Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File:                     cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier:          p0sXdzxtlTbgBMuvUlTUyhPE8v3A7SKLVHDnbMqhL8w=
Subject key identifier:   CC:68:71:BE:A1:A7:BB:83:D4:AB:99:C6:22:A1:82:47:26:9C:DA:3B
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer:       /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial:       01988C584E0B5C7FEC79ABF3657ED6C02990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number:          0608
Signing time:             Sat 09 Aug 2025 01:00:54 +0000
Manifest this update:     Sat 09 Aug 2025 01:00:54 +0000
Manifest next update:     Sun 10 Aug 2025 01:00:54 +0000
Files and hashes:         1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
                          2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: NKIpeYjn+Lz8DEGpWPR9Od5VyktkhZWD009rYVanOY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:4e:0b:5c:7f:ec:79:ab:f3:65:7e:d6:c0:29:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
        Validity
            Not Before: Aug  9 01:00:54 2025 GMT
            Not After : Aug 10 01:00:54 2025 GMT
        Subject: CN=cc6871bea1a7bb83d4ab99c622a18247269cda3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:70:cc:5d:c0:ff:27:44:6c:a0:78:f1:ab:8f:
                    13:e7:fa:63:24:af:31:17:ee:1c:30:d1:9c:5b:19:
                    44:af:35:fd:ef:c4:9b:3b:96:36:cb:ee:0b:56:1e:
                    b7:ef:9d:10:3f:97:a6:f6:be:14:f8:a9:3d:f3:df:
                    01:81:df:a3:62:ff:20:d7:62:4c:95:44:16:48:03:
                    5b:e4:06:4c:a8:38:6b:84:86:e7:c9:59:ff:33:ce:
                    d0:81:a7:f4:3f:ff:cb:7e:bb:f0:0b:b4:c5:5a:26:
                    70:79:e8:bf:f4:64:0d:5b:cf:30:83:cd:df:2b:3e:
                    d4:55:68:0b:ef:32:9b:e4:70:b1:70:8e:f9:32:41:
                    61:6b:cc:e6:de:7c:be:76:da:fe:68:27:8f:88:96:
                    5c:63:be:41:84:8d:2f:82:3b:71:92:d5:cc:67:1d:
                    63:09:a4:a9:9f:22:cc:9d:77:0b:fc:cd:d5:3a:77:
                    2a:1a:76:db:35:c5:bb:83:74:26:fa:3f:87:44:b4:
                    ca:31:34:92:5a:22:fa:43:67:04:3f:cc:9d:d5:97:
                    46:a1:39:5b:9e:55:0f:7d:64:73:c1:cc:30:b8:24:
                    42:c3:63:98:63:2e:c0:24:f2:a4:b7:2e:84:4f:c7:
                    3b:d5:59:f7:3f:30:63:ac:58:b1:53:f8:ca:fb:fc:
                    79:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:71:BE:A1:A7:BB:83:D4:AB:99:C6:22:A1:82:47:26:9C:DA:3B
            X509v3 Authority Key Identifier:
                keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:44:0e:35:09:2b:fd:74:a8:7f:23:4e:7f:77:65:90:4c:db:
         b8:69:03:52:fa:b4:c8:43:c8:ba:92:20:fd:3a:a0:17:98:69:
         7e:fc:a3:8f:a6:f6:8e:40:1b:c3:e7:3d:c0:a4:80:ba:fe:ad:
         62:32:1e:ae:86:95:b3:2c:3d:ae:17:37:20:fe:46:a7:26:5b:
         b7:03:39:b8:f0:48:3e:50:7e:2e:9c:b8:ef:2a:d1:f6:14:0a:
         81:40:e7:be:2e:26:ac:f4:65:e2:c2:cf:1b:cd:8b:c6:df:42:
         b1:2a:0d:a9:c6:60:24:82:26:19:68:6b:48:c0:49:92:19:e2:
         de:ef:2a:eb:a4:2a:07:23:88:6b:2a:e9:3b:59:f3:ff:67:b1:
         19:d0:73:ea:04:f4:9d:86:22:5c:05:f7:99:64:cc:c5:35:69:
         8d:d6:c9:2d:05:57:f9:ac:0e:43:48:df:7b:55:37:8d:e7:49:
         be:8d:13:58:6b:9b:72:cd:f0:b7:71:dd:6e:1a:c3:d7:65:14:
         c2:8c:eb:4d:00:97:b0:3d:90:8d:64:04:49:d0:9c:e5:66:db:
         67:f6:9f:b2:6b:be:15:30:eb:f6:dd:fd:69:be:1b:a6:b2:ae:
         f1:ca:22:5a:c0:2a:ce:1c:a5:03:b0:73:d5:29:ea:28:9e:4f:
         78:1d:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:00 2025 by rpki-client