Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
File:                     wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json)
Hash identifier:          A98LB9zvubOJsZUB5aVwM/2ua1P26m6WLIQehwGPqds=
Subject key identifier:   14:F5:03:1C:58:9E:8D:14:E2:08:8D:44:0F:03:31:AA:6A:FC:05:8E
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Certificate issuer:       /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial:       019873E42C6A6436F3A193ED4F8F7D9DEAB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 07:03:10 +0000
Manifest this update:     Mon 04 Aug 2025 07:03:10 +0000
Manifest next update:     Tue 05 Aug 2025 07:03:10 +0000
Files and hashes:         1: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (hash: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=)
                          2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: eqde+mAJBOEUSdp1ShtPCw51N3pBq65o7XXQAasFwCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e4:2c:6a:64:36:f3:a1:93:ed:4f:8f:7d:9d:ea:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
        Validity
            Not Before: Aug  4 07:03:10 2025 GMT
            Not After : Aug  5 07:03:10 2025 GMT
        Subject: CN=14f5031c589e8d14e2088d440f0331aa6afc058e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a0:3e:1b:f7:69:46:8a:4c:96:1d:21:15:af:
                    3d:0e:84:39:73:5b:ee:7d:61:71:17:e8:b2:1e:d3:
                    98:26:b8:7b:cb:eb:21:e4:00:d3:41:28:81:c2:f2:
                    ba:60:d2:8d:6a:89:14:cf:36:c9:65:d6:c4:a6:df:
                    96:c5:d1:1e:39:f5:52:f9:16:3b:f6:44:3a:04:a4:
                    3d:88:b3:71:df:c2:05:e1:f5:fe:32:fe:79:16:44:
                    14:4c:fd:5e:fb:9b:76:e2:89:bd:53:7d:c7:98:be:
                    e0:0f:26:56:22:cd:1a:93:f0:81:86:83:45:8d:20:
                    36:10:ae:64:4e:1b:34:f7:90:c9:9c:6a:79:dc:a4:
                    e0:69:26:b4:10:8b:fb:f1:7f:51:25:8b:57:61:85:
                    8c:fd:b5:01:3a:5f:a4:32:6f:4a:4e:94:a3:3d:01:
                    b0:4f:ea:61:c2:63:fd:4e:4b:d5:ef:7d:f2:ce:bc:
                    55:e7:2e:c0:88:79:fb:9e:59:dd:21:33:96:7c:14:
                    60:d9:71:20:0f:b3:84:70:04:07:f8:54:b9:20:b9:
                    f3:0e:35:91:63:7b:6b:cf:37:32:ba:23:e0:5a:c1:
                    7b:20:df:f8:da:7f:cc:07:3f:82:f6:ec:17:6a:bf:
                    97:c8:7e:68:ed:f4:4a:ae:b6:95:52:d7:4c:63:92:
                    40:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:03:1C:58:9E:8D:14:E2:08:8D:44:0F:03:31:AA:6A:FC:05:8E
            X509v3 Authority Key Identifier:
                keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ba:b4:1c:65:79:1a:d9:db:f5:8a:6f:d7:b4:4a:25:d1:dd:
         58:74:4d:20:a6:64:67:e7:9e:97:a6:ab:de:aa:c6:a6:6b:c3:
         3e:0c:24:95:e1:ed:61:f2:a6:2e:b9:5f:85:c9:f8:96:98:09:
         9e:60:63:ff:35:06:02:55:02:53:92:51:df:f6:51:2b:8a:f1:
         d7:d4:dd:2a:df:f1:ed:ec:b6:0e:71:bc:08:46:eb:51:d5:94:
         13:87:e6:83:3a:38:d1:d4:21:a0:31:77:ed:3f:6e:57:7f:1e:
         a2:7b:95:87:01:cd:14:b1:60:dc:3c:af:07:1c:1b:a4:1e:67:
         2a:63:6a:71:35:5f:d9:18:05:bb:9d:11:7f:c2:b1:51:69:c8:
         1a:1f:43:fa:21:c3:b2:ef:d2:6e:db:09:73:d5:6e:f7:14:20:
         65:bb:1c:f6:4d:1e:fb:68:20:31:b9:67:8b:59:53:48:40:2f:
         a1:a9:6f:52:3a:1f:2e:4a:37:67:cf:e2:1e:c4:f7:e8:cf:e1:
         5c:17:2d:d9:52:6f:97:b9:a9:a2:82:07:a5:ee:02:5c:0f:73:
         0f:48:03:33:4d:41:54:75:a3:ff:25:5d:2a:86:e5:bb:ac:48:
         36:c4:97:58:7d:e6:bf:63:ac:4d:b8:c3:b7:8e:e3:1d:2d:e8:
         d9:24:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:25 2025 by rpki-client