Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
File:                     MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft (raw, json)
Hash identifier:          Xhlvn274CX8vx1FbuQeliNJMrEdVcCMXlO2FnPzjImM=
Subject key identifier:   27:AF:01:52:70:55:31:B8:8C:19:E8:79:A4:BF:3E:17:63:7B:E7:95
Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
Certificate issuer:       /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Certificate serial:       0198955B34757E002D652B47C12DA7FCB300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
Manifest number:          0EDA
Signing time:             Sun 10 Aug 2025 19:00:38 +0000
Manifest this update:     Sun 10 Aug 2025 19:00:38 +0000
Manifest next update:     Mon 11 Aug 2025 19:00:38 +0000
Files and hashes:         1: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl (hash: VczXnVVfJN3HJMMoen6ZY8uFVFUZp2wrBCgGrE/1+eA=)
                          2: jlPrG3yw9VWSwdIgD6U56n3FJO4.roa (hash: //BBruzTksW7mSOBdLHpnW4EtV41ZFbnLnxHoJuolZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:5b:34:75:7e:00:2d:65:2b:47:c1:2d:a7:fc:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
        Validity
            Not Before: Aug 10 19:00:38 2025 GMT
            Not After : Aug 11 19:00:38 2025 GMT
        Subject: CN=27af0152705531b88c19e879a4bf3e17637be795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9f:fe:25:1e:e3:08:b3:df:c9:c7:7d:ff:aa:
                    53:51:68:9d:66:59:f6:7c:43:be:41:ae:10:76:fe:
                    08:e0:0c:cb:b6:f4:f9:fc:00:c3:c7:12:ca:9f:2e:
                    f3:ba:e7:83:6c:79:ed:62:b0:f3:46:0b:56:99:54:
                    ee:20:5b:5d:e3:7c:da:96:1c:e0:d3:1f:a1:44:d3:
                    bd:eb:6b:11:e0:da:76:fe:d7:9a:a3:98:14:1a:7e:
                    5d:bb:39:da:1d:81:b7:21:e2:87:2a:f0:c4:a3:0b:
                    8f:c6:3a:ad:69:5c:13:90:f5:b4:9f:b3:5a:b4:54:
                    ea:d6:67:f4:df:bc:53:2d:76:b5:c2:59:f1:eb:dc:
                    e2:9f:b5:a9:e7:fc:aa:db:a6:c1:32:16:b3:f2:87:
                    ea:49:b9:4a:d8:79:40:e5:ba:69:71:cc:1a:e8:f4:
                    35:d1:05:67:5b:9e:4f:a5:f5:e8:66:ce:9e:b1:1e:
                    c9:0d:8a:76:d8:79:71:2a:5b:35:62:b7:0e:c1:f3:
                    e9:69:ad:57:59:5b:56:24:6f:5d:6e:00:44:ea:b6:
                    f1:4a:87:59:db:30:3b:0c:45:17:89:16:a3:53:ba:
                    c4:24:aa:cc:67:27:36:93:c1:f8:bc:21:28:4e:29:
                    f5:29:a8:b3:22:b4:94:8a:f1:93:2f:1d:1a:c5:ee:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AF:01:52:70:55:31:B8:8C:19:E8:79:A4:BF:3E:17:63:7B:E7:95
            X509v3 Authority Key Identifier:
                keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:4d:82:9b:2f:1d:43:6c:3c:fa:87:8f:3d:49:a4:fa:66:
         2e:a4:d3:48:b8:eb:b5:f0:18:82:33:0f:b7:fc:0b:7b:51:70:
         b2:12:57:ba:a0:eb:9f:5a:8d:a9:16:0a:a3:a4:d5:c5:c7:2a:
         c0:a8:a9:08:7c:e3:34:e0:ce:9b:30:91:9b:b1:b2:8c:f4:09:
         d0:76:d5:52:a3:2c:a2:a0:d6:39:e0:fa:c3:80:5a:a9:10:27:
         28:12:91:c6:dd:df:f6:91:c6:e1:5b:19:bc:78:7a:5b:ec:c6:
         43:68:6c:2d:41:3b:09:72:06:5b:74:a4:18:26:44:a2:6c:26:
         70:64:8a:67:ee:01:92:15:93:0e:b1:15:d2:af:10:26:42:b8:
         bf:eb:05:2f:52:94:3a:2c:27:d0:4a:32:98:4b:f7:f1:56:a9:
         76:49:ea:1b:11:26:28:94:4d:26:f9:8d:5f:f3:d6:3e:c9:cb:
         3d:b6:5f:0c:dc:e3:3e:87:c5:55:28:50:a6:9c:3c:66:24:32:
         62:b4:6a:7c:32:e9:8c:cb:41:9c:cf:33:19:6c:6c:17:7b:3f:
         1b:9b:b9:45:ee:f9:cb:40:87:58:2e:57:63:3c:ef:96:df:58:
         38:19:cb:05:f8:70:9b:94:b8:95:9a:e6:15:7c:d1:73:ae:93:
         c4:1f:2f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:37 2025 by rpki-client