Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          24mrBw9PX/vAv9TCzS+4NsTX1ZBcnqWi0vkefkH4fwI=
Subject key identifier:   37:3A:D2:65:08:0E:9C:30:C3:D0:8F:74:A6:47:26:97:C7:A1:EE:9C
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       01984A77E6F93DF50EC85C5DE8548A303836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 06:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:28 +0000
Files and hashes:         1: QHN1mo-chw8woBmyHxpHaobOHVY.roa (hash: xauKLlFs3GtWKAmak4uwPaBujz4eKBRABiwipmCaZzM=)
                          2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: fSo/PE38Xp+awOSWBuE+GEQHzezeQB1rJMr4+EXIJUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:e6:f9:3d:f5:0e:c8:5c:5d:e8:54:8a:30:38:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: Jul 27 06:00:28 2025 GMT
            Not After : Jul 28 06:00:28 2025 GMT
        Subject: CN=373ad265080e9c30c3d08f74a6472697c7a1ee9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:55:4c:c4:4a:b8:ee:05:63:28:28:c4:84:
                    9e:5f:79:55:96:81:81:78:ca:62:8c:d3:8d:32:24:
                    a1:1e:35:a1:3d:e1:0c:5d:17:d5:04:a9:bc:cb:e9:
                    06:fd:83:78:14:a8:50:c0:17:3b:c1:01:f7:7d:fe:
                    be:77:d6:3f:e4:db:2e:d2:02:7c:36:6e:8e:f7:c3:
                    a3:6f:73:dd:a8:54:80:7b:b7:f1:4e:97:95:3a:20:
                    d1:00:a4:03:23:9d:6c:2f:eb:ae:c2:9c:e6:53:28:
                    90:07:98:99:1e:ba:0b:70:a8:0f:df:fe:ec:c1:95:
                    0d:21:84:18:a1:c6:39:8c:f0:6c:93:6a:dc:5f:8d:
                    c7:f0:60:5c:b4:05:f2:0e:e5:43:02:da:13:66:3f:
                    b1:ed:43:25:de:49:10:75:67:38:8b:00:a1:32:f5:
                    90:46:f1:2a:97:b1:76:0d:88:ad:db:7e:9b:05:22:
                    ce:70:9c:84:18:96:41:2c:e6:3d:47:77:24:b3:31:
                    75:95:f2:b4:6b:a0:dd:e9:b4:7e:d3:14:29:5f:43:
                    e5:2a:69:1c:1f:fb:f7:7a:58:5f:52:5a:ca:3a:ab:
                    81:55:56:f1:7d:b5:6d:c7:b2:1f:3d:e3:5d:80:e7:
                    c0:25:a9:c2:7a:4e:2a:40:e1:83:65:31:d9:15:4f:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3A:D2:65:08:0E:9C:30:C3:D0:8F:74:A6:47:26:97:C7:A1:EE:9C
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4e:22:b2:38:84:9e:88:db:5c:96:e4:c3:91:1a:0e:5c:af:
         8f:d3:96:38:11:26:cf:18:c3:b5:0d:56:53:31:7a:26:5b:71:
         cc:2d:91:8f:68:85:2a:2a:e3:50:94:82:a6:82:00:d2:7d:d7:
         48:10:bf:0d:bd:16:48:46:d7:f1:94:af:73:e3:ef:2e:2e:3d:
         c5:d8:b5:e3:64:b7:48:bb:a4:37:65:b7:3a:f5:a2:63:14:26:
         73:15:28:98:27:5b:4d:9c:17:bc:1d:b1:cf:ce:20:c7:02:d8:
         88:b7:32:a5:55:cc:04:cb:e0:44:85:6a:ef:80:25:69:e5:38:
         30:cd:2f:84:69:5b:99:87:59:7b:8f:25:d9:55:83:71:0a:f3:
         0b:45:bc:18:3b:67:b4:7b:8e:52:4a:93:f2:58:1e:3f:0e:98:
         4a:79:b4:ab:be:94:5b:ea:fd:a9:cf:21:fe:b9:8a:c7:33:12:
         50:08:ba:20:87:96:69:aa:18:1f:f0:47:3d:51:8a:a5:c5:24:
         ab:0d:da:2f:12:e7:39:8c:48:a0:01:b2:ea:e0:27:6e:a8:de:
         8a:71:fe:82:ab:b2:89:f4:cd:29:7c:d4:cf:a6:15:29:30:46:
         ae:9c:14:d2:c2:78:47:57:d8:37:ff:a6:85:e0:ab:11:79:ca:
         9b:1c:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:17 2025 by rpki-client