Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
File:                     wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json)
Hash identifier:          VXl04xH0nmr0VtFwIr+y8p3UGZtQVCQti3GbuEv5LZI=
Subject key identifier:   8D:46:20:35:CD:BE:2F:09:C7:13:54:C0:B8:63:BC:DB:5C:30:02:DA
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Certificate issuer:       /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial:       01988B0FAF043F0554CD79FE5BC8D1AD238D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
Manifest number:          1622
Signing time:             Fri 08 Aug 2025 19:01:57 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:57 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:57 +0000
Files and hashes:         1: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (hash: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=)
                          2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: n4IxJC8gek2Gqll9eRJSCEkSjbQYKlJ7fXXbSotpSM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:af:04:3f:05:54:cd:79:fe:5b:c8:d1:ad:23:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
        Validity
            Not Before: Aug  8 19:01:57 2025 GMT
            Not After : Aug  9 19:01:57 2025 GMT
        Subject: CN=8d462035cdbe2f09c71354c0b863bcdb5c3002da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:a7:88:a7:e3:ca:b2:47:10:36:6b:72:c4:
                    4a:99:5a:ac:b0:ec:31:46:5e:4a:13:a2:34:5c:a7:
                    55:75:a2:3f:dc:e9:f5:9d:2c:08:61:23:17:29:4b:
                    3b:af:56:54:4e:34:fa:29:03:d5:f0:54:32:b2:5f:
                    ed:ed:01:2f:2f:e4:e8:9f:83:bd:cd:ac:cf:8c:65:
                    b7:c4:94:2d:d8:38:e4:34:eb:91:72:45:e3:ea:4d:
                    c8:67:04:2f:c4:ca:37:55:76:25:97:9f:22:7d:71:
                    6d:c0:1e:fd:a1:59:17:b9:55:ca:58:6a:44:da:e1:
                    b1:b1:e8:96:62:f4:a9:e8:08:df:61:af:4b:a0:8a:
                    f8:43:55:ed:2e:37:8b:31:bc:ba:72:a7:7d:7a:58:
                    d3:0b:eb:cf:cb:96:02:cd:81:9d:ee:52:14:a4:53:
                    85:70:1d:7c:37:80:dd:69:c7:6f:81:17:e9:81:15:
                    6c:86:b6:2f:59:f5:36:d9:c1:ff:a2:f5:bc:72:69:
                    b1:0e:95:d1:7c:40:65:ac:ae:85:76:3d:22:de:bb:
                    5e:b6:96:8a:40:ef:49:0c:5b:cc:c9:be:eb:14:bd:
                    08:f3:aa:b1:37:61:ea:47:4a:0e:ed:af:d6:40:97:
                    2c:d9:63:90:2b:52:8c:3b:44:e7:9f:64:ee:d9:6b:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:46:20:35:CD:BE:2F:09:C7:13:54:C0:B8:63:BC:DB:5C:30:02:DA
            X509v3 Authority Key Identifier:
                keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:47:3d:b6:9b:63:7c:91:1f:10:5d:dc:87:8f:53:d8:e5:3c:
         80:47:f0:40:ba:59:80:75:5c:90:70:c1:0f:25:6b:0e:f3:6a:
         7c:22:1c:8d:38:61:e5:5f:2a:a1:e7:e9:cb:f6:10:d7:35:5c:
         8e:15:ee:09:b6:10:22:50:fd:0a:e4:2a:0f:c6:06:be:dd:3d:
         a6:e0:5a:8d:5f:23:e9:61:6a:97:57:f0:bc:cd:d1:72:6c:5c:
         ed:45:34:04:63:9b:f8:b9:f1:02:78:ff:f9:8b:ba:32:72:04:
         39:d2:01:61:8f:f7:28:db:7b:ef:3c:a0:a1:3d:18:26:d2:ef:
         e1:cf:90:7c:c3:e4:fa:14:1a:e1:ee:90:aa:75:34:84:23:94:
         2a:c1:a2:52:24:26:c1:51:52:4d:c1:13:18:46:fd:ea:44:76:
         d7:ad:c2:02:90:92:59:ac:7a:48:c2:0d:49:2d:07:8b:63:34:
         08:9b:c5:eb:3d:aa:26:89:29:50:df:b4:1b:62:41:e8:95:f6:
         9b:bc:5e:0e:30:4e:ba:a8:a8:11:0c:f1:49:e9:a9:38:d0:8d:
         fa:b4:51:2f:f2:43:94:92:0e:15:1c:7f:db:b4:8c:07:20:a7:
         2a:28:e1:21:eb:93:e5:6f:4b:46:59:6b:cf:05:a4:be:d2:17:
         4d:d5:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:42:28 2025 by rpki-client