35:cf:0e:32:e2:f5:74:40:79:a6:2c:7e:3d:11:95:
         64:98:a4:82:4c:8f:ff:9b:84:56:11:52:4a:22:58:19:05:c8:
         71:c6:aa:0f:1a:bf:08:c4:de:8a:88:cc:ce:91:9e:7a:73:8e:
         7c:e5:b9:49:77:53:5c:ef:d9:9b:6e:be:fd:4a:eb:96:1b:ea:
         17:f9:10:88:bf:80:eb:44:ee:15:dd:e3:64:43:34:5d:9c:02:
         1d:75:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:37:33 2025 by rpki-client