Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
File:                     w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json)
Hash identifier:          Lb7uc4YbO5BpsKQPkR1A+T7LkkXX75KHspSKuDt/SYo=
Subject key identifier:   4F:D8:F8:5F:BC:6F:CE:18:2F:29:AF:6E:B3:A2:71:8B:9B:F0:48:1F
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Certificate issuer:       /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial:       019864DD09D04A9B7A031D9FCC8D0B73AF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
Manifest number:          0A79
Signing time:             Fri 01 Aug 2025 09:01:04 +0000
Manifest this update:     Fri 01 Aug 2025 09:01:04 +0000
Manifest next update:     Sat 02 Aug 2025 09:01:04 +0000
Files and hashes:         1: ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa (hash: rt0w1lyTwHj5nTBBa43BIhts6ikl3ovgbdGlD8LZ7VQ=)
                          2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: f4zSPexTQlG3d554tUq56u9PNk/as7IZHBqlaWZcgAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 02 Aug 2025 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:64:dd:09:d0:4a:9b:7a:03:1d:9f:cc:8d:0b:73:af:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
        Validity
            Not Before: Aug  1 09:01:04 2025 GMT
            Not After : Aug  2 09:01:04 2025 GMT
        Subject: CN=4fd8f85fbc6fce182f29af6eb3a2718b9bf0481f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:47:1b:db:84:b3:83:f9:8e:64:4e:fe:2d:
                    c1:75:35:13:57:a9:6e:ea:65:5b:28:29:84:a4:b7:
                    dc:12:37:6e:e4:22:56:df:f0:91:f9:dd:0a:6d:8d:
                    fb:26:92:27:18:0f:38:42:2e:9f:5f:93:61:f6:1a:
                    10:65:b4:5f:92:1a:9b:e5:18:b5:86:24:91:78:67:
                    54:c5:8d:1c:80:df:d7:2c:1c:62:28:37:79:01:71:
                    15:93:e6:e6:ab:5b:3b:70:61:e4:63:ee:f5:f9:af:
                    45:ab:a5:b6:aa:50:38:69:ac:e3:da:82:e4:48:08:
                    c4:65:3f:bd:b3:96:6f:24:e0:c7:e6:1a:7b:4e:5a:
                    ab:34:f8:a1:28:3e:f0:ae:6c:4b:73:b2:37:db:74:
                    57:82:1b:15:74:78:2d:35:f4:84:a6:db:05:bd:98:
                    a9:68:d7:5a:d6:d4:1d:e6:12:94:36:5a:1c:1b:ec:
                    af:3d:f7:83:b9:f6:dd:ff:a2:c4:c5:29:9c:00:14:
                    1d:ee:5f:d4:41:4e:cd:cf:4c:56:36:17:4e:db:cd:
                    06:ff:b1:d5:b6:dc:6e:86:8e:8f:16:fd:2f:24:99:
                    c5:04:19:8f:46:d0:98:0b:5e:23:1e:e7:45:7a:cb:
                    32:26:63:c7:2b:33:0c:cd:04:5b:30:2a:17:60:67:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D8:F8:5F:BC:6F:CE:18:2F:29:AF:6E:B3:A2:71:8B:9B:F0:48:1F
            X509v3 Authority Key Identifier:
                keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:17:6f:a7:13:2d:fd:1f:3f:b6:98:2a:df:9a:b9:c9:a8:
         11:19:4c:4b:fa:72:ed:18:e6:2e:3e:7c:67:aa:ce:57:36:f7:
         63:54:b3:0e:e5:26:ef:a7:c2:12:f5:e6:cc:aa:9d:d8:a1:d6:
         14:29:7e:5f:d9:c7:21:3c:1c:18:13:9e:cb:e4:02:11:87:87:
         60:63:81:e8:03:f2:7b:92:7f:e9:e3:fb:ca:e8:89:60:93:87:
         dd:ca:5c:c6:37:cc:67:a1:ca:18:80:dd:5e:c3:10:87:98:f1:
         89:4d:37:f5:ec:fe:49:ca:9d:ff:11:4b:28:a8:86:c8:29:b5:
         cf:59:fe:c6:14:5a:e8:29:fb:d0:11:c8:f3:19:9b:45:b4:49:
         34:d7:33:32:a3:8a:13:31:39:b0:ae:c3:02:d4:52:86:24:fc:
         73:24:dd:67:e6:66:4b:d3:a2:1f:f0:c1:f9:25:25:05:ef:cf:
         de:70:32:1a:7d:74:86:a4:1f:14:28:18:59:a9:e6:a0:60:5b:
         52:7e:34:7c:61:72:54:a9:9d:48:a6:40:48:ea:ca:8c:9a:8b:
         ca:12:eb:ab:b9:1e:a0:a1:c2:57:da:3b:7c:54:22:37:7e:ee:
         e3:64:55:10:03:03:90:fe:ba:4e:27:87:f0:0b:67:a7:94:fb:
         56:00:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:11:49 2025 by rpki-client