Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File:                     1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier:          1v9LNxHFPsgCdCcoyrLqL0pWedGAh2xRIAehw8u5x3I=
Subject key identifier:   4C:9A:63:F8:35:EF:D8:78:2F:5B:B9:D7:84:7E:E8:1B:B4:4C:38:A0
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       01983B3C200D023438C9116FE1F64453E711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number:          0C04
Signing time:             Thu 24 Jul 2025 07:00:52 +0000
Manifest this update:     Thu 24 Jul 2025 07:00:52 +0000
Manifest next update:     Fri 25 Jul 2025 07:00:52 +0000
Files and hashes:         1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: PiOLvtKhv89vOhmxM7Qtp4x8CfSvvaKEZfutF3Wcvb4=)
                          2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=)
                          3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=)
                          4: 9EySi5v3kgKf55_WnEy5Sq0kn-E.roa (hash: oUVGFfPRJjQhnddKcz1XXOwKzQbtPqL+f9+Nwb2NEX8=)
                          5: HfXhcMLQSQZQwza7V9Arj2x9L2c.roa (hash: fqR85lomPOT5NEJEaCczGH+7WyCvqD5rnkkrfn2ehQo=)
                          6: OcU1aCir7x5ZDAB0SDO85ir2vLs.roa (hash: WJWgjZA7WfRlKV6lm0oqVs5ZaPA407AGVO1IW26xyww=)
                          7: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=)
                          8: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=)
                          9: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=)
                          10: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=)
                          11: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=)
                          12: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=)
                          13: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=)
                          14: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=)
                          15: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 07:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3b:3c:20:0d:02:34:38:c9:11:6f:e1:f6:44:53:e7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jul 24 07:00:52 2025 GMT
            Not After : Jul 25 07:00:52 2025 GMT
        Subject: CN=4c9a63f835efd8782f5bb9d7847ee81bb44c38a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:e2:dc:b3:60:d9:3c:62:e3:35:8a:20:7d:
                    4b:e5:73:85:7f:e6:dd:93:50:e2:1c:93:2c:66:44:
                    24:62:ef:1c:b3:ef:3e:1d:1e:74:23:dd:e7:12:ae:
                    b2:fb:bd:7f:04:9b:d2:10:4b:a9:63:ad:65:23:e9:
                    6d:81:e0:42:dd:4c:dc:d8:45:d1:28:09:73:15:39:
                    a7:6a:9a:f4:77:0d:13:ba:7d:98:2d:3a:a7:e1:8d:
                    88:28:a9:ad:92:eb:46:41:4f:f9:52:76:ce:92:65:
                    06:ac:b9:61:d5:04:36:56:ce:e0:bb:27:0a:30:ae:
                    19:53:64:56:6e:01:c6:d9:24:1d:52:3b:66:42:b4:
                    f2:e2:c9:8d:d6:ea:7f:47:ff:db:e5:59:60:ef:9e:
                    f1:2e:73:a6:33:77:db:72:f9:52:af:ca:10:d8:96:
                    8e:8f:66:6c:f3:24:25:9f:66:34:5d:09:db:59:fa:
                    46:4c:82:48:cc:36:2e:32:35:15:6b:4d:6e:28:bd:
                    a6:32:69:c6:16:ad:ba:5a:02:b6:fc:44:45:b1:42:
                    d0:2c:0d:f6:50:79:e2:ec:50:a5:33:3f:a0:ac:64:
                    9d:97:46:17:49:d2:38:1c:a6:a5:62:0b:18:a4:15:
                    9a:fc:88:e1:b2:df:a7:2b:92:b7:6e:e2:6d:46:44:
                    73:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9A:63:F8:35:EF:D8:78:2F:5B:B9:D7:84:7E:E8:1B:B4:4C:38:A0
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:04:cb:30:40:64:b0:b1:36:43:07:38:c7:f4:a4:7e:4f:
         00:58:91:b9:c0:16:47:27:3e:a9:30:be:37:6c:e8:e2:a8:ad:
         3b:c6:ca:8d:32:dc:2b:83:af:8a:ff:9a:d4:45:96:7a:ee:1a:
         6a:a1:e8:04:ff:76:36:9c:7a:4e:be:9b:47:9c:cf:6c:15:26:
         6e:66:78:fd:c4:d6:db:90:40:be:de:98:ab:d8:ae:7e:75:64:
         02:74:16:82:72:ce:02:a5:0f:f5:01:d3:68:a6:ce:17:e8:0e:
         26:49:4a:11:f0:57:74:96:dc:3e:f2:d3:02:7b:d9:e9:3f:be:
         ba:ee:84:a7:c3:d0:f9:3a:a5:aa:d7:09:0a:83:46:7e:a8:9c:
         e3:0c:30:5a:4a:a5:7e:c7:35:e3:e7:31:de:1c:ec:cb:1b:6c:
         3b:17:45:0a:f2:67:58:9f:9c:f2:6e:ff:5a:2a:16:1f:52:be:
         9b:42:99:f0:46:9d:e4:ff:c9:03:ba:33:1e:2d:66:58:0c:33:
         a6:57:f9:4f:5d:21:e7:d3:5c:98:c3:5a:8e:b0:65:b5:04:82:
         1b:ec:52:a4:62:d0:42:47:39:80:5e:86:23:46:7b:d7:89:67:
         55:05:eb:f4:40:f7:46:05:29:3c:5d:50:4d:bc:63:6f:b5:6e:
         df:dc:f4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:08:56 2025 by rpki-client