Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
File:                     r00WwzVAe_DQpRzvm5wcUxAoD0g.mft (raw, json)
Hash identifier:          /L2zuPMMRSfBQISaTuDYpRDO+QQffLeM4LCCfRJ+YNY=
Subject key identifier:   A2:F2:69:EE:A1:20:09:41:95:F7:21:78:FD:30:7D:99:06:F1:F6:F2
Authority key identifier: AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48
Certificate issuer:       /CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
Certificate serial:       01985268986F055FDD0C22C3B386449F280A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
Manifest number:          1606
Signing time:             Mon 28 Jul 2025 19:00:43 +0000
Manifest this update:     Mon 28 Jul 2025 19:00:43 +0000
Manifest next update:     Tue 29 Jul 2025 19:00:43 +0000
Files and hashes:         1: VI7MbqfUntVnN_kMd5I5Qw5bl-4.roa (hash: yObUZYg1Kq2iUCPpFKIeS8ZVs5ZMohWqBvzb45a6JFM=)
                          2: r00WwzVAe_DQpRzvm5wcUxAoD0g.crl (hash: 9wjkUY1EsS3wdfc3Kg6w7NhQReua2nDlt8z50fVUdyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:68:98:6f:05:5f:dd:0c:22:c3:b3:86:44:9f:28:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4d16c335407bf0d0a51cef9b9c1c5310280f48
        Validity
            Not Before: Jul 28 19:00:43 2025 GMT
            Not After : Jul 29 19:00:43 2025 GMT
        Subject: CN=a2f269eea120094195f72178fd307d9906f1f6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:e9:d5:7c:3c:d0:58:2d:c8:81:ac:fd:47:
                    fc:fa:ec:c6:82:f7:13:30:ff:fe:4b:e9:53:69:71:
                    dd:45:5e:a9:1a:02:7d:8b:3b:61:bb:90:5d:f9:1a:
                    6d:45:f3:b6:d6:c1:e3:8f:2e:b1:52:8e:9b:65:56:
                    ed:ef:c4:75:9f:85:90:0b:ea:10:58:1f:5c:81:95:
                    03:ff:17:1a:32:1b:25:d3:b4:8f:a0:ca:5a:b6:9d:
                    a1:94:65:69:ed:15:e1:24:49:5c:38:a2:27:e9:bd:
                    04:94:cd:4e:5f:45:b8:a1:a6:79:b3:89:4d:4f:91:
                    5a:0c:c9:0c:63:bf:30:ac:1b:dd:26:70:f1:4d:fc:
                    46:50:c7:78:d2:86:f7:92:a7:08:73:dc:9c:b9:82:
                    2e:44:53:c0:a3:d9:d1:d3:4e:c9:42:93:99:a0:a8:
                    78:9c:e1:2b:e1:d8:bf:af:e5:09:e2:0c:e7:c1:c0:
                    f6:3a:70:f6:ab:c8:77:34:e6:e5:af:bc:91:74:01:
                    bb:f3:6d:bf:01:f0:18:d0:18:13:61:c0:b8:bd:b7:
                    29:73:a5:04:d5:c4:d4:c2:55:55:e7:39:29:1a:12:
                    31:25:74:c1:e7:35:0d:18:12:a4:88:03:64:4b:74:
                    30:34:6e:a2:da:10:72:10:f0:3f:df:51:4f:93:3e:
                    5a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:69:EE:A1:20:09:41:95:F7:21:78:FD:30:7D:99:06:F1:F6:F2
            X509v3 Authority Key Identifier:
                keyid:AF:4D:16:C3:35:40:7B:F0:D0:A5:1C:EF:9B:9C:1C:53:10:28:0F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r00WwzVAe_DQpRzvm5wcUxAoD0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dbc0e6-2555-4bf3-9ab1-9915990bcb59/1/r00WwzVAe_DQpRzvm5wcUxAoD0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c6:ac:50:5f:e0:d0:82:53:ee:06:67:ac:42:f6:5b:9c:ad:
         22:6d:4d:4e:5d:66:c2:d0:c8:f6:fa:61:28:b1:11:06:e7:a8:
         55:1c:05:02:5e:ac:87:bd:ec:d0:8e:d1:45:f8:ec:fc:95:35:
         cf:c9:59:1c:85:ad:28:bf:00:5f:7b:61:a6:22:eb:ee:83:02:
         8f:ae:8e:23:27:eb:24:5f:37:43:02:aa:33:73:a9:22:fc:fa:
         98:53:28:54:51:14:a9:7a:ca:78:a9:b8:50:94:e1:af:9f:d4:
         6b:41:a3:9a:89:21:46:47:78:6a:d4:65:51:4b:2d:aa:41:7b:
         3d:b3:9f:e2:a1:9f:b4:2d:7c:06:52:7f:c5:30:34:c4:78:03:
         26:b8:d9:43:6a:6b:ce:ae:00:f2:69:fe:04:37:96:8f:42:a3:
         f0:a6:f3:2b:41:99:9c:09:46:d2:39:f9:ef:d7:07:6c:06:f8:
         69:e3:f2:54:50:f2:02:17:01:42:a5:6a:87:97:7b:40:17:43:
         bc:c9:3f:b3:da:8f:e0:a4:46:58:d3:7e:f2:87:69:b8:33:fb:
         62:58:d5:1e:f7:54:b6:84:2d:7b:8d:24:5e:df:17:1d:98:b4:
         f2:6e:71:fc:e7:7a:21:30:04:62:99:a4:e5:81:28:15:f3:db:
         26:93:ba:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:11:33 2025 by rpki-client