Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
File:                     1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft (raw, json)
Hash identifier:          4EjKQZ1EB5mCI1ItzoX2WdcPnYoNb04d06r4GoqRCrw=
Subject key identifier:   B6:2C:E5:D9:0B:E8:14:C0:98:C7:E9:2E:B2:BC:26:EF:4B:60:8A:8C
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Certificate issuer:       /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial:       01988C585CBA3EDAD7BF3E9D49A73A0C7A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 01:00:57 +0000
Manifest this update:     Sat 09 Aug 2025 01:00:57 +0000
Manifest next update:     Sun 10 Aug 2025 01:00:57 +0000
Files and hashes:         1: 1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl (hash: xFh12jguOFs1JwD/IRJXemMyIVl2NaWbakI50HRyMME=)
                          2: PqTOmFPSGAKNeE2YcblZG_Wl6iY.roa (hash: 8Xr6waKnu+E2qqO+UtOvKWYxqXyjlVupEIsHjk9OnCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:58:5c:ba:3e:da:d7:bf:3e:9d:49:a7:3a:0c:7a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
        Validity
            Not Before: Aug  9 01:00:57 2025 GMT
            Not After : Aug 10 01:00:57 2025 GMT
        Subject: CN=b62ce5d90be814c098c7e92eb2bc26ef4b608a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:37:9a:30:33:09:f0:a7:ac:8a:57:6a:be:f4:
                    66:31:df:b3:11:64:65:8c:92:fe:0c:c7:28:ff:fb:
                    1b:2c:c3:93:22:2e:6f:4c:a2:b4:e2:5c:59:dc:ce:
                    e7:af:a9:09:12:3c:3f:1b:79:7d:32:63:31:fb:06:
                    37:a8:78:fc:1f:2e:1a:a1:94:80:2b:88:7a:82:3d:
                    ab:5b:58:91:28:d3:60:c2:8f:92:eb:de:ae:fe:89:
                    40:e5:9f:b9:9a:8c:b8:65:75:13:bd:89:f7:aa:2e:
                    cf:40:93:48:a1:f6:c6:8b:11:28:2d:24:88:b9:04:
                    34:34:dd:3c:fe:66:1d:da:5a:09:56:6b:9d:a0:de:
                    97:81:ec:43:da:9e:8d:dd:09:e5:87:fb:5e:3a:c3:
                    f4:96:51:34:8d:a6:de:01:ba:82:ef:39:b6:cf:63:
                    20:ad:89:e6:28:98:a5:17:19:c3:31:a1:00:d5:5d:
                    e2:e7:64:2e:c2:20:5e:28:db:57:59:c8:af:16:29:
                    db:76:00:f5:a9:61:3a:0f:03:75:68:26:b0:eb:14:
                    f6:e2:40:25:df:64:6b:6d:9d:47:e2:22:cb:7d:f6:
                    35:3c:26:83:80:18:34:41:1a:13:ca:3a:2b:be:1b:
                    b2:78:f8:ea:d1:e7:7b:e9:aa:2e:34:17:14:4b:cc:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2C:E5:D9:0B:E8:14:C0:98:C7:E9:2E:B2:BC:26:EF:4B:60:8A:8C
            X509v3 Authority Key Identifier:
                keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e1:59:e6:7f:b3:2f:ff:e1:36:70:19:5c:86:b2:ea:7f:68:
         04:f5:2d:16:4f:b7:a7:66:64:26:9a:e8:03:ef:a0:26:be:ad:
         d1:b4:50:f7:c3:5b:b0:21:40:ae:8d:c8:06:29:98:41:a3:dc:
         d0:03:2f:2b:87:e3:13:d7:e7:2a:b6:9d:b4:bb:40:81:53:70:
         63:8c:c6:9d:e2:2b:67:df:98:35:c9:58:48:56:73:fc:ea:91:
         32:69:1f:2e:48:87:ce:14:ae:30:68:3d:a2:ce:7d:85:c8:84:
         1e:ff:e9:ca:53:f2:8c:14:a0:b4:b4:b3:1b:1d:9a:2a:35:fa:
         53:53:7a:6f:39:61:30:3d:8d:47:5d:7d:94:6e:52:ba:50:88:
         2d:9f:c1:cd:4e:a1:3c:d9:5f:4b:aa:fc:6d:53:10:3d:55:83:
         17:d1:df:e8:2d:fe:05:ac:39:3e:55:95:fc:83:21:3f:53:ed:
         85:96:28:9f:bf:9e:e5:3b:1d:a8:0d:f2:de:92:84:43:20:ec:
         f2:c5:4e:75:5e:09:46:e0:0f:b1:6c:0c:06:52:95:2c:ea:cb:
         bd:57:69:5c:01:e3:64:dd:b8:9a:d7:86:f8:99:bf:1d:61:0c:
         5e:af:fd:0e:77:c4:6b:4a:db:2d:f1:9b:a4:af:08:ab:44:f1:
         a3:cb:b1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:48 2025 by rpki-client