Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
File:                     n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json)
Hash identifier:          EBk1I5PZLa5h7dmQ1MA8GBCvKydi+k750Hf5v6QpsTk=
Subject key identifier:   80:F8:20:B6:BE:3C:60:D0:18:7F:12:3A:84:63:B0:1A:C0:B0:DA:81
Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
Certificate issuer:       /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Certificate serial:       01985155FCFFA3D5A92A7DF53056F4349E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
Manifest number:          058D
Signing time:             Mon 28 Jul 2025 14:00:46 +0000
Manifest this update:     Mon 28 Jul 2025 14:00:46 +0000
Manifest next update:     Tue 29 Jul 2025 14:00:46 +0000
Files and hashes:         1: WSYa3_tchQR10uxAsRC4J-pvnlQ.roa (hash: iJOQStqk9Th4Gtiw4MFS+D+76u4fKoXio9RjTudU1og=)
                          2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: 0GPiivjDCtt3y1FscCEZChOwzODFAjmvPTt28ZvIA0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:55:fc:ff:a3:d5:a9:2a:7d:f5:30:56:f4:34:9e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
        Validity
            Not Before: Jul 28 14:00:46 2025 GMT
            Not After : Jul 29 14:00:46 2025 GMT
        Subject: CN=80f820b6be3c60d0187f123a8463b01ac0b0da81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:e3:a0:18:65:d2:ec:4b:ca:47:f7:12:04:
                    a0:44:2e:e7:c2:0e:d3:e5:43:2c:b5:0e:ca:d0:27:
                    6b:a1:fc:18:28:77:6b:7d:a6:5a:7d:40:9f:9c:86:
                    f3:0a:98:97:06:c7:de:ce:c5:7d:d9:ff:cf:0f:de:
                    ad:12:0b:89:d4:93:4a:33:33:f8:14:fd:0c:4b:60:
                    7a:17:11:d1:bf:0d:db:13:e3:ef:61:a6:0b:f4:40:
                    de:e6:7c:5f:c8:67:8d:6c:df:2a:7e:c2:dc:e9:ae:
                    3b:24:b8:e7:83:36:93:64:75:ae:fd:72:88:46:94:
                    a8:bb:1c:ba:fb:26:1f:0b:42:41:c8:98:82:8e:42:
                    98:b7:5f:53:4d:0c:da:55:4c:88:0d:e7:7d:47:db:
                    97:15:bb:84:3a:1c:79:be:87:38:f8:10:ad:a7:7a:
                    f6:69:b9:69:ff:4e:c8:eb:81:f0:91:ed:21:0c:ac:
                    c3:4b:42:24:52:76:33:c6:93:b1:1b:c2:f9:a3:f9:
                    02:a3:a9:dc:ee:96:f0:d6:a3:c1:ef:45:52:0b:e4:
                    32:15:93:bb:26:a6:df:1e:c5:1e:86:6b:f3:8a:d5:
                    02:55:64:45:3d:5c:8c:61:07:65:32:ca:3d:22:59:
                    76:b1:a6:f7:9e:8d:b6:23:ff:7b:e1:0b:99:a1:5a:
                    45:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F8:20:B6:BE:3C:60:D0:18:7F:12:3A:84:63:B0:1A:C0:B0:DA:81
            X509v3 Authority Key Identifier:
                keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ca:79:88:0d:3f:54:0d:d7:70:5a:c2:bf:b8:be:b2:cf:92:
         d0:cd:5b:6d:35:7f:d8:06:57:2a:7b:ee:e7:c1:7f:f8:89:52:
         41:ae:16:fd:1e:55:9a:88:de:85:48:4c:c7:58:fe:81:5a:3e:
         68:32:e2:09:81:59:6e:93:35:ad:6e:af:90:c8:8f:da:e4:c3:
         17:6b:84:91:18:e2:dd:35:ce:07:81:d0:64:d3:8b:5c:de:94:
         7e:fd:4a:48:5e:de:d7:cb:9e:ae:59:de:43:c3:87:c1:36:d8:
         8d:d5:46:02:87:4e:82:93:77:64:d6:ca:ad:d0:70:93:f5:06:
         dd:ca:20:18:0e:ee:2c:a9:73:9c:52:76:83:e8:dc:a6:59:5b:
         3f:78:04:fb:81:cc:27:5c:e9:8f:8f:08:d8:13:88:ec:bf:a5:
         96:a1:57:0b:c3:bd:8f:cc:12:0b:53:01:ca:70:73:28:bf:e3:
         5b:99:9f:50:65:9b:d3:69:46:03:73:29:7c:c3:29:71:63:2e:
         86:bf:65:d7:e0:5b:d7:ce:6e:e4:f8:9e:36:2f:bf:82:86:f5:
         ff:64:b6:1c:0e:b8:5f:22:8f:66:0a:b4:ef:47:8a:a0:88:de:
         29:ac:c0:e6:6f:1c:a7:21:d0:74:77:d9:bc:bb:37:de:0c:11:
         e7:e9:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:23:07 2025 by rpki-client