Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File:                     WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier:          MBSbNZechjxMTaLihLXR1GnBfiz7Q3EDP10fAY9jhjY=
Subject key identifier:   01:AA:BD:6F:AB:8B:47:44:FD:E5:CB:B4:52:FB:C7:3B:C3:31:81:BD
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer:       /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial:       01984776D8188F8C583F11649DABEB8782B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number:          098A
Signing time:             Sat 26 Jul 2025 16:00:27 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:27 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:27 +0000
Files and hashes:         1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: +hCx/7Fg/PKWGbHJuBl4LfHDrOSQYNCIEJHjRbHloV0=)
                          2: wIsKAJrVffRqz6laEWhWTAS6tTY.roa (hash: V1Qapun8icHJI/Zpv+MiEjbXSsE72DuavneqFQZT08I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:d8:18:8f:8c:58:3f:11:64:9d:ab:eb:87:82:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
        Validity
            Not Before: Jul 26 16:00:27 2025 GMT
            Not After : Jul 27 16:00:27 2025 GMT
        Subject: CN=01aabd6fab8b4744fde5cbb452fbc73bc33181bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:90:bd:11:0a:de:b1:cd:16:23:36:59:87:
                    9e:78:bc:b0:a5:cb:f1:4e:85:9b:48:59:e5:e8:5f:
                    af:96:b5:f9:75:42:d5:e4:1e:d7:23:41:00:3a:da:
                    70:e6:0e:a4:3c:ec:3e:ce:c9:3e:37:93:d1:6d:13:
                    e2:c5:d3:84:eb:d2:8f:e1:e3:89:23:6a:c8:05:7b:
                    83:95:bf:b3:78:22:aa:7a:af:91:82:6a:80:15:91:
                    35:1f:2c:ea:df:7f:04:6c:32:f9:64:3e:9f:1e:4c:
                    44:70:a4:22:44:11:a7:1d:72:23:13:05:91:8a:37:
                    8c:4d:56:6a:74:8a:0d:55:89:bd:99:ff:79:d2:e7:
                    f8:9f:bd:75:0f:d5:c6:30:1d:1c:17:66:30:f9:15:
                    fb:d3:ca:8e:7f:70:15:6b:db:e9:62:c8:d4:86:39:
                    35:d7:b0:51:ef:83:31:90:90:41:22:98:d7:4b:c1:
                    65:08:b1:e1:a9:8b:f2:e3:9b:9d:2b:fd:e6:ab:7d:
                    29:4b:86:01:dd:e8:40:fc:b7:4b:be:6f:b3:96:c0:
                    69:e7:f8:5d:80:5b:6f:20:39:18:e0:11:ea:13:a5:
                    8f:f2:81:52:a5:59:bd:e1:3b:dc:2e:55:ea:f2:5c:
                    e9:6e:e8:4f:69:56:80:46:67:03:ae:3a:75:ac:e3:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AA:BD:6F:AB:8B:47:44:FD:E5:CB:B4:52:FB:C7:3B:C3:31:81:BD
            X509v3 Authority Key Identifier:
                keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:35:8e:ed:ce:de:ff:d8:54:b9:68:4c:42:81:fc:21:36:b1:
         a2:15:e2:8f:c6:f9:55:01:27:d5:2e:0c:b4:a2:9a:f0:22:ac:
         67:c1:ef:71:ae:26:38:2e:48:b6:bc:be:b9:44:8f:80:d9:d8:
         a6:66:9e:4f:1f:f0:40:7b:88:c2:fd:0d:54:17:9f:42:41:94:
         eb:50:e2:99:4a:4d:43:db:45:4c:d4:12:03:30:83:0c:59:45:
         6b:2b:eb:7a:04:4f:7e:ff:d3:48:f2:4b:b2:38:90:86:3e:29:
         60:b7:12:71:57:67:f9:8a:83:1f:27:24:8b:55:4e:15:80:e3:
         9a:eb:2c:8e:24:af:d2:43:71:30:b2:d2:7c:00:17:0f:a4:5c:
         6b:d9:21:8f:b8:b9:f2:e7:a3:fe:58:ff:b8:0b:05:43:51:98:
         e2:ae:ac:d7:c9:3a:27:e1:ce:d4:76:a6:39:a4:11:f6:24:0d:
         07:ed:57:f5:78:64:22:e0:39:15:ac:84:f1:88:78:3c:0b:3a:
         32:6f:e1:71:fe:a0:62:99:23:57:f5:ed:5b:6f:e0:2a:50:ac:
         c0:88:ba:3f:dd:5e:a5:91:99:35:b9:1c:f3:90:c2:38:50:f5:
         a1:fb:52:aa:62:d3:10:f4:e7:ce:66:8d:7a:b4:b9:ca:f9:82:
         0a:93:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:58:55 2025 by rpki-client