Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          bFEMoY/inlHF5kBzb66W0nlVTmlFrExD+Wf27J60Uew=
Subject key identifier:   3B:37:24:70:61:B7:3F:A2:6D:F1:2A:74:FC:7C:28:8E:94:8D:42:D8
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       01984A0A133452D600E3F68C855C0C9097C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          160D
Signing time:             Sun 27 Jul 2025 04:00:30 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:30 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:30 +0000
Files and hashes:         1: 1wrmzG8kmHTEu12xzRLuu8ra80I.roa (hash: 9m8Zy/qea1cvB7wZZ6FL+4apCQU2vA1vbBwqJEE2WcE=)
                          2: 5GkbsIVHSNjZKlhRMzKNoaujuQI.roa (hash: ZErUA0WOYmD80Q/QFMsB/idG5rJkQAo7XEeRzYdULMM=)
                          3: T-zwd3E8gbu-MxAIPetL9QmvKh0.roa (hash: 092w0Bm8URvR9yowFyiwo856iRLSuK3dnjktNqsPJK0=)
                          4: d_5rCXad48L982aV_sE5OcfISCI.roa (hash: 90ZGQ2cxG5cZFWpNWTKz60Bz+Hn3IddK6g3bDQGxBUA=)
                          5: ulqVIFVosPowykxTM5-oqMzd4Gw.roa (hash: GyWK8Gwo9Zktpx8zDLY/DbSmWK69tqfb6z/bHNQk+aU=)
                          6: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: MK+QVFL9q90WtrJ3T7hwdzCS7NGXSiA6ostyudPV6IA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:13:34:52:d6:00:e3:f6:8c:85:5c:0c:90:97:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Jul 27 04:00:30 2025 GMT
            Not After : Jul 28 04:00:30 2025 GMT
        Subject: CN=3b37247061b73fa26df12a74fc7c288e948d42d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:72:22:67:db:5d:a6:d3:4e:6b:f3:f5:d6:
                    85:b7:c7:e3:63:dd:ef:ce:52:aa:34:70:50:82:9e:
                    ee:4f:dc:4f:ef:a7:74:4b:7a:27:f4:a6:bd:47:ab:
                    83:41:55:39:a1:2a:85:4b:a2:c4:8d:f1:26:1d:33:
                    40:93:85:c4:dd:8f:8d:83:60:77:d4:0c:4f:dd:15:
                    02:03:75:a1:d7:4a:eb:40:8b:24:3a:c1:2a:c1:47:
                    4c:33:3e:c6:15:2f:a0:04:33:50:41:53:35:95:39:
                    e3:8e:3a:85:2f:34:76:66:20:99:9b:e3:59:1c:9e:
                    5e:b9:db:f4:c8:b6:c9:5f:b8:1b:c0:6f:09:f9:6f:
                    41:a0:8b:25:16:0d:4a:06:f3:f8:d1:d7:2b:92:52:
                    cb:b9:e2:ce:a2:5c:5f:67:e8:d2:d0:6a:c3:8c:cc:
                    f1:7b:19:7f:17:6b:05:14:f3:5d:1c:58:4b:a2:66:
                    24:cd:5e:52:1b:46:c2:e7:bc:7c:2a:c2:8e:36:37:
                    13:d0:98:66:4a:e1:ac:72:e1:29:a8:c9:b2:f8:a5:
                    63:ae:0a:24:83:81:d6:a3:4c:06:5a:e7:d2:58:51:
                    e9:ed:58:b1:89:40:3a:27:3a:c4:b0:e1:99:ee:8e:
                    d9:b8:b1:64:5f:72:be:4f:8a:0d:18:63:02:2d:1f:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:37:24:70:61:B7:3F:A2:6D:F1:2A:74:FC:7C:28:8E:94:8D:42:D8
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:a2:d2:aa:e5:d4:df:6b:68:8c:15:02:7b:a1:a7:92:96:
         ce:14:4f:c0:87:23:1d:d4:0a:d4:64:2c:0a:20:ad:03:0a:bd:
         11:ef:e1:e2:55:f9:d7:d7:05:f3:59:79:cf:d8:97:a1:f4:31:
         38:fb:24:ad:57:3e:8c:de:4e:c7:df:9b:5a:1f:31:55:08:5d:
         91:4d:bb:b8:18:88:43:3a:00:eb:dc:7d:f8:ea:20:3b:83:6a:
         7a:08:d9:21:82:34:47:cc:48:24:95:66:6b:88:40:ac:dd:c6:
         8c:eb:e0:86:9e:ba:13:bf:79:1c:b5:7b:61:de:f4:a6:a0:2d:
         70:4d:ed:57:f0:1b:62:68:d0:a1:bb:a1:78:38:ee:3a:e8:12:
         6b:ea:9d:06:35:4c:11:de:a6:b6:24:10:c4:3a:58:76:92:52:
         22:7a:ba:a2:be:7f:3f:a7:e5:44:71:13:7c:dd:0f:dd:e8:7b:
         70:d3:fc:ff:19:97:d4:6c:28:36:7c:fa:b9:bb:3c:aa:72:1f:
         b1:0c:9c:11:d3:ee:04:15:6a:f4:96:c8:b0:e7:2a:c2:1d:86:
         c4:97:81:e1:91:8c:c8:1d:b5:2a:9b:7f:52:b3:c3:65:28:f5:
         26:ec:ec:b4:87:06:f6:8f:a9:48:80:43:a4:10:ef:e2:2f:63:
         44:74:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:48:26 2025 by rpki-client