Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          oLb9wm6UvikemNE4D0e/h15Rg8eLNqOVIZlGRCu0JiY=
Subject key identifier:   D0:9A:5C:A3:AD:9C:78:7E:16:BB:26:E3:A8:2D:84:65:8F:45:84:4A
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       019873E280FE2E247F0C1FCB06F2FCD9A136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          07B0
Signing time:             Mon 04 Aug 2025 07:01:20 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:20 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:20 +0000
Files and hashes:         1: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (hash: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: sdGfehXKz7Clrj1XFdeV8edIqCGeZRcKRhYRjhtTAZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:80:fe:2e:24:7f:0c:1f:cb:06:f2:fc:d9:a1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: Aug  4 07:01:20 2025 GMT
            Not After : Aug  5 07:01:20 2025 GMT
        Subject: CN=d09a5ca3ad9c787e16bb26e3a82d84658f45844a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:03:c3:7d:d9:06:a8:42:d9:b4:30:be:a5:c3:
                    91:1f:48:1f:79:54:3b:cf:de:46:84:71:79:80:db:
                    b6:5a:ea:66:f7:43:56:62:d6:0f:c6:49:e0:6f:d2:
                    7d:b0:3a:66:f7:2b:9c:d2:80:fc:a5:d8:e0:6d:09:
                    ac:50:a4:1a:01:9d:48:1f:68:04:69:84:b8:6f:c7:
                    1a:35:f3:da:0a:78:4f:03:e3:20:55:40:4a:bd:43:
                    05:b5:6f:8f:0c:9e:8e:73:8c:6f:ea:7f:a4:07:55:
                    ec:ca:74:ed:ea:3f:0d:c8:cf:73:b7:e1:b0:e4:00:
                    d7:80:65:84:13:f3:2a:e3:d9:57:9f:af:dd:60:d7:
                    69:ca:75:12:4d:87:13:78:56:ca:81:f2:d3:c7:af:
                    56:2c:be:5b:12:7a:5a:37:ab:63:5d:43:16:11:8a:
                    b0:05:46:b0:fe:40:b6:58:a7:8f:4d:23:a4:b2:c4:
                    1d:df:c2:4d:21:5d:94:58:f0:a9:7c:07:86:20:33:
                    93:a4:91:98:6c:99:3a:d2:9a:b3:d7:1d:90:51:3e:
                    c9:83:53:01:6b:2a:db:be:55:0a:32:3c:a1:a9:a4:
                    3b:99:3d:ae:f3:d7:36:67:03:23:ed:ea:7a:1e:7f:
                    70:78:2c:16:3c:ff:69:96:11:fe:f7:2f:8d:b7:7b:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:5C:A3:AD:9C:78:7E:16:BB:26:E3:A8:2D:84:65:8F:45:84:4A
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:13:16:33:a9:66:49:4d:02:3d:ee:39:22:2d:df:a8:8c:
         d1:c8:aa:99:83:6f:05:84:4f:db:52:94:8d:d4:2d:6e:44:08:
         10:ef:29:27:a0:a1:4e:58:27:cc:73:d1:b9:a9:3b:88:b8:d4:
         2a:7f:55:5d:ad:1c:3e:be:83:62:9f:75:f6:04:ea:78:4a:81:
         b4:b3:21:1c:f5:74:f1:71:f1:5c:22:c5:fa:2b:27:ae:18:8b:
         43:81:57:6a:03:77:af:a8:00:84:c7:e7:9f:5e:b2:41:0f:a7:
         29:ab:40:af:bb:4c:cc:0a:46:33:78:b3:af:d7:69:a3:0d:5f:
         51:09:07:61:5f:8a:65:f4:bb:24:69:09:ca:12:46:b6:81:03:
         72:d7:72:0d:22:93:df:e6:ac:21:6f:8e:ae:49:18:16:b4:47:
         9a:69:4a:d1:c2:b6:d8:30:06:f1:67:43:8f:e2:10:11:3e:66:
         4d:5f:0e:7b:a1:96:79:0b:b6:39:c0:f1:f3:56:0f:74:87:99:
         95:0f:7a:d0:f4:cc:94:31:d9:c2:16:c0:e1:49:14:b6:9a:03:
         7c:e3:05:f8:e7:9e:52:7c:70:9e:33:f2:8f:f3:7f:35:dd:42:
         19:c1:a8:34:ab:6e:50:59:bb:b7:f5:86:3f:35:be:ad:07:f6:
         9a:fa:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:22 2025 by rpki-client