Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          b0tqLGZ1IzhbFMfvInA+rt5HPR2ydwZw1Dsf0iIuo8c=
Subject key identifier:   CA:91:15:C7:85:52:A2:FF:1F:AB:D1:9C:38:93:24:41:DD:89:FB:59
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       01987AF6F92E546B60FFBF8B3A1A22AD0A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          1095
Signing time:             Tue 05 Aug 2025 16:01:02 +0000
Manifest this update:     Tue 05 Aug 2025 16:01:02 +0000
Manifest next update:     Wed 06 Aug 2025 16:01:02 +0000
Files and hashes:         1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
                          2: 61dF3wsP6zAa95yTPkmtbstVv7w.roa (hash: HUlCkE98EdcSDLNFzfHE9ErtRbtZILyLm1BKTPRX6+o=)
                          3: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
                          4: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
                          5: PlrUqIsDqN_UXlJtcv0TuFMt7to.roa (hash: gvM3NFJAC0StecfvAX91NflMOf9EosZ/1h7uV4HHve8=)
                          6: mpKpYmY8DEGhZcV6ltJDz93teq8.roa (hash: 7UANVEML/0vRWe4hxTYzTFGxeQ0U+2SuSQ0y29OV6fo=)
                          7: oB9bZbRwGhzU8WuOdPBmky_nv2k.roa (hash: 1SnSLuXNNFwu9oud/OcFmIuzLgq0f2HlkrbZraM+p3Q=)
                          8: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
                          9: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: PL6VNWnZBYc2nIUBwsxqkBF52Ge8Br90YuG17Q/t0k8=)
                          10: zlP9_orrw6aHHSv7bATBUkhqiRA.roa (hash: NvMCHUJ14Lp9H+mYdu1xuY40BR4qWMQHtDYR2W3Odek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:f9:2e:54:6b:60:ff:bf:8b:3a:1a:22:ad:0a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Aug  5 16:01:02 2025 GMT
            Not After : Aug  6 16:01:02 2025 GMT
        Subject: CN=ca9115c78552a2ff1fabd19c38932441dd89fb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:f5:24:31:6b:15:8f:d9:0b:9c:dc:b4:52:
                    86:98:6f:85:fe:3b:76:7f:3b:44:92:cb:63:13:cc:
                    1c:57:ec:e6:83:ec:7a:7f:d0:a2:d0:ed:7d:0f:8c:
                    04:0b:9e:e9:a7:c4:44:ac:d4:68:d3:d6:5a:fc:11:
                    d6:f1:60:26:c3:74:d3:7f:3a:e2:6d:ce:e1:47:73:
                    66:e6:3e:4d:4d:c6:75:4e:19:ad:d2:87:18:07:89:
                    39:c9:33:1a:00:35:62:a3:b2:d4:03:c5:0b:a7:b6:
                    0a:3f:6c:b6:a3:9f:0b:e8:e3:f9:2e:15:b1:61:b7:
                    74:f4:31:0d:e6:b3:cd:3c:31:55:2e:ea:a3:8a:74:
                    2f:ac:b1:fe:41:f6:d4:cf:e0:fe:ec:3f:60:27:dc:
                    28:34:78:6b:0a:26:ce:71:d9:3e:05:76:02:0d:dc:
                    10:65:db:91:54:b4:62:1f:ce:5d:b1:c7:20:9e:f6:
                    53:d3:78:af:db:94:4f:ef:84:fb:77:83:54:56:86:
                    3c:1b:13:aa:b0:3e:62:ec:7a:bc:bb:56:46:91:13:
                    67:09:0f:8f:5d:bb:20:e9:f9:f8:08:d7:fb:df:32:
                    f6:c6:8e:ee:c0:76:78:7a:8e:11:10:d0:05:2b:9b:
                    5d:fe:1b:2e:63:9a:29:72:97:60:b0:98:87:e5:ef:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:91:15:C7:85:52:A2:FF:1F:AB:D1:9C:38:93:24:41:DD:89:FB:59
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:45:e9:c8:20:42:bf:73:de:f7:b3:8b:d2:3b:38:5a:9f:61:
         6a:3a:1a:1f:58:50:47:73:43:08:e6:62:da:05:2e:91:57:cf:
         51:8c:f1:fe:ff:3f:9d:c3:27:2e:63:3c:82:df:7b:2a:55:9f:
         4f:73:fc:93:f2:90:44:f3:59:a1:c2:d1:76:a2:b7:58:1c:1a:
         25:37:e8:da:29:09:48:4a:8b:2c:80:ec:e7:d0:b3:3c:ee:0a:
         38:4b:25:d1:c1:72:a7:57:a2:27:59:4b:7b:58:49:1d:8e:f7:
         7a:4b:35:d1:48:64:36:f1:36:92:9b:f5:ed:8a:37:cd:ea:7e:
         db:d8:3f:a5:ab:86:23:06:c6:dc:92:5d:50:56:15:72:21:af:
         16:bb:9e:89:ce:77:38:dc:f2:7b:94:41:94:fc:78:2b:03:38:
         9c:f2:85:59:23:b2:80:47:67:c6:e2:d9:8c:63:07:6e:d5:1a:
         5b:46:44:f9:c2:94:d5:5f:1a:e5:b6:b4:b9:b7:69:6d:f3:8a:
         72:59:3e:05:83:1b:31:4c:5a:26:0c:e9:37:c0:c1:f4:93:71:
         03:28:d1:ba:4a:3a:78:3a:4d:9c:d7:bf:f9:80:4d:17:94:12:
         e1:57:67:e4:91:eb:96:b6:d9:b5:be:1d:fe:91:27:32:b3:7e:
         40:70:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:59:10 2025 by rpki-client