Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          m1ZjYEqIbnlz7prUorImncNfmB5gKKypBL+JletyAE4=
Subject key identifier:   0A:3C:5D:3A:AE:DF:72:E0:C6:E0:EB:E6:B1:D9:F3:23:CB:27:00:91
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       019893A46CD2B49226828EC7F771176DE5FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          1633
Signing time:             Sun 10 Aug 2025 11:01:23 +0000
Manifest this update:     Sun 10 Aug 2025 11:01:23 +0000
Manifest next update:     Mon 11 Aug 2025 11:01:23 +0000
Files and hashes:         1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
                          2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
                          3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: qJcZzGhYnXt8BvW3xYF+nZ9MImNWHMO2XGPzAFe0uQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a4:6c:d2:b4:92:26:82:8e:c7:f7:71:17:6d:e5:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Aug 10 11:01:23 2025 GMT
            Not After : Aug 11 11:01:23 2025 GMT
        Subject: CN=0a3c5d3aaedf72e0c6e0ebe6b1d9f323cb270091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:f7:14:58:31:03:bd:dd:ff:2d:2a:e4:e1:
                    f7:3c:d2:c2:4d:9a:4e:e5:6d:d5:f3:31:d3:79:a5:
                    fc:0a:26:a7:4f:de:50:17:95:ae:63:58:d1:bf:ff:
                    25:0c:ca:ee:24:06:c7:dd:48:89:59:a3:5d:b9:cf:
                    9b:87:54:9c:25:64:1d:cf:1e:06:63:a7:43:b3:cc:
                    de:97:1a:f0:85:b3:34:91:9d:47:32:9f:2c:fd:e8:
                    8a:de:2a:c9:b3:d2:3e:e5:38:9e:8a:a2:81:a8:3f:
                    05:ac:4d:5c:b4:7b:96:76:7f:26:b1:45:d9:88:7c:
                    28:a6:c3:49:ec:0a:b9:0c:7e:00:0d:07:4c:0c:27:
                    46:59:9d:22:6d:7b:43:12:59:78:32:a1:e7:79:5b:
                    64:45:d5:3a:f4:57:bf:75:c2:b6:2c:68:7b:f7:08:
                    11:fa:5b:4d:5d:6c:9e:2d:62:ae:98:a8:44:dd:0f:
                    7c:73:ed:9f:18:53:cf:84:00:22:22:1d:ad:a6:a5:
                    68:2f:ec:6a:55:6e:1a:37:c6:10:0f:a5:a7:a0:ab:
                    84:14:fe:da:f9:9f:37:2e:d8:63:5b:8d:a0:b7:e5:
                    b8:65:63:cf:d1:93:c7:b8:66:c2:46:73:b6:fe:9c:
                    34:a1:fe:e7:46:0b:16:62:c9:7f:60:39:ac:be:94:
                    2f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3C:5D:3A:AE:DF:72:E0:C6:E0:EB:E6:B1:D9:F3:23:CB:27:00:91
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:68:ec:2e:6a:aa:09:4e:38:6c:d0:37:eb:0c:49:e9:23:93:
         6f:c1:9c:15:60:23:bb:d4:02:55:d8:98:9f:a8:80:73:16:62:
         5d:e4:ac:c0:f2:73:75:ef:6c:e9:b6:2c:77:75:13:2f:a9:65:
         f4:ed:18:ed:5d:7a:c8:7e:c4:87:a0:b6:d2:f6:52:1f:b8:a7:
         6e:af:d3:a9:20:76:23:c6:17:67:d7:b9:d9:82:e8:52:38:43:
         31:75:50:85:b2:19:41:db:63:fd:8a:f0:d6:43:07:f1:81:e0:
         c3:b8:a1:fa:43:ce:c8:e2:15:96:cb:9b:b5:08:a2:02:fc:8e:
         54:89:7f:11:08:8c:10:2b:57:1b:06:c0:f1:b2:98:7b:48:cd:
         e8:63:9f:55:18:35:b4:93:2b:a4:a4:53:52:b6:33:08:b1:08:
         4e:6d:3f:2f:52:03:b4:f9:e0:bd:68:5e:98:5f:f7:46:e3:2c:
         63:52:a0:5e:5e:03:97:73:27:a3:d1:15:ac:8d:d3:87:3d:06:
         27:d7:52:69:53:c2:93:56:43:db:a5:16:3c:c1:d0:1b:eb:ef:
         90:4b:50:3a:6d:f5:a4:0c:f9:3f:3e:52:f5:99:7e:3f:40:4a:
         9e:9b:0d:a1:80:9b:37:a8:20:5b:fa:56:df:9e:73:04:e3:5a:
         30:09:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:11 2025 by rpki-client