Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File:                     wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier:          YitkNMv34bL/px1xtsLp5ClNe5UIBeNWLjDqqElc7NQ=
Subject key identifier:   57:09:9A:3B:4E:59:BA:D4:46:08:2C:E0:9F:25:A6:DA:22:A3:29:0E
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer:       /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial:       01988B7D616EFFF96D454875EB26C5E1F989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number:          1625
Signing time:             Fri 08 Aug 2025 21:01:46 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:46 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:46 +0000
Files and hashes:         1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=)
                          2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: jMv0dgpdcGjq3vknd5M7Qd2SI/G1vRcpWb3mEmDfSDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:61:6e:ff:f9:6d:45:48:75:eb:26:c5:e1:f9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Validity
            Not Before: Aug  8 21:01:46 2025 GMT
            Not After : Aug  9 21:01:46 2025 GMT
        Subject: CN=57099a3b4e59bad446082ce09f25a6da22a3290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c0:68:57:0a:95:4b:31:c9:6e:fe:a1:fe:59:
                    d8:ec:21:d3:28:60:e5:3d:16:ca:93:86:72:4c:3b:
                    ff:c8:0d:cf:e4:19:74:20:9e:e7:b8:8a:a2:8f:a0:
                    74:68:25:8d:cf:4b:50:96:67:a3:15:5c:30:9b:8e:
                    9c:e3:76:60:de:54:ba:c0:cd:e7:4c:69:f4:bd:81:
                    8e:83:c6:18:ed:fd:1b:d2:49:bf:e3:15:89:a5:48:
                    6d:cb:f6:8c:57:91:35:10:72:3a:72:12:f5:e8:b4:
                    f6:98:23:71:1d:3c:ef:26:c8:24:e3:5b:52:69:04:
                    b8:31:0a:a1:63:13:1d:df:02:00:14:3d:10:27:d9:
                    6f:5d:d4:74:4f:4d:85:ab:6a:75:7f:b9:6e:3e:91:
                    a6:b8:fb:dc:51:2f:3a:e3:67:3c:11:97:e4:0b:8f:
                    32:34:c4:8c:93:76:57:6b:f0:c6:fd:b9:3b:87:4f:
                    0e:b9:fb:65:b3:e1:65:42:d6:45:39:94:4e:19:17:
                    33:3b:36:c0:1e:23:55:99:5f:3a:32:ae:61:7b:0e:
                    79:f5:00:11:c3:a4:f2:c7:68:3c:34:c2:f8:8e:ae:
                    0b:03:65:8b:de:f5:bd:e5:12:2e:db:9f:6d:21:0f:
                    9b:87:d8:cf:5b:5f:5e:7d:cf:96:c3:b4:43:85:80:
                    3f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:9A:3B:4E:59:BA:D4:46:08:2C:E0:9F:25:A6:DA:22:A3:29:0E
            X509v3 Authority Key Identifier:
                keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:46:ec:62:93:4b:fc:75:12:02:d2:19:e0:89:61:b2:e1:94:
         83:ea:85:7b:5e:be:cb:a3:9b:fe:7b:cd:4f:f1:9b:da:8a:92:
         d5:70:8b:eb:42:38:e1:cc:49:96:ce:65:f7:95:f4:31:48:cd:
         e4:de:44:29:21:78:38:f9:09:d6:67:a3:1f:c6:19:99:00:f1:
         d1:ef:0b:42:5e:40:f6:cc:df:fb:ca:d6:50:cc:be:93:c8:b7:
         25:07:4a:d3:69:ec:31:5b:f8:f1:9c:cb:d3:95:db:8c:f2:5c:
         72:31:84:c0:47:db:27:7c:97:f0:f9:d5:04:da:70:39:09:56:
         cf:26:64:17:d5:43:0e:dc:94:28:54:d9:f1:89:e1:58:58:c5:
         0d:0c:06:88:c4:f1:b4:24:ea:51:c6:ee:a9:27:dc:dd:ce:8f:
         98:77:54:c5:c5:ef:5e:ce:f7:4b:f6:c7:9f:9e:32:9d:9f:b1:
         01:07:f0:14:f7:3e:ca:fa:d8:e8:a2:10:49:bc:8d:26:4d:e5:
         83:12:dd:64:8f:76:9d:f9:ff:67:03:be:48:3d:04:54:93:b6:
         89:30:8f:6c:fe:b5:3a:29:13:59:e8:e5:8b:86:82:00:b6:c7:
         2a:f0:67:b9:1a:85:88:c2:9a:12:67:9e:4e:c1:65:92:ce:c8:
         59:c3:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:27 2025 by rpki-client