Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          bQvrt8WieiDV3SWR8I6M1rtZmZC14h+IaIsiQRxMRxA=
Subject key identifier:   8C:9E:9A:CA:32:23:B2:30:DB:13:31:44:8F:02:72:15:C7:2D:10:F8
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       019857C63D6E120EC706DB96280F6B20A48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          1614
Signing time:             Tue 29 Jul 2025 20:01:06 +0000
Manifest this update:     Tue 29 Jul 2025 20:01:06 +0000
Manifest next update:     Wed 30 Jul 2025 20:01:06 +0000
Files and hashes:         1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
                          2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
                          3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: 0zCLCGa+Lhbq6dEm9bmV0rW3OdyZ6hsRBlbUTgxaNRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:57:c6:3d:6e:12:0e:c7:06:db:96:28:0f:6b:20:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Jul 29 20:01:06 2025 GMT
            Not After : Jul 30 20:01:06 2025 GMT
        Subject: CN=8c9e9aca3223b230db1331448f027215c72d10f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:f3:94:b8:4c:e5:06:b2:de:03:78:28:38:
                    72:ed:ea:fb:79:95:98:5a:94:30:ab:d0:dc:70:28:
                    f7:c5:93:7b:76:11:fb:d5:6e:4d:8a:2c:de:b6:95:
                    81:4a:88:65:f5:95:eb:57:39:45:0b:a1:d9:84:18:
                    3f:53:a1:06:a8:e7:6a:7d:80:25:a8:ce:83:4f:c0:
                    63:74:84:c6:e7:b2:d5:0e:ee:93:de:98:b6:77:ed:
                    08:57:3d:ac:85:ad:e8:0a:c7:88:6b:6b:a8:e2:64:
                    40:5d:d8:ea:6a:cb:1f:a7:aa:ef:d2:67:50:3d:6a:
                    3f:fe:f5:a9:7e:e6:ec:76:db:36:12:eb:68:b3:fc:
                    8c:47:44:ed:d2:84:db:cc:27:ec:92:e2:48:3e:fc:
                    06:41:18:1a:7d:0b:02:e0:e7:47:a2:4e:64:a1:8a:
                    82:1a:0e:ec:95:68:0f:b4:14:bc:10:81:1a:d4:e8:
                    25:fd:d5:c7:5b:25:98:76:54:53:de:73:c9:2d:5e:
                    9f:06:85:57:73:8c:b2:98:b1:ab:26:ce:b7:b7:63:
                    ea:68:1e:03:9f:62:37:50:ed:bf:e6:b8:95:14:15:
                    da:11:52:a6:dc:6b:60:96:ba:32:1e:18:04:48:01:
                    47:b3:04:e9:b9:a1:fe:e8:07:bb:89:cd:76:4e:b1:
                    5f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9E:9A:CA:32:23:B2:30:DB:13:31:44:8F:02:72:15:C7:2D:10:F8
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e6:ff:3f:a7:70:91:f7:23:9a:46:ab:ec:ff:c6:4f:66:f2:
         ef:bf:6f:dc:14:40:ea:17:94:a4:10:41:c8:2d:c6:64:0c:4b:
         b8:98:a2:48:d7:db:e6:ce:3e:f8:a7:6a:b1:64:92:2f:45:b3:
         e2:2c:b4:13:a3:4f:21:79:a1:80:1d:87:fb:33:8f:f6:75:94:
         04:f3:ca:f6:42:52:98:f5:e0:50:7b:68:f5:0a:d1:b0:6d:bf:
         9a:2f:cd:0a:a0:85:fc:8d:0c:d7:f3:d0:c4:93:3e:51:8a:4f:
         d4:7f:f3:bc:ef:a0:7a:dd:2b:36:7a:c5:1c:ce:9d:b5:89:1c:
         0c:8f:0d:4e:ec:8d:0b:61:0c:2a:3a:eb:76:3c:8a:c4:0f:ce:
         45:b4:b5:90:f7:ab:6d:33:2a:7d:52:f7:17:73:0f:e9:99:d4:
         41:c0:5e:be:40:cd:f6:c2:30:2c:63:f7:84:43:8a:95:e3:e0:
         fe:f7:90:be:af:9e:e5:35:05:c4:96:c4:d7:a9:d0:47:30:fc:
         f9:4d:06:64:b5:11:bc:70:90:e7:ed:c5:5c:6f:84:2e:74:45:
         50:43:c9:10:83:fa:cd:72:5f:64:b0:a5:aa:84:e9:7a:47:8c:
         5b:a3:91:23:02:d9:88:e7:24:9e:ca:d0:2d:6a:8d:2b:b6:ee:
         47:50:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 04:32:08 2025 by rpki-client