Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File:                     IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier:          E8+deDu5KjoknWwMAqhqUQh+F6vOPslM+klTawl/bJE=
Subject key identifier:   BF:49:EC:CC:7E:50:D8:E9:A3:56:50:58:84:5D:97:72:23:D2:BC:6A
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer:       /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial:       01988EEC1CCF2A68443B02ABABC04ABF1485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number:          1624
Signing time:             Sat 09 Aug 2025 13:01:35 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:35 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:35 +0000
Files and hashes:         1: AYkoB-e1MzcctAIB25MUBAI3Gw8.roa (hash: RhXb3K21xkSfp4wHDHnklvRvJi1oEc1FzHYwM8s92WA=)
                          2: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: SKrmH9pYfTKCifSkRU7hy3BSLAB06wK7C8JqvMYUGe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:1c:cf:2a:68:44:3b:02:ab:ab:c0:4a:bf:14:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
        Validity
            Not Before: Aug  9 13:01:35 2025 GMT
            Not After : Aug 10 13:01:35 2025 GMT
        Subject: CN=bf49eccc7e50d8e9a3565058845d977223d2bc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:64:c8:e0:11:8d:0b:99:2d:90:db:e9:12:
                    0d:eb:3b:42:f7:e7:bf:c3:2e:45:aa:b5:5a:21:0f:
                    bd:ef:b7:8a:3c:a1:ce:c1:d4:4a:9a:2c:4e:3f:e0:
                    8f:7e:82:ed:e4:a2:d4:69:ad:33:7a:c7:ef:c0:ce:
                    eb:ba:eb:0d:87:6d:a2:19:a5:c7:b8:97:b0:98:07:
                    9d:50:b3:0f:bc:4c:8b:ba:3d:84:29:d6:9b:a1:5a:
                    b9:36:42:c9:7c:38:7e:0c:91:08:b6:5c:0e:c7:dc:
                    a2:9d:90:e3:d5:e8:36:40:1a:69:13:44:c2:2f:db:
                    9a:f6:77:3a:e3:37:60:6d:73:bc:b6:4e:80:fc:99:
                    12:49:52:88:7e:d2:4e:cf:4a:d5:72:e5:95:04:96:
                    b4:49:96:13:64:3a:6a:a8:64:ad:f1:2b:74:f5:2f:
                    1b:11:1b:32:b7:09:e2:56:8b:f1:5b:93:b9:61:92:
                    1d:68:87:0b:45:b0:68:2f:b6:48:08:a1:69:9e:a0:
                    67:f2:ce:b5:13:3e:6b:20:3d:ab:c1:da:86:33:f0:
                    d9:2d:9e:d8:35:f0:6b:02:06:62:3f:82:89:a5:ad:
                    e8:ff:25:83:87:ad:2b:24:89:f0:14:0f:4e:70:eb:
                    46:fd:35:ac:75:23:65:ee:80:49:9a:ae:e3:b4:8e:
                    5b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:49:EC:CC:7E:50:D8:E9:A3:56:50:58:84:5D:97:72:23:D2:BC:6A
            X509v3 Authority Key Identifier:
                keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:34:18:1d:ef:d2:cf:da:85:4e:f8:53:a1:e2:74:34:52:
         eb:34:a8:74:f3:ae:e9:08:bd:9b:06:e8:6f:a8:da:cc:fa:ed:
         8c:75:a1:3a:42:f3:9e:39:01:aa:8e:b4:9f:8e:dd:f2:22:66:
         5d:15:ce:2a:cd:52:d4:22:e0:cb:ad:26:aa:c4:d8:d3:52:c7:
         e0:4d:3f:d5:58:8f:8e:51:d7:79:65:ca:0f:ec:6c:54:96:d9:
         c7:0a:3a:f2:b4:87:f9:65:17:50:a9:40:d9:32:7e:2e:86:38:
         7f:7e:b9:eb:21:51:13:5e:49:19:91:29:8d:05:41:99:bb:da:
         15:ac:c4:38:62:0a:38:17:2d:16:db:5d:82:20:22:d4:68:ae:
         6a:a0:2f:4b:a3:92:a3:f2:dd:0b:be:a2:01:dd:c2:d5:2c:f3:
         82:10:59:eb:78:96:98:bd:26:db:43:0a:7f:fd:a2:04:c2:1e:
         00:2b:a6:79:d6:c2:70:33:cf:60:7f:7e:a8:f8:f1:ea:37:4f:
         d4:ee:22:ee:9b:67:b3:81:aa:a1:ad:70:66:ee:01:b6:9c:6e:
         90:4d:d9:f3:ae:12:15:72:55:8b:0e:cb:ea:40:70:e6:70:f9:
         e1:1e:54:eb:75:b5:c6:1d:39:4c:be:23:fa:76:05:4f:e3:f2:
         e0:3e:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:31:42 2025 by rpki-client