Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
File:                     W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft (raw, json)
Hash identifier:          knexwHF4TrRnHY4zCL5e48yCIdrbuQ8vK49WLR7U/Ao=
Subject key identifier:   FB:B4:45:F1:BE:8B:5A:15:2E:EC:7F:65:F1:CE:B5:F5:04:BD:1D:5B
Authority key identifier: 5B:7F:A0:27:D2:ED:B7:9C:76:F4:8B:F1:27:73:CD:8B:22:95:17:F0
Certificate issuer:       /CN=5b7fa027d2edb79c76f48bf12773cd8b229517f0
Certificate serial:       01984A77DE55DDC35791E526B9277CC9E9F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
Manifest number:          0281
Signing time:             Sun 27 Jul 2025 06:00:26 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:26 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:26 +0000
Files and hashes:         1: W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl (hash: Vg6OriSJE10M8ZaywSLgbxJBfmWoHBT7sTT3cqmXDkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:de:55:dd:c3:57:91:e5:26:b9:27:7c:c9:e9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fa027d2edb79c76f48bf12773cd8b229517f0
        Validity
            Not Before: Jul 27 06:00:26 2025 GMT
            Not After : Jul 28 06:00:26 2025 GMT
        Subject: CN=fbb445f1be8b5a152eec7f65f1ceb5f504bd1d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:1c:ce:cb:bb:e6:e3:cc:4f:6c:96:13:69:
                    d4:db:a9:29:6c:77:d6:a5:5a:54:bc:ad:06:95:14:
                    fc:2c:5e:16:00:17:76:d1:91:6c:1c:e7:85:00:19:
                    9a:ec:1d:e4:17:f3:09:4c:12:33:a3:ab:a2:3b:15:
                    0f:8c:95:56:bf:93:8c:64:fc:0e:5f:4e:54:3e:69:
                    db:66:48:23:92:d2:d0:7f:03:7f:74:fa:86:6d:b6:
                    af:95:cd:a7:34:f0:c5:88:a7:20:cf:b3:90:f8:09:
                    97:43:ac:9c:06:4d:b3:ac:ca:ae:a8:21:d4:28:57:
                    e8:99:c0:42:b0:92:a1:ff:2c:39:bb:ff:5f:7f:e8:
                    a7:c9:21:0e:98:f6:f1:e0:7f:36:7f:b0:38:27:c8:
                    9b:b2:9c:f5:50:a0:31:b3:0d:c9:08:04:07:03:01:
                    89:17:3f:c6:bf:c0:6b:d1:14:50:88:c0:37:bb:a5:
                    5e:d3:c2:e1:cb:15:c3:c1:8b:18:f6:9d:dd:a0:26:
                    42:bb:38:c9:bb:19:54:36:3c:d1:13:2c:f1:05:a3:
                    46:49:c4:88:d7:e3:74:61:cb:80:c0:a1:d9:eb:11:
                    21:0b:83:8d:fc:db:c4:d1:0d:96:f7:50:e0:f3:61:
                    2c:2a:de:bb:35:ea:8f:15:7f:9c:08:d6:eb:8d:95:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:45:F1:BE:8B:5A:15:2E:EC:7F:65:F1:CE:B5:F5:04:BD:1D:5B
            X509v3 Authority Key Identifier:
                keyid:5B:7F:A0:27:D2:ED:B7:9C:76:F4:8B:F1:27:73:CD:8B:22:95:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:f7:ec:57:07:b7:7d:4e:5b:ce:6a:28:4e:db:06:d9:0f:
         95:0b:13:21:15:fc:51:ef:9b:ea:fe:cf:4e:0e:23:04:26:70:
         7f:41:39:97:56:2b:e9:60:a0:f2:c5:6a:0b:df:e8:38:19:03:
         77:04:ff:03:c2:50:a3:fb:6a:7e:e3:81:62:97:aa:54:d6:ba:
         f0:4c:42:d4:8d:a8:fe:26:31:ff:5e:af:76:dc:b8:52:7d:83:
         1d:42:2a:ee:71:ff:0d:8c:bf:f1:76:51:48:31:e4:b5:7e:c8:
         30:b0:0c:9e:4c:f0:66:79:9d:9a:a1:01:1f:37:70:41:2f:59:
         df:d8:e9:ea:a4:df:48:5c:0c:31:0e:c4:df:ff:40:78:f8:fc:
         2c:f5:6b:03:05:e1:08:5b:94:59:c2:ee:06:94:a1:54:66:7f:
         d4:d1:69:b2:88:65:6a:08:cb:c8:ba:26:ac:ba:b1:7a:77:76:
         f2:60:fd:66:fb:14:bf:6f:58:26:25:44:56:4b:a6:29:e9:bb:
         31:cd:24:e2:54:ea:74:08:8e:65:66:3c:39:8f:56:b0:2b:2a:
         30:9e:58:5c:03:e1:7a:a5:a0:53:6f:06:49:82:9f:a8:32:f8:
         e2:d1:28:3c:89:02:fc:eb:84:8d:1a:9e:ef:f7:5f:10:18:89:
         03:a7:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:32:32 2025 by rpki-client