Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
File:                     wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json)
Hash identifier:          g5OmrbcxdfKA8e7NhZhS/1le3eXywc1Zd++5ToMJcjU=
Subject key identifier:   3B:94:4D:29:85:71:F8:16:90:B9:DC:49:98:2B:84:98:4E:82:1E:09
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Certificate issuer:       /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial:       019845FD4FE11141DBD802103725E4DC3CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
Manifest number:          05C4
Signing time:             Sat 26 Jul 2025 09:08:05 +0000
Manifest this update:     Sat 26 Jul 2025 09:08:05 +0000
Manifest next update:     Sun 27 Jul 2025 09:08:05 +0000
Files and hashes:         1: RpRW6TZvmlJBGznF3-hnJMYz2K4.roa (hash: xykvfoJNE09ErVanuSOIuIu5xVg3V0n12SrhzPJXXrg=)
                          2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: EJIw6fpgHyb+uVPoGRRIVeyaehDjdX1qU8n99To8H4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 09:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:fd:4f:e1:11:41:db:d8:02:10:37:25:e4:dc:3c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
        Validity
            Not Before: Jul 26 09:08:05 2025 GMT
            Not After : Jul 27 09:08:05 2025 GMT
        Subject: CN=3b944d298571f81690b9dc49982b84984e821e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:14:c6:1c:f6:f2:ca:5d:4e:2e:35:7f:11:21:
                    3c:a0:36:95:30:f8:bd:50:1a:5c:16:19:2f:f1:e2:
                    d5:1f:43:34:a0:c1:12:34:78:4e:e6:3a:ba:21:eb:
                    5e:3f:26:e5:e2:55:a1:a1:64:42:18:a7:16:62:d1:
                    e3:a5:bf:d0:c8:59:ce:79:24:66:71:ea:a6:58:e4:
                    98:39:47:15:66:6f:2f:f1:d1:90:e7:39:3d:5b:62:
                    64:38:26:be:0f:a6:5e:34:75:7a:f5:0a:68:33:16:
                    24:8a:a5:74:03:94:78:74:27:9e:36:7c:f5:9d:46:
                    a5:c2:20:21:e0:5a:c8:e0:bc:69:0d:4b:b9:01:44:
                    25:8e:ed:e2:7b:76:29:a5:5d:d7:1d:6e:c0:81:99:
                    7e:34:57:c4:99:69:34:7b:ed:fb:51:7a:dd:f6:c9:
                    f8:2d:4e:73:5b:9e:1d:dc:f1:04:36:93:0e:ec:42:
                    a5:48:d0:ca:bf:5d:e0:be:2f:a5:74:7c:b3:f3:3f:
                    ac:b8:05:e0:f5:ae:10:77:b7:2e:e7:c7:cb:17:26:
                    e9:cd:c8:7e:bc:f7:04:ce:ca:2b:0c:58:f0:70:cd:
                    ff:94:96:be:06:88:3d:50:52:02:57:2c:1b:de:5e:
                    54:63:fe:4d:c8:54:38:f0:79:49:4f:43:03:65:16:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:94:4D:29:85:71:F8:16:90:B9:DC:49:98:2B:84:98:4E:82:1E:09
            X509v3 Authority Key Identifier:
                keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:65:09:88:1e:fb:59:49:b8:64:6f:60:98:6f:54:02:9a:f2:
         91:72:21:f1:0b:57:51:f0:ec:dc:9f:72:b1:61:f2:63:cc:06:
         94:de:2a:d2:b2:f0:cb:c2:e1:42:9a:70:d2:43:02:4b:33:8c:
         62:9c:72:77:d8:c6:ce:7d:53:10:3e:72:77:bd:3e:33:50:5e:
         57:08:2b:e6:92:c7:9b:f9:17:0a:a2:58:ae:22:20:b0:53:b9:
         79:68:ab:25:05:27:cb:f2:fa:a6:73:1b:1e:21:48:b9:d0:8d:
         b8:db:2d:e1:ff:56:c6:f1:c7:ff:6b:d1:c4:03:ec:79:94:8c:
         12:cf:ab:d4:26:1d:1e:21:a6:68:a3:63:f6:1a:2b:5e:63:2e:
         4b:24:2b:1d:60:26:ac:58:fa:d8:31:42:1e:00:e1:89:02:fc:
         50:08:c1:bf:4f:29:7c:8d:9f:9b:6f:58:db:64:0f:bb:42:ee:
         f6:8a:56:4f:b7:e8:5c:ce:62:e7:78:4a:eb:2e:e6:28:d2:0a:
         7c:9a:be:35:29:52:31:67:05:24:8f:e7:ca:7d:b0:c6:ed:19:
         e9:43:c3:57:d4:5c:0e:2a:03:c0:cd:7b:bb:3b:d5:0b:10:27:
         f2:f0:bc:dd:c6:35:9d:16:a4:d1:23:65:17:2e:1e:1b:2f:69:
         a2:57:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:01:54 2025 by rpki-client