Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File:                     wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier:          lBIdvbJnbB/aL0y4UG+G55RII1L7jnFypb3aU4efIpg=
Subject key identifier:   8D:27:4C:B4:6C:AF:25:7A:81:80:8F:D1:0C:65:8A:1F:91:34:D3:37
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer:       /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial:       01987E2EF9BD590A2657995960BB17197AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number:          04A7
Signing time:             Wed 06 Aug 2025 07:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:04 +0000
Files and hashes:         1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
                          2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: rJY8WqhEPSd0AvB6jWUSE4pWzD2y5eubHLt8LRGnXoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:f9:bd:59:0a:26:57:99:59:60:bb:17:19:7a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
        Validity
            Not Before: Aug  6 07:01:04 2025 GMT
            Not After : Aug  7 07:01:04 2025 GMT
        Subject: CN=8d274cb46caf257a81808fd10c658a1f9134d337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:72:4b:5b:bf:fc:5d:1f:28:e6:b4:d1:a2:
                    49:d5:01:f1:3e:2d:d2:8f:89:b0:7d:a5:73:e3:e4:
                    03:12:d3:5d:c0:fc:ed:c1:3a:13:8a:1b:37:9e:24:
                    de:0f:31:27:95:62:5f:99:56:5a:92:1c:a0:e9:9d:
                    9f:1c:be:a6:d4:56:8e:10:b1:0b:ad:40:41:49:f7:
                    53:db:76:8a:1b:af:d7:79:20:23:22:92:a9:2e:c1:
                    a6:f1:af:5d:fd:06:fd:23:4e:51:4a:ff:40:01:3c:
                    90:3a:7d:6c:c1:14:3f:8b:16:2f:01:9a:b9:1c:c9:
                    0b:e4:3b:f4:d9:ad:47:2a:a6:0e:6a:b2:3e:f3:53:
                    f4:8b:15:9a:ca:71:ec:f5:21:d0:9a:6d:64:d7:51:
                    54:4c:a2:e1:b0:d0:0a:5b:e4:ad:81:f5:8d:a2:bb:
                    58:89:12:09:7d:dc:d5:a1:04:b8:cf:9f:8d:ed:bd:
                    ec:2a:b5:69:b0:d7:10:73:9f:a2:c4:f8:d4:88:55:
                    28:d8:95:9a:fe:03:c5:54:1f:be:b4:b3:c3:a9:13:
                    ef:c6:0e:47:cc:67:31:91:45:1e:18:dd:f6:cf:e1:
                    83:ec:a6:8e:40:5c:74:23:5a:a3:fa:b6:40:32:db:
                    04:d9:05:79:72:b5:bd:60:6d:95:b6:f7:df:7c:53:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:27:4C:B4:6C:AF:25:7A:81:80:8F:D1:0C:65:8A:1F:91:34:D3:37
            X509v3 Authority Key Identifier:
                keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f2:e2:44:f9:0b:36:64:75:87:07:33:3a:8b:6b:dc:16:98:
         7a:5a:06:6c:97:50:3f:ff:b0:cb:0c:69:18:a9:19:74:be:45:
         28:58:21:3f:60:5e:1f:87:b4:bd:9f:7d:6d:42:12:16:12:93:
         9b:71:a6:27:1f:86:06:e8:25:cb:c9:48:63:0d:11:74:82:1b:
         d8:c1:d7:26:ad:2c:8e:97:11:aa:17:41:12:4c:89:9e:00:63:
         b9:bd:dd:22:39:5f:2a:e0:00:41:ca:16:68:bf:80:02:7c:61:
         92:1d:7d:bf:f5:11:9b:c7:51:ea:7c:d2:45:81:2f:17:7c:11:
         7b:c7:7e:4d:2b:dd:06:83:f7:d4:f6:d3:c8:7d:95:7d:19:23:
         5a:2a:46:fd:c6:c8:a0:71:45:a4:07:98:c4:23:11:da:40:09:
         fb:df:e1:0d:c3:bc:7d:45:32:0c:66:81:09:e8:1c:32:69:0c:
         6e:fe:27:6b:5d:33:33:df:1c:ab:95:f2:0e:e8:34:a9:05:a5:
         2d:75:b5:96:a9:1f:a0:68:d2:c8:84:bf:28:eb:44:9a:db:9a:
         18:7c:b3:71:14:1b:b9:e7:7e:c2:f6:7c:7a:01:25:ed:60:f4:
         fd:da:96:11:e3:76:a2:f8:23:1b:97:89:c8:8b:65:a6:0e:00:
         c4:7b:49:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:28 2025 by rpki-client