Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File:                     wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier:          h99e09rNI0g21pVYNMDUkqseQ2pEMxld1rIuvDRSEs0=
Subject key identifier:   F1:FB:FA:E8:84:0A:96:4C:B4:69:4C:2E:41:53:0D:FE:32:19:B3:6D
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer:       /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial:       0198534429CBCE204F362862AE22EDEF7B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number:          1609
Signing time:             Mon 28 Jul 2025 23:00:32 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:32 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:32 +0000
Files and hashes:         1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=)
                          2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: FLscSqR701abgLFW553TVbjVomYFdnHy6jOf/XwDFIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:29:cb:ce:20:4f:36:28:62:ae:22:ed:ef:7b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
        Validity
            Not Before: Jul 28 23:00:32 2025 GMT
            Not After : Jul 29 23:00:32 2025 GMT
        Subject: CN=f1fbfae8840a964cb4694c2e41530dfe3219b36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:1b:00:ee:8b:ed:8d:3b:9c:b0:38:7e:4b:32:
                    c6:22:1e:17:19:28:07:15:ca:d3:15:a8:a5:9f:8c:
                    7f:83:e4:27:07:7e:f7:67:f3:3c:9e:e5:34:5d:d3:
                    96:d7:da:68:45:14:c3:11:f1:4a:cb:08:69:a1:0d:
                    23:f8:26:8e:7c:33:d0:01:b4:80:fb:f1:18:7e:d5:
                    a0:a8:4e:4d:29:1d:7c:5c:3d:85:58:a8:6b:e5:fc:
                    03:8a:c4:c6:29:c5:97:25:a4:b4:3c:5c:14:dd:53:
                    94:c8:a3:df:73:bc:7a:8d:66:99:63:c3:e3:43:1c:
                    3a:68:b9:ef:16:bf:89:c6:b3:ba:47:48:92:0f:65:
                    27:4c:17:67:7f:a9:83:b5:d2:6c:96:c2:7b:88:40:
                    7d:71:5f:7d:6a:b2:65:b7:77:4f:37:24:dd:b5:1c:
                    52:d6:a2:40:96:d5:c6:cf:57:e1:75:f1:c1:10:6d:
                    04:83:36:ec:b6:99:ce:e9:26:5a:41:38:ee:62:14:
                    98:57:68:79:29:c1:7a:85:19:38:f2:ed:d6:31:21:
                    bd:34:69:cc:a4:b7:a3:d1:29:58:dd:80:d3:15:4b:
                    19:fb:ba:84:09:79:9e:fa:b5:62:54:0d:19:1d:97:
                    fd:5b:5f:9b:80:73:a9:87:92:05:28:33:ac:5e:08:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:FA:E8:84:0A:96:4C:B4:69:4C:2E:41:53:0D:FE:32:19:B3:6D
            X509v3 Authority Key Identifier:
                keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:25:42:18:0f:51:4f:9b:8d:bd:d6:a3:a8:18:da:3e:cc:
         43:b2:d3:59:ef:12:f8:01:8f:a0:98:8d:c9:f6:3c:1d:b8:ad:
         e6:22:6b:5d:3a:8c:2c:5a:26:28:3e:0f:b6:03:ad:13:6c:df:
         7b:1f:40:e0:a8:21:83:36:eb:d6:14:c3:79:f6:78:77:27:73:
         71:60:21:bc:1d:c4:d3:2d:0f:10:c7:8f:41:8a:2b:51:e2:2a:
         97:9c:26:6f:7c:01:fc:ae:56:1c:8c:23:7f:2c:eb:df:0f:cc:
         6a:ee:ee:ca:8e:a1:f3:4a:a6:6c:94:81:88:67:b1:89:86:f7:
         3d:86:39:32:d9:21:8a:a4:28:2e:4b:e2:4c:57:b3:63:40:a0:
         f8:63:23:4e:3a:47:db:46:ad:c4:f8:14:ec:81:55:a3:0d:ac:
         14:02:1f:7d:2c:13:a9:2b:b1:1e:72:61:a0:4d:e8:9d:e4:fc:
         6b:2b:06:83:39:3b:66:ca:f3:e8:a6:5d:7c:56:25:49:da:20:
         43:28:c3:70:4f:b6:e3:0c:92:2b:54:51:92:ee:d3:19:ef:e3:
         9d:01:b3:c6:0b:69:64:ee:b5:1d:58:be:e3:27:91:77:15:d3:
         d7:62:ca:e8:80:da:d5:94:f5:29:0b:fa:67:83:05:a4:40:45:
         8b:40:69:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:21 2025 by rpki-client