Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File:                     WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier:          EhWXRBh1VnXsHlXEVOZCr9CwflcZVl6GTVAhGFS6p5U=
Subject key identifier:   0E:A2:08:15:A1:70:57:38:6E:A3:25:03:C2:85:18:39:B1:CA:22:C4
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer:       /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial:       019858D9D9CCB00065282961B0B56FD1FAC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number:          091F
Signing time:             Wed 30 Jul 2025 01:02:08 +0000
Manifest this update:     Wed 30 Jul 2025 01:02:08 +0000
Manifest next update:     Thu 31 Jul 2025 01:02:08 +0000
Files and hashes:         1: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (hash: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=)
                          2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: qKTA6ar9XvOn+hWvYtusfE1rxcZCz0vyxvw1KWy0hM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:58:d9:d9:cc:b0:00:65:28:29:61:b0:b5:6f:d1:fa:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
        Validity
            Not Before: Jul 30 01:02:08 2025 GMT
            Not After : Jul 31 01:02:08 2025 GMT
        Subject: CN=0ea20815a17057386ea32503c2851839b1ca22c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:bb:a0:67:c3:c5:40:6f:6e:cb:79:6b:cf:
                    1d:3d:2a:7a:73:86:b4:91:d2:9f:b0:35:79:58:25:
                    9e:a8:62:b3:c6:5e:53:db:28:61:c7:dd:65:75:4c:
                    c1:4e:5d:4b:e3:e6:13:3a:51:5e:77:70:e2:03:85:
                    76:04:47:d1:ce:98:a9:51:a5:2e:a9:ec:e1:ef:00:
                    1b:fa:ed:ea:90:85:83:38:43:29:61:a4:c2:57:c3:
                    db:41:50:d5:9e:34:59:fe:a3:0f:a9:2c:a2:80:ba:
                    09:82:ff:41:c1:be:83:02:f0:67:75:ec:c4:56:9f:
                    04:c2:35:e4:2e:82:30:0b:00:27:93:f7:0a:36:77:
                    48:ea:73:fe:25:46:a7:bb:53:2f:5d:93:d3:dc:e7:
                    9b:74:e6:be:85:1e:47:29:8a:11:1b:aa:85:3b:11:
                    fe:57:7f:0c:92:18:31:62:d8:eb:d0:6d:a0:e7:cf:
                    7c:54:71:4d:01:d7:eb:d4:7f:6d:57:79:b8:d2:b1:
                    e1:f2:c7:62:f8:98:08:2d:aa:a5:74:02:0a:0d:25:
                    19:9c:6f:7f:58:25:c2:55:ac:48:1e:47:f5:a7:f2:
                    3b:79:3c:50:c1:df:24:3c:08:3e:6f:96:12:7c:26:
                    38:32:6a:9f:01:f0:d8:63:d5:d8:ec:48:1f:91:9a:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A2:08:15:A1:70:57:38:6E:A3:25:03:C2:85:18:39:B1:CA:22:C4
            X509v3 Authority Key Identifier:
                keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7a:e7:85:c8:63:30:4b:76:5f:40:32:3d:7a:ac:7e:76:50:
         87:65:bf:26:e1:2c:d2:d6:52:a4:33:f8:59:80:70:4e:85:f7:
         7c:f5:de:8b:35:e1:f4:dd:a0:97:d8:f9:85:76:c3:9e:95:ce:
         67:5a:cd:c8:46:69:cd:0a:e4:5c:f1:e9:a6:17:bd:f8:98:14:
         27:a3:38:79:62:9c:1d:92:7c:c8:d0:25:ba:e1:8b:11:fb:d4:
         92:af:31:66:d8:0b:b4:ff:9a:af:62:1b:19:bb:51:d4:be:6c:
         08:c8:ad:2b:73:15:fa:01:a9:31:14:a6:22:63:60:50:18:5f:
         ff:25:2f:7b:44:49:33:3c:10:6b:7b:0d:28:b5:fa:4a:8d:cc:
         6a:87:c5:e0:90:02:61:cb:e5:a2:2c:0e:06:94:54:00:e7:da:
         93:5a:f4:0f:1d:2a:0f:8f:97:65:87:c7:59:fe:a4:74:6d:4a:
         9e:a9:e9:8c:80:23:a4:f7:bc:d3:17:9c:1c:86:a6:7e:05:66:
         fb:83:fe:56:cc:cc:b0:e5:b6:5d:00:30:d0:fd:6f:95:4b:35:
         f0:4e:7d:32:ce:87:58:ce:a0:68:3d:33:8d:33:48:09:fb:5b:
         b8:a0:6b:7a:1b:85:6d:a7:46:f5:4e:59:a6:c2:67:7f:54:04:
         b4:46:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:22:13 2025 by rpki-client