Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
File:                     woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft (raw, json)
Hash identifier:          vRcqRDDkcYHwn7h5d8QH/dZiiJWx86oHV2+nqFA5nYQ=
Subject key identifier:   75:C3:11:AD:79:5B:90:D7:FE:0A:BA:17:FC:E6:E1:C3:EA:49:8E:92
Authority key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Certificate issuer:       /CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Certificate serial:       019845F64686F36ED714EA3F22D9D8A94FAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
Manifest number:          1592
Signing time:             Sat 26 Jul 2025 09:00:24 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:24 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:24 +0000
Files and hashes:         1: cFpop9dizlBgkUyaV36_gGd8lnU.roa (hash: 4REvNTps3BupjiKoFenAilAIXfeTEPHale+uZfisCuc=)
                          2: woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl (hash: 2dAYC9Gye4TvwsMJB0msUzrkvRSz6wws9WS95QAG+oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:46:86:f3:6e:d7:14:ea:3f:22:d9:d8:a9:4f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
        Validity
            Not Before: Jul 26 09:00:24 2025 GMT
            Not After : Jul 27 09:00:24 2025 GMT
        Subject: CN=75c311ad795b90d7fe0aba17fce6e1c3ea498e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:6a:6f:05:bb:8b:74:31:34:c2:fd:20:ab:
                    66:d5:e3:1d:ee:f7:90:12:05:7c:80:3c:51:36:f6:
                    ff:0b:4b:e0:a7:94:b4:bb:05:ea:76:b9:38:e7:59:
                    9a:13:56:52:a2:ad:df:fe:2a:01:fd:3b:02:b4:fa:
                    48:83:93:2c:1f:4b:9f:38:96:b0:42:3a:35:dd:08:
                    e9:89:79:ec:fd:99:8f:db:36:0b:b5:0a:5b:2f:a3:
                    bb:a2:a3:8a:3a:0d:88:be:a8:b6:23:89:b6:ce:d8:
                    64:e2:74:d7:33:52:60:f3:64:fd:84:89:89:ce:31:
                    e8:13:75:9a:a2:cb:0b:5e:1f:ce:a8:18:8d:45:92:
                    be:59:fa:cc:53:a5:c0:72:61:a9:62:82:56:61:42:
                    20:eb:05:52:1d:14:d7:ee:11:ef:03:29:dc:46:e4:
                    4b:8c:88:c5:ed:a2:a1:02:7a:27:60:b5:bf:72:19:
                    04:cd:65:ee:93:d3:22:e9:6e:c5:fb:16:b4:dc:33:
                    58:3e:42:d1:66:82:94:1d:2e:d5:12:ec:16:bf:5e:
                    02:38:f5:bd:7d:41:6d:8a:55:90:db:3e:d4:71:0b:
                    c0:72:01:2b:7d:9c:b0:cb:75:02:c3:11:a5:b0:64:
                    82:9e:cf:f3:1e:7a:bf:a2:d9:85:b1:bd:91:4c:75:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C3:11:AD:79:5B:90:D7:FE:0A:BA:17:FC:E6:E1:C3:EA:49:8E:92
            X509v3 Authority Key Identifier:
                keyid:C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:16:c0:76:bf:d7:44:bf:f6:0b:25:78:da:38:b2:8a:6e:8c:
         d9:fa:dc:a4:06:3c:5c:6e:27:a5:7f:b4:2b:3b:90:d3:93:89:
         73:19:c8:50:49:29:df:e1:2c:0c:17:67:4f:8d:24:97:6e:37:
         33:5b:5f:27:1f:f2:81:86:2d:9d:e6:8a:9b:e4:bc:6e:b0:bc:
         08:d2:cb:4e:b1:25:46:08:31:4e:6c:86:49:7e:39:84:3d:7e:
         28:af:32:50:f4:9f:2e:a3:43:37:d4:08:41:f4:35:35:db:06:
         e6:59:ba:2e:b2:1b:e7:b1:9f:b5:e0:ab:87:cb:c8:1a:a5:fc:
         d4:15:ce:55:eb:69:2c:f3:51:ae:0e:44:e3:a6:8f:7b:95:64:
         44:76:0f:ca:d7:0c:28:44:44:e9:cb:1b:de:2f:8b:b6:a5:30:
         2a:8e:4b:0f:db:c8:be:5a:82:79:0e:e1:27:55:03:39:14:93:
         4e:ca:9f:aa:21:fb:aa:93:90:53:fa:c4:d3:82:53:d3:79:57:
         de:6a:d7:c5:55:57:f2:1f:65:bf:33:ab:6e:f9:cb:cb:b9:19:
         0b:f5:1a:e6:39:86:bf:82:90:aa:b0:56:7d:28:5b:48:de:43:
         52:08:c4:77:7d:6f:b7:58:9a:1c:97:b4:cd:da:8f:b9:e1:e3:
         20:e6:84:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 16:17:16 2025 by rpki-client