Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File:                     wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier:          o9k7CbfMyHtphfP1GaEtvsc8gdc2SHHY+Vfy9SLEevU=
Subject key identifier:   BF:49:59:D9:81:ED:C5:74:A4:27:48:5A:75:FD:C9:22:A8:A0:B2:AA
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer:       /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial:       0198432BF4585EA6230284D79EB90C585F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number:          1602
Signing time:             Fri 25 Jul 2025 20:00:10 +0000
Manifest this update:     Fri 25 Jul 2025 20:00:10 +0000
Manifest next update:     Sat 26 Jul 2025 20:00:10 +0000
Files and hashes:         1: NcyIXNvoa22SJL0FsYyeOTgc_BE.roa (hash: I7SWTbgf+E38lSjzpIc20ooNKJL8yjb7efp//cF2mds=)
                          2: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: vh6IABb8L8Dj5b1bmFDIDL+VfM7v9Rkvhc6XSFkFUak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:2b:f4:58:5e:a6:23:02:84:d7:9e:b9:0c:58:5f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
        Validity
            Not Before: Jul 25 20:00:10 2025 GMT
            Not After : Jul 26 20:00:10 2025 GMT
        Subject: CN=bf4959d981edc574a427485a75fdc922a8a0b2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:0c:17:ff:17:c6:7e:c4:55:61:72:f9:54:
                    66:6d:a3:b2:a2:ad:5d:78:6e:85:d5:c9:0b:52:df:
                    f5:54:0b:ea:b4:e1:dd:4c:94:fc:34:cd:46:fc:5c:
                    08:2f:10:b0:f8:7b:04:77:82:a1:d8:0d:99:d2:32:
                    86:58:e4:a4:6c:29:70:3e:4c:f3:67:03:f5:a3:b6:
                    41:c8:89:9b:33:57:dd:b2:27:22:36:71:5f:39:cf:
                    64:21:f8:00:94:4e:21:15:5d:49:b3:3e:0c:3e:21:
                    54:45:60:b0:c9:18:4d:29:00:18:44:62:b9:7d:64:
                    be:13:57:56:12:ea:21:b6:30:14:0b:a0:9a:86:3b:
                    31:5f:4e:67:a4:92:d9:e4:05:32:69:cf:68:e4:e0:
                    f8:94:a4:2f:b6:3b:9c:2d:10:65:ad:4a:96:9b:9c:
                    7b:55:d0:73:1a:9e:70:b9:e2:98:60:e2:b5:2e:1f:
                    80:b6:69:30:5a:fb:f1:23:8a:4c:ba:6c:4c:fe:3e:
                    3a:ab:70:11:71:94:96:02:e1:ad:e7:2b:57:3e:99:
                    78:c8:7f:bc:4f:af:b9:17:52:b8:e2:cc:8f:1a:91:
                    c0:39:f8:a3:66:61:3d:35:5a:cc:9f:50:a9:30:92:
                    bc:ce:cc:40:51:90:6b:2b:64:a6:03:27:e1:f2:e8:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:49:59:D9:81:ED:C5:74:A4:27:48:5A:75:FD:C9:22:A8:A0:B2:AA
            X509v3 Authority Key Identifier:
                keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:41:23:5d:ec:2f:db:19:cb:85:bd:de:e4:73:ed:12:24:6e:
         fc:6b:ba:c5:dd:87:b7:ef:8b:ca:89:fc:38:3a:90:af:0b:4a:
         49:45:d1:40:3a:4c:fd:9b:81:a2:e9:e9:0a:4c:63:c3:44:2d:
         0a:71:ea:50:5a:6c:53:63:f7:6d:5d:9e:ab:b7:ba:4c:52:7f:
         58:fc:86:ab:c2:b8:49:02:cf:80:ad:a4:9c:f5:c1:d5:ef:6c:
         f3:58:37:80:77:56:20:6f:c5:20:8a:b8:13:dd:9d:5b:38:5c:
         4e:fc:78:3f:a2:b5:5a:8d:11:0c:23:18:7d:39:38:f7:30:a8:
         96:f1:68:2e:b5:82:ed:93:f2:2d:7b:35:4b:f3:c8:62:21:3a:
         42:85:d9:02:9e:12:25:b0:ee:60:34:bf:63:7f:20:a2:d5:33:
         ad:f9:01:af:67:6e:da:08:d2:cd:4a:c4:44:bd:23:60:d9:8c:
         0d:48:49:0d:82:31:88:30:c1:63:b1:30:79:1d:bd:46:d8:89:
         ed:86:6c:ad:94:f3:af:80:4d:e2:71:f0:41:6c:3c:55:73:9e:
         a0:25:4d:95:1e:76:47:1c:3a:62:e2:06:ac:91:fe:0a:9c:2d:
         4a:3f:07:3b:69:c8:a5:b9:0e:1e:88:03:16:14:49:e3:c6:22:
         98:cc:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:04:09 2025 by rpki-client