Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File:                     w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier:          R7UjeHKGgK6yv94SkGjQRs37i4pvQlV6OAH+cRDJVR4=
Subject key identifier:   C4:91:C0:D5:8C:0E:BF:47:D9:DD:A1:CE:C8:67:32:11:48:F9:D2:6B
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer:       /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial:       0198884459C2E307C59AB9AA082E0A88379B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number:          1567
Signing time:             Fri 08 Aug 2025 06:00:37 +0000
Manifest this update:     Fri 08 Aug 2025 06:00:37 +0000
Manifest next update:     Sat 09 Aug 2025 06:00:37 +0000
Files and hashes:         1: O3ljM5CB_2JtUI0Sdnkha5M5ERQ.roa (hash: NhJbXC81FRmcMSonVcZC+2A3GfW4bVjcRFKj0QoIURY=)
                          2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: jRRAdUcxu0UTuokaIgewudfU19KwiJs34d+0AH1dNd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:44:59:c2:e3:07:c5:9a:b9:aa:08:2e:0a:88:37:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
        Validity
            Not Before: Aug  8 06:00:37 2025 GMT
            Not After : Aug  9 06:00:37 2025 GMT
        Subject: CN=c491c0d58c0ebf47d9dda1cec867321148f9d26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:db:78:6c:52:75:f5:26:6c:ea:a4:cf:b8:
                    d8:6c:0c:b4:2d:12:cd:91:e6:4b:30:c8:0e:b0:63:
                    51:a0:8e:bb:f7:5f:6e:e2:32:31:38:55:94:9a:49:
                    fd:ed:96:83:e1:27:5c:ee:0e:9b:37:cf:3b:93:c6:
                    bd:84:a1:05:85:51:ad:43:67:7a:62:5a:d3:06:15:
                    9e:8e:e8:9a:b9:99:fe:bf:9f:a6:1c:d3:78:4d:97:
                    f4:56:d8:bd:e8:a8:cc:5a:6d:ea:7f:e7:b8:99:5e:
                    b6:e7:0b:d7:14:be:60:a8:29:9e:c5:53:58:13:20:
                    7a:d3:09:d3:ba:8a:2e:38:f4:08:42:8f:bf:2f:b0:
                    31:2f:41:a1:a0:10:f9:70:f9:05:90:90:de:a9:ba:
                    7a:a8:93:6b:44:4e:90:5c:db:8f:11:67:e5:b9:58:
                    48:24:4b:32:1f:db:5d:a5:cd:ab:e5:89:71:88:f1:
                    6c:ac:5a:87:82:73:fb:24:3b:47:4d:66:c0:7d:03:
                    b9:0f:dd:96:07:85:b2:a7:d0:53:1d:03:aa:33:ba:
                    a4:66:7c:c7:f7:08:f9:a0:4b:78:4d:c8:ed:51:5e:
                    49:f8:04:e7:d6:73:20:a2:25:d0:09:c6:8e:ad:fe:
                    df:b5:a5:d2:f1:f7:66:98:8e:e7:15:78:50:ac:da:
                    71:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:91:C0:D5:8C:0E:BF:47:D9:DD:A1:CE:C8:67:32:11:48:F9:D2:6B
            X509v3 Authority Key Identifier:
                keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:84:26:c7:90:b3:2f:ae:ec:40:15:a1:5a:97:07:1e:56:57:
         55:75:4f:c1:e8:e3:2e:f6:7b:b4:83:1f:be:c9:38:13:4a:60:
         31:81:7f:7b:d4:16:75:a2:c4:da:b5:b5:f9:e3:31:f0:c1:e9:
         5d:01:f2:14:45:7a:ae:64:96:67:8b:2f:3f:8a:0b:97:38:9f:
         19:2e:46:06:b9:b7:f8:4e:08:03:01:06:7b:08:c2:36:f6:69:
         0a:84:a6:43:19:22:e9:b4:43:77:9b:f3:0b:93:96:88:e8:49:
         19:80:e6:c3:56:4f:48:26:f4:73:2a:35:ed:47:c0:32:9f:85:
         d9:9c:e4:16:b2:a1:a7:30:58:c0:a9:1a:2c:c4:69:ec:95:e7:
         b0:09:70:1a:0c:a9:25:a4:08:64:7f:c7:14:7f:58:6b:c7:04:
         3c:0f:91:38:b3:16:54:4d:f5:49:08:4e:0e:3a:3a:40:3f:e7:
         20:a1:2e:c6:0f:00:ad:2b:0e:fd:b7:d4:a0:cc:60:06:c6:21:
         7b:f8:14:5c:70:97:78:f2:ac:e4:05:d0:b3:f4:14:51:ef:00:
         a9:50:5c:48:e0:ed:c9:3d:75:1b:e3:67:99:7e:94:c1:1d:59:
         e8:47:65:9d:b6:8d:5f:4e:c0:ce:c5:f1:ad:31:b4:a2:5e:4b:
         6d:7e:b2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:06 2025 by rpki-client