Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          x3zvoy7RnL46lLERHKsjw5ODKVo+IMDorqBHIw2ZeMY=
Subject key identifier:   B7:0B:20:9E:2F:4B:A7:2B:C5:D1:9A:16:B1:2E:3A:08:98:3D:F7:45
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       019848C0E2ABD823206DA3BF4569B92604ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          09E9
Signing time:             Sat 26 Jul 2025 22:00:57 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:57 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:57 +0000
Files and hashes:         1: DTuRKBc5DWAml25DkyA602e9E2c.roa (hash: 5dE22gWyeJTuF6kqg31h2vC+gEZF7bnxpO0rszd82sI=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: n+zX0IOWTMEj+4gBZUCHOnM2Pl3H2YdxfZO95/XIMcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:e2:ab:d8:23:20:6d:a3:bf:45:69:b9:26:04:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: Jul 26 22:00:57 2025 GMT
            Not After : Jul 27 22:00:57 2025 GMT
        Subject: CN=b70b209e2f4ba72bc5d19a16b12e3a08983df745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:f8:e4:3c:89:c6:48:b2:d0:48:f8:eb:48:
                    78:96:4b:14:d9:ba:f5:4a:c9:a8:52:9d:f9:37:e9:
                    7e:5d:20:eb:49:70:49:47:38:ee:dc:56:7f:9f:26:
                    ac:18:83:63:f4:74:23:87:ba:b8:a4:4c:6c:00:74:
                    24:e8:07:cb:85:a7:c2:19:96:13:8e:c6:e5:12:aa:
                    31:eb:26:62:24:81:64:86:62:a3:71:81:4c:89:4b:
                    5d:fd:a7:5c:d4:26:21:a8:aa:f9:a4:ed:97:4d:5a:
                    44:54:3b:2d:cd:df:94:62:f1:4e:6e:23:c5:97:52:
                    83:d3:42:d4:63:82:56:a4:11:f6:01:a4:52:87:6b:
                    64:ee:03:5e:de:8e:29:a5:f4:ae:15:ef:7f:99:8f:
                    45:c8:9b:c8:58:05:03:21:6d:e7:2c:62:03:c7:2c:
                    cc:70:ba:bf:bc:09:9e:20:4c:f6:df:76:61:1a:b8:
                    2c:d3:b5:28:40:d4:b3:2e:08:67:cf:ac:58:19:14:
                    98:ad:a0:61:4a:dc:0e:a2:fe:13:02:bd:9e:9b:fa:
                    d7:c0:a6:6f:3d:af:f1:cb:84:cd:a2:d7:c2:0d:89:
                    78:40:0b:6f:dd:fc:c3:24:ee:0f:e8:66:b0:fe:61:
                    b0:24:9f:2d:14:9d:4d:fb:90:1b:4b:00:9f:67:7f:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0B:20:9E:2F:4B:A7:2B:C5:D1:9A:16:B1:2E:3A:08:98:3D:F7:45
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:36:80:56:03:94:c1:cd:a4:ef:04:48:e4:b3:aa:69:09:
         75:76:61:b3:7e:08:2c:dc:1b:66:bf:81:d9:be:2c:45:36:60:
         75:bd:5f:f8:9c:49:4d:30:bb:0c:f2:b7:8a:c6:0b:67:a3:9b:
         89:3e:9e:f4:78:90:5e:20:17:1e:40:f9:12:c6:25:07:35:61:
         db:07:27:ed:7e:0e:22:c7:ca:2e:c8:41:df:ee:10:66:a9:67:
         5c:79:a1:1e:7c:de:26:c7:49:99:41:a5:4b:a9:f4:d8:64:de:
         d7:4a:1c:6b:c3:17:a0:6f:7b:42:db:71:72:78:a0:b5:13:f3:
         3c:06:6c:d3:af:1e:05:a6:61:43:7f:1e:d3:b7:da:34:85:4d:
         53:85:7c:33:0f:ee:79:dc:07:0e:60:40:9f:f3:7a:90:56:01:
         7c:78:30:2c:9c:8c:db:3d:77:8c:d9:e9:66:60:a2:74:69:f0:
         d3:f9:c1:50:3f:2c:52:88:4b:b4:9f:59:2d:e7:d6:81:34:79:
         35:99:3d:86:3f:31:36:14:be:05:3b:10:df:82:f8:63:8c:d8:
         71:be:e7:11:72:7e:a0:e9:6f:01:12:2e:df:58:b1:1a:17:0c:
         d9:df:19:71:7a:25:96:93:5d:71:b6:52:58:0b:a2:d9:67:7e:
         bb:28:43:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:29:44 2025 by rpki-client