Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File:                     wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier:          gsv8RqvORdx0WVPNuKEML4D5ElNvUxvWR4NtOyR3pZ0=
Subject key identifier:   65:AB:08:03:9B:01:D0:CE:C5:D3:D1:DE:E2:D4:6B:8A:59:0A:0B:21
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer:       /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial:       0198974A37CF1EED2AF4250AB7567FF22BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number:          01F0
Signing time:             Mon 11 Aug 2025 04:01:20 +0000
Manifest this update:     Mon 11 Aug 2025 04:01:20 +0000
Manifest next update:     Tue 12 Aug 2025 04:01:20 +0000
Files and hashes:         1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=)
                          2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: L8DzdHSw7hpD/3uxb7zDsGTZ/QMzGBvQfBxmfSA3ZDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:4a:37:cf:1e:ed:2a:f4:25:0a:b7:56:7f:f2:2b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
        Validity
            Not Before: Aug 11 04:01:20 2025 GMT
            Not After : Aug 12 04:01:20 2025 GMT
        Subject: CN=65ab08039b01d0cec5d3d1dee2d46b8a590a0b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e4:52:c4:82:78:3c:25:b1:3f:1c:ac:74:cc:
                    83:1b:75:8c:8d:5b:47:20:fb:44:7c:30:1c:59:44:
                    34:0e:84:04:b4:cf:ac:f8:ec:16:91:47:3b:b5:be:
                    ec:40:96:ed:30:fd:e1:51:76:e2:23:3e:e9:d6:f3:
                    aa:b3:10:a6:b0:f5:68:c8:fb:0f:02:c5:65:e1:21:
                    8e:18:d2:20:21:97:40:bf:55:a3:db:f7:ba:95:ed:
                    f6:75:ea:75:95:3f:65:1c:e9:d8:7d:b2:4b:0f:36:
                    12:4b:f2:57:ad:f4:45:08:32:ad:2b:72:15:53:bb:
                    f3:8d:7e:40:a8:13:ef:1e:a5:52:2d:03:fd:78:75:
                    9b:7b:95:87:11:1b:ab:bb:e8:f0:23:d5:b4:0b:40:
                    5e:55:01:18:35:bb:e7:a2:5c:3c:71:7f:95:22:23:
                    81:64:9d:07:e1:d8:5e:3b:60:b4:f2:42:a7:7b:2d:
                    ca:14:b6:b5:6a:2c:58:b0:4e:51:b4:4a:a1:c0:96:
                    94:55:2b:05:45:dc:f9:5d:37:bd:32:50:fc:af:28:
                    ab:9c:7f:e6:db:9f:7e:7e:5f:23:cc:8b:af:b2:ba:
                    a1:81:23:11:17:64:7d:03:cc:93:53:1c:d1:43:c2:
                    4c:d1:f3:e9:19:8e:28:74:d5:ad:ab:94:68:48:b6:
                    9b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:08:03:9B:01:D0:CE:C5:D3:D1:DE:E2:D4:6B:8A:59:0A:0B:21
            X509v3 Authority Key Identifier:
                keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8a:ed:76:91:6d:95:18:98:f4:9a:89:c0:bb:a4:03:20:62:
         18:83:7e:fa:10:0a:05:78:9a:d6:4f:0e:ed:92:5a:61:15:5c:
         c8:7d:16:96:10:1c:f9:9f:15:cd:80:66:b7:a1:dd:1c:3b:21:
         f3:8a:fa:c4:f5:b9:d5:7f:e9:a8:a0:51:39:00:a5:4d:11:96:
         e0:6d:5e:90:36:00:78:2b:3d:bd:c5:79:ac:e6:32:4f:23:1f:
         c1:fa:55:9f:35:d4:29:1b:15:a0:54:1b:c5:c9:a6:6b:05:a6:
         ff:47:c2:ea:71:12:45:5a:9c:0c:7d:e4:49:4b:3d:7a:1d:27:
         89:98:de:7e:46:f2:d2:9e:1c:ee:88:ac:9e:fe:35:31:41:e7:
         28:a2:56:b5:3a:a0:19:e0:9f:1e:68:34:04:37:e5:99:87:20:
         d7:01:93:21:ac:ff:de:b1:d3:94:b1:a2:61:ec:95:20:04:05:
         78:be:58:69:3e:c0:19:d2:32:4b:fa:a4:55:46:e5:33:8f:7b:
         b4:55:7c:93:2d:30:77:8d:50:32:cf:cc:1f:db:7a:33:05:22:
         fc:71:bf:dc:d1:30:84:f8:aa:e6:a6:39:09:e0:ec:6f:9a:56:
         6d:fe:35:de:9c:cd:11:cc:4c:a0:8d:c7:81:a4:13:e4:b4:a0:
         b2:7f:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:40 2025 by rpki-client