Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File:                     wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier:          vfeaE9FWhfU4ySkpEOQIvQuMnsiml9RperAQKX3RgXw=
Subject key identifier:   2B:69:E0:41:8A:5A:6C:68:D6:8C:38:3E:66:D3:80:E4:CE:80:C7:C8
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer:       /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial:       019873E269FD3FB36FC8798B9691F40F72E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number:          04DB
Signing time:             Mon 04 Aug 2025 07:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:14 +0000
Files and hashes:         1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=)
                          2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: XOMBQkQuUHO2jqVsCa7SpPp1/xId1tkj+wPHW6ZW6aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:69:fd:3f:b3:6f:c8:79:8b:96:91:f4:0f:72:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
        Validity
            Not Before: Aug  4 07:01:14 2025 GMT
            Not After : Aug  5 07:01:14 2025 GMT
        Subject: CN=2b69e0418a5a6c68d68c383e66d380e4ce80c7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:ad:e8:e0:d6:c2:66:86:96:1e:92:a9:2b:
                    9a:8f:2d:2f:dd:cc:e4:c3:85:4a:2a:e3:fd:09:86:
                    0c:2c:46:66:1d:18:c1:44:2c:95:7b:6b:e0:04:17:
                    f4:a9:62:97:d1:ff:c4:91:1d:07:3c:2c:bf:e2:f5:
                    4e:ac:85:3b:35:49:37:a1:25:30:bb:b5:92:54:5e:
                    32:c6:88:c7:ad:bc:71:e9:7b:1c:13:cd:13:1b:8b:
                    00:65:f3:d8:96:1f:c6:c7:27:0f:eb:9f:4a:7e:13:
                    d3:f6:97:0d:ce:db:5b:bc:37:59:63:47:23:a5:50:
                    bb:46:59:fc:99:d1:3d:6e:b7:4f:1c:81:c2:f4:73:
                    a5:32:c2:cc:60:b5:36:0b:dd:42:30:52:9e:a9:82:
                    cb:9e:77:2f:b7:b3:f1:11:f6:73:b6:17:04:9a:fc:
                    3c:66:51:5a:2f:40:8d:33:ac:6a:37:0a:ff:b6:32:
                    71:ee:24:7e:1a:05:73:cd:cf:3e:bd:b0:2e:f9:01:
                    5f:c5:cd:bb:b8:7e:b5:5a:47:6e:1b:b8:50:3e:ff:
                    89:57:06:fb:29:0b:08:86:94:4c:4b:60:59:7f:35:
                    0e:c0:cb:13:3d:ba:f4:27:1a:dd:60:8d:8a:98:59:
                    59:00:38:bc:a9:9a:ae:76:b4:50:e1:94:32:28:e0:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:69:E0:41:8A:5A:6C:68:D6:8C:38:3E:66:D3:80:E4:CE:80:C7:C8
            X509v3 Authority Key Identifier:
                keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:d2:55:75:a9:62:04:84:70:af:5b:00:91:5b:48:6e:70:
         f4:0e:1a:29:8b:b0:19:94:1d:d0:2a:1d:12:c6:de:d7:b8:b1:
         b8:99:04:03:70:51:40:c6:63:81:9b:88:8b:9b:8a:e0:db:c9:
         ed:cc:e8:7d:a2:77:32:8d:96:d6:df:43:37:d6:0f:23:95:72:
         e5:d5:e1:46:8e:27:6a:65:38:c0:cc:6d:57:11:81:4f:c1:c6:
         ba:7f:1b:ff:13:86:92:42:fc:a9:5d:b4:e6:02:3c:01:b7:89:
         b0:d0:2b:1c:4b:7f:f5:f8:2d:2c:81:ae:06:ca:03:cd:21:71:
         75:40:41:69:31:f0:f0:5d:03:1c:e7:60:99:b4:50:54:e3:cc:
         f4:11:9b:c9:14:a0:77:90:e4:ff:e2:ac:a9:a9:4c:ac:ca:90:
         f7:12:1b:71:50:5b:c3:c0:de:af:22:b8:54:51:78:7f:71:0d:
         e8:63:96:8b:11:88:4a:4d:38:b8:d9:89:e3:69:f1:b9:2b:24:
         de:c3:75:7c:88:ff:c6:f6:ab:86:42:f7:08:13:99:83:51:6d:
         7f:df:48:39:e2:57:dd:90:1f:9c:b2:08:e8:05:6f:9a:13:86:
         7a:5c:b9:cd:90:36:ea:0e:94:bb:14:76:64:62:33:4e:bc:e2:
         51:96:33:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:41 2025 by rpki-client