Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
File:                     w-cV2UkPUh42oFb5mb-1bg8h_IY.mft (raw, json)
Hash identifier:          ta+ZpS5qXf+pcyRSzSvC9UtU+xUoBumvlhE+snKjP4w=
Subject key identifier:   C3:92:E0:EA:72:57:6B:9B:35:51:06:30:B3:3A:DC:11:65:EF:07:47
Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
Certificate issuer:       /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Certificate serial:       019872CF74C247A1704EAB3BF93F1FE965EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 02:00:55 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:55 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:55 +0000
Files and hashes:         1: 93cxze7c4JAF56bmAgg1bcYIt74.roa (hash: iEbAMOM9WFYV3hM+y+EZ0P2K3mOE4Q2PoJ4nGQhO9MQ=)
                          2: w-cV2UkPUh42oFb5mb-1bg8h_IY.crl (hash: 15m2VkWv2WBbKtgkV1sLarYmEjHnjveI4Hw/ftSX3zM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:74:c2:47:a1:70:4e:ab:3b:f9:3f:1f:e9:65:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
        Validity
            Not Before: Aug  4 02:00:55 2025 GMT
            Not After : Aug  5 02:00:55 2025 GMT
        Subject: CN=c392e0ea72576b9b35510630b33adc1165ef0747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:10:b5:6a:29:e2:1c:7a:f9:ec:44:5b:13:
                    dd:98:83:05:6d:ad:20:54:0f:4e:9b:3f:98:05:3c:
                    fd:ca:37:9b:45:97:d8:20:2f:25:85:f7:f1:72:7b:
                    11:35:db:2d:bc:5d:89:3c:05:e6:b0:25:f9:b7:28:
                    bf:08:f1:73:aa:2c:74:57:16:c5:13:9f:9f:2d:02:
                    e0:46:6a:8b:e5:62:83:4c:d3:36:e8:b9:1a:7e:a4:
                    d0:97:6e:37:b8:f4:b0:a4:de:58:78:0b:ad:c4:10:
                    d1:7b:96:43:d6:70:b3:eb:1d:74:84:f6:99:27:3c:
                    51:55:9e:83:58:9f:e2:54:33:05:58:4f:36:46:6b:
                    72:12:a2:f4:cd:15:1c:17:df:d5:94:72:1f:1e:41:
                    24:f6:f9:85:dc:a8:01:51:97:b7:48:b2:86:65:45:
                    e1:62:65:65:54:e0:c2:2e:a1:fa:c4:1f:71:f1:00:
                    0b:17:9a:8f:de:e7:ec:5f:30:88:5c:f6:75:18:7a:
                    0e:ab:27:c5:77:4b:f8:66:4b:c7:bc:41:3d:15:d3:
                    77:63:cf:f9:64:ff:fd:a2:d5:cb:ad:47:5f:f9:47:
                    4f:81:67:dc:c0:71:0b:5f:42:77:99:28:3a:1d:45:
                    35:88:57:ea:8c:64:ca:b8:6b:e2:b5:45:e5:8e:35:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:92:E0:EA:72:57:6B:9B:35:51:06:30:B3:3A:DC:11:65:EF:07:47
            X509v3 Authority Key Identifier:
                keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2f:30:84:01:aa:da:cd:5a:a7:c9:6f:ed:e8:56:8c:e2:7c:
         c5:49:6e:fb:3d:e5:88:ab:7b:48:45:60:40:c5:f5:aa:e5:44:
         58:ee:fd:b5:84:ed:00:5e:a4:9b:14:bb:29:a3:3b:7c:24:3d:
         fd:02:8f:d2:25:00:e1:95:1d:46:0a:9a:77:09:8e:ed:09:f6:
         c6:7f:53:dd:b2:30:06:1a:1f:2b:11:fa:47:82:ed:09:6f:c6:
         12:9b:ee:05:11:ec:d9:51:a0:1e:d3:63:5b:05:8a:c1:b3:db:
         65:d8:ec:56:c1:70:38:bd:ef:27:3b:4b:5b:90:ca:1f:dc:32:
         38:31:64:9b:77:8e:c1:55:16:13:09:bb:85:99:03:8f:72:c8:
         89:04:db:99:31:2f:f2:a2:7e:e5:93:72:f4:08:f7:51:51:c7:
         2b:56:a8:c9:49:b2:bc:cc:0b:a0:24:2a:42:83:cd:d7:4a:d9:
         73:31:03:38:9a:44:05:3d:60:18:66:d4:22:fa:09:d3:c6:0f:
         6e:89:ba:96:f0:33:13:e1:fa:19:28:aa:86:a6:92:22:41:08:
         78:bb:a8:f7:81:c9:91:8b:1d:77:72:2a:b4:de:ea:97:c4:8c:
         dd:e1:1d:40:55:20:00:d7:a8:90:04:64:4a:2f:96:47:fd:32:
         32:18:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:37 2025 by rpki-client