Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File:                     wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier:          eSSCNNL8JpvtowwDFvtcsyxezDslQm9HqyM85FO48Xw=
Subject key identifier:   CD:ED:EE:24:58:6B:FF:3B:BD:D2:2A:72:71:6E:49:AE:24:7F:9F:8E
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer:       /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial:       019849660460DCD61E4E704A576C1D2470FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number:          1592
Signing time:             Sun 27 Jul 2025 01:01:18 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:18 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:18 +0000
Files and hashes:         1: NO4AW5Gi5epvfnutXf6m_pLoKDw.roa (hash: 1o2hUp8Qay3eqTXCqBb3VcdpmxjfDTdYSgYdj2A3ZP8=)
                          2: hsaReoXY2mR3_oCjpG4j-yPGtgE.roa (hash: cnraCmQfKTDWUgiiK98Z/023EXxjG/JmIpzpFMXqbwQ=)
                          3: nChyDb158g4ETV6S1h4UKmIWYw8.roa (hash: nll+aElSurSjLSWtf0Qc8rCb0mOo9oC+4mUSWL5RZno=)
                          4: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: PTp72jMO0pISsx7JaZCFbVcEyVs+QU4oxNA28W+duMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:04:60:dc:d6:1e:4e:70:4a:57:6c:1d:24:70:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
        Validity
            Not Before: Jul 27 01:01:18 2025 GMT
            Not After : Jul 28 01:01:18 2025 GMT
        Subject: CN=cdedee24586bff3bbdd22a72716e49ae247f9f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:e1:c9:6f:ba:cf:fc:5d:c5:51:14:6f:ce:
                    18:f5:e7:6d:45:5b:c9:a4:cd:dc:78:fe:7f:db:dc:
                    b1:5c:76:84:75:25:b8:33:59:b3:db:8a:46:39:77:
                    51:ca:eb:38:f6:4f:39:d1:6d:92:9c:c9:8a:2f:95:
                    f5:63:39:b3:d8:84:97:2d:95:1b:04:c0:07:10:da:
                    d5:e2:e2:b5:7e:d8:ac:c9:6e:18:22:ad:91:5e:b5:
                    2e:a0:65:e8:01:e7:15:2f:8f:fd:44:82:53:ff:2f:
                    ae:4d:ac:87:a5:99:67:88:eb:96:df:b5:4c:cb:96:
                    9d:20:4b:87:17:cf:f2:d6:5a:68:a3:c3:9e:2d:2e:
                    36:be:1d:ab:0e:f9:5a:c3:b2:4d:9e:02:3a:95:2e:
                    06:1d:cb:71:7f:3f:69:66:5d:3d:5a:46:6b:2c:ee:
                    0a:b6:79:22:34:9e:07:ba:ef:03:33:6b:2c:55:94:
                    6a:e6:8f:fc:2e:35:19:51:cc:ed:67:fe:ba:74:a6:
                    38:9a:ee:20:f3:4d:a5:b8:53:ae:d6:55:a8:23:3d:
                    96:0d:f3:57:52:d1:41:d3:33:72:64:b7:30:f5:77:
                    af:dd:cd:72:54:a1:18:64:cf:e6:74:19:1e:e3:f4:
                    0b:0a:39:14:ae:3a:db:da:a9:58:34:e2:20:0a:b7:
                    85:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:EE:24:58:6B:FF:3B:BD:D2:2A:72:71:6E:49:AE:24:7F:9F:8E
            X509v3 Authority Key Identifier:
                keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:a2:3a:71:f6:59:2d:b5:32:6c:08:12:27:e8:fc:e3:d0:
         3b:d3:53:e0:4d:e4:e8:de:75:2f:2e:79:dd:e5:ee:52:ad:cb:
         e5:70:35:d3:13:74:8b:3a:56:a7:da:e5:fe:a3:65:fa:77:e7:
         1f:d5:46:20:79:5e:2c:33:ac:94:e3:97:f0:98:dd:78:2d:2b:
         eb:a9:88:93:44:ac:bb:23:7e:97:94:1b:a1:0c:1d:b7:95:00:
         a3:04:91:eb:34:50:e9:a9:64:18:18:08:f9:df:50:7e:9b:52:
         07:8c:d5:29:ec:55:b8:40:13:60:50:34:db:6d:98:3e:b3:ae:
         94:52:97:d0:4c:54:cd:fd:16:c7:b5:c6:94:82:54:fc:3d:10:
         7e:26:a9:97:51:22:ba:df:66:cf:8c:4e:5b:e5:62:6c:92:e8:
         e0:a2:45:58:87:78:89:88:99:26:90:12:fb:75:ea:07:a5:16:
         6d:29:90:7a:08:e0:06:fb:64:df:fc:d1:e3:94:3e:ac:84:a8:
         e2:11:0e:21:5b:2d:62:ed:7c:57:3a:73:9e:56:fc:94:b4:cb:
         12:1d:f2:d1:db:94:67:e0:a9:65:a1:c2:80:fa:a0:6d:0a:d1:
         37:d0:f9:7f:d7:1b:88:43:32:a0:1a:e5:7f:af:93:ca:a5:6f:
         21:c8:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:06:18 2025 by rpki-client