Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File:                     wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier:          6f3rcaofbDHCLwHOHtp08BTzd6mWkP6I8pa8wNpjLl4=
Subject key identifier:   1E:F7:11:99:75:D8:31:71:88:ED:CD:67:6C:14:AE:39:EA:04:0B:CE
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer:       /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial:       01988430C8A19EABA6B6B1C2CB133C3A2C78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number:          0CEE
Signing time:             Thu 07 Aug 2025 11:00:46 +0000
Manifest this update:     Thu 07 Aug 2025 11:00:46 +0000
Manifest next update:     Fri 08 Aug 2025 11:00:46 +0000
Files and hashes:         1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
                          2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: afgF/Fi+AfXE1ors4FXBlI7S8PHZLFcXfmglwuNX3N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:30:c8:a1:9e:ab:a6:b6:b1:c2:cb:13:3c:3a:2c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
        Validity
            Not Before: Aug  7 11:00:46 2025 GMT
            Not After : Aug  8 11:00:46 2025 GMT
        Subject: CN=1ef7119975d8317188edcd676c14ae39ea040bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:98:e6:59:03:1e:b1:ec:31:c5:00:e0:6d:
                    e7:a0:e5:68:ef:78:4a:ad:4b:b1:9a:74:21:8e:ac:
                    f2:0d:a8:1b:64:32:86:a3:c3:1b:db:7e:3b:5b:73:
                    0e:88:8d:f6:f7:a4:10:73:d4:7f:3c:9a:87:6d:74:
                    4f:06:47:af:9c:24:de:79:cf:5e:9e:7f:2d:5c:e7:
                    e0:bc:ad:24:7d:ff:71:90:39:08:be:9a:53:fe:e1:
                    ad:b4:15:f2:6f:d3:4d:f5:47:a7:4a:e8:11:08:d3:
                    29:0c:c7:0e:b8:63:fc:bf:40:bf:46:8b:57:77:8f:
                    90:da:be:7e:e2:6f:83:84:ec:b4:9c:60:b3:81:00:
                    fa:2e:4e:ba:13:5f:e1:05:4a:13:23:c6:79:91:40:
                    30:0e:e8:84:d7:76:8d:81:b1:45:89:61:e1:d5:69:
                    58:cb:59:aa:c5:c0:62:05:8b:6d:66:a3:b2:d4:49:
                    14:0b:ff:31:f3:b3:06:e1:f6:05:6c:74:02:03:48:
                    76:66:34:15:da:21:c3:68:b4:c9:2c:75:67:fe:a4:
                    2d:a7:78:23:09:e2:9f:be:ef:c5:63:9d:ff:20:b0:
                    e8:49:bb:c7:f7:59:f0:db:b3:7b:2a:76:b9:54:6b:
                    c3:d7:d3:08:90:b8:f0:03:4e:02:11:3a:d0:9d:9b:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F7:11:99:75:D8:31:71:88:ED:CD:67:6C:14:AE:39:EA:04:0B:CE
            X509v3 Authority Key Identifier:
                keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ff:f3:e8:75:71:11:77:5e:57:46:35:01:f1:55:04:f0:11:
         46:d8:12:b9:d9:45:87:f4:ac:27:42:35:59:6a:19:fa:46:04:
         6e:87:fa:d1:d6:ca:4d:53:80:ed:45:01:5c:78:ac:a2:f6:4c:
         53:6f:a5:0e:7e:42:de:3e:4f:26:4a:af:10:27:36:ed:7b:78:
         87:40:61:45:5e:f2:c0:e8:43:2a:b0:5d:82:ea:84:18:a9:59:
         fc:f6:c3:0d:b2:f8:c4:19:5d:3e:8a:45:36:e6:3c:ea:d3:51:
         1d:9e:3c:30:2d:b6:5e:94:a3:6a:24:d3:fd:f5:e3:76:4c:c6:
         ed:27:6d:c3:4f:56:ec:1b:c1:c6:54:1e:08:a9:4d:da:9e:0c:
         e0:3f:99:72:5c:a0:f7:cf:91:52:cf:17:ac:1a:ac:0d:d3:16:
         4f:5c:20:a0:a1:86:5f:1a:1d:45:e3:cd:fa:cb:fa:34:bb:52:
         37:97:58:d5:d1:ee:15:59:58:f1:ad:16:c4:6a:4e:d7:0b:4d:
         a4:27:dd:a3:d0:80:04:60:7b:60:b7:29:fc:4a:ed:fe:75:86:
         e1:27:37:92:e3:9e:70:c9:08:4a:ce:42:92:8c:cd:b7:f0:d5:
         4b:3e:6c:5e:bc:4c:99:4e:aa:a7:d4:ca:d9:55:da:9d:3d:c6:
         78:21:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:46:12 2025 by rpki-client