Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
File:                     wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json)
Hash identifier:          3aRBv0YJudfCJ1w5CKwqrusFT+NFpX0hDi8R4AfeS6g=
Subject key identifier:   01:46:74:39:83:54:6E:6E:2F:63:08:12:63:14:B5:1D:2C:8C:B4:19
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Certificate issuer:       /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial:       01984966C314B4B4564FAF9DF6A2B6A321B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 01:02:07 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:07 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:07 +0000
Files and hashes:         1: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (hash: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=)
                          2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: Q41yHNRtopXVdrLb/rdNZt+EdX11jqVHaRwbbbBV/VA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:c3:14:b4:b4:56:4f:af:9d:f6:a2:b6:a3:21:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
        Validity
            Not Before: Jul 27 01:02:07 2025 GMT
            Not After : Jul 28 01:02:07 2025 GMT
        Subject: CN=0146743983546e6e2f6308126314b51d2c8cb419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:84:4f:eb:4a:51:f8:29:d0:07:fb:18:10:
                    e1:f5:5a:d6:1a:9d:2a:5e:10:2a:f8:ca:0e:73:77:
                    4d:ef:ec:fb:71:91:eb:da:9f:51:90:d4:b6:a8:f2:
                    d1:27:2d:f4:30:1b:70:38:ec:43:80:49:96:c5:67:
                    6a:22:78:26:bf:d8:68:b8:12:5e:29:85:3a:2c:b4:
                    64:86:cc:ea:8a:a2:4e:6d:0b:30:d8:31:28:a7:1e:
                    3c:1d:10:fb:10:af:9b:88:6b:9a:78:b9:87:3b:e8:
                    49:fb:af:38:82:76:44:39:23:8c:3e:2f:cf:bd:8b:
                    c5:b2:b6:b6:8c:bf:da:c3:78:ac:06:85:0d:1e:ed:
                    49:1e:57:25:31:5c:bb:a5:46:75:7a:60:f2:19:a0:
                    42:5e:38:1a:e2:5c:76:a4:34:c2:54:5d:99:f5:61:
                    d5:b5:a1:a7:2e:88:10:83:91:dc:bd:05:44:82:69:
                    9f:12:aa:44:0a:c6:f1:d7:03:68:81:1e:a4:6c:69:
                    2c:d4:7f:2a:cb:b2:0e:ad:af:de:09:f7:25:cd:1e:
                    e6:bf:34:ed:77:79:11:99:21:c4:84:32:c4:48:53:
                    fb:ad:c1:83:ad:c1:b3:7a:32:db:29:d4:3a:ff:71:
                    18:c3:76:b9:ec:8e:13:86:f2:9d:4d:f5:12:4f:d8:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:46:74:39:83:54:6E:6E:2F:63:08:12:63:14:B5:1D:2C:8C:B4:19
            X509v3 Authority Key Identifier:
                keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:35:6a:c5:7b:37:9b:67:b1:ee:bf:2e:30:1e:23:01:8a:dd:
         a0:c8:33:7f:06:2e:6c:f9:dd:48:fc:29:d7:97:f6:da:0a:a6:
         80:e0:f3:d4:fa:89:a8:2a:4d:b9:54:71:83:5f:aa:b0:f8:9f:
         e6:e8:db:be:fb:82:ed:af:73:d7:ed:62:60:24:5f:36:df:4b:
         0a:6d:07:31:e9:5d:70:2b:d2:f7:23:89:61:ed:69:f4:ee:26:
         e6:ed:63:6a:79:70:33:29:65:03:19:8e:bd:5c:fe:b9:e4:02:
         fa:03:c0:1f:eb:24:f6:dd:2a:e5:55:8b:ec:b3:e5:e8:e5:ce:
         62:d6:27:0c:b5:9d:2d:26:c5:7a:f5:6f:43:00:e4:4c:db:ee:
         0b:cd:6d:85:da:e7:32:57:af:10:71:4c:09:5b:ff:44:22:0e:
         91:76:b7:ef:84:0b:3e:0e:c4:eb:99:44:03:ee:51:fa:ec:af:
         e5:55:db:b0:58:4f:ab:2d:3f:70:6b:7a:12:42:cc:9f:01:88:
         c3:7c:16:ba:4c:f4:a3:8d:bd:68:e0:33:ac:5b:4c:bf:20:21:
         3a:32:e3:9c:0a:77:13:1b:2e:22:a8:74:51:36:c9:26:88:1b:
         2c:71:4f:ac:e4:b4:c0:48:4c:75:6b:1a:a0:60:4b:64:25:90:
         16:40:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:17 2025 by rpki-client