Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          +HL24zF8rU0dQ6isqEkbU5f4xY25V2LeiIGoWP8y42I=
Subject key identifier:   01:9F:3B:BE:69:7E:4E:42:4B:8E:A5:EC:43:12:C7:AE:0B:0F:5D:C0
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       0198477719AEE8E1C6682222CDFBED1D3A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          02E6
Signing time:             Sat 26 Jul 2025 16:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:44 +0000
Files and hashes:         1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: Rf8VOkNLafk+oGiZFmmmuqsY5IoV8SAUTDoKSvosMrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:19:ae:e8:e1:c6:68:22:22:cd:fb:ed:1d:3a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Jul 26 16:00:44 2025 GMT
            Not After : Jul 27 16:00:44 2025 GMT
        Subject: CN=019f3bbe697e4e424b8ea5ec4312c7ae0b0f5dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c1:fd:8b:ef:92:8d:a9:8f:43:bd:b2:a8:09:
                    1f:6c:c5:aa:07:4d:e8:9c:08:3a:3e:6b:fe:32:7e:
                    b0:ca:c4:18:86:20:e3:e9:7a:40:53:b8:90:a8:bd:
                    d2:6f:b9:b7:22:d0:a4:cd:0b:90:7d:56:e8:07:93:
                    cb:83:21:d9:80:bf:76:46:31:08:15:7c:3e:f2:c3:
                    e7:a8:0c:ae:06:0b:84:ef:a6:09:a2:50:39:55:63:
                    89:6d:ed:0c:5a:f3:19:1d:de:e5:30:ce:76:61:c5:
                    83:6e:62:26:2a:78:32:8f:f1:52:14:26:c6:82:3a:
                    75:fd:27:e0:c6:ec:68:10:b9:bd:0f:7d:96:da:3a:
                    fc:76:d8:50:09:b2:f7:d1:52:be:b5:20:bf:01:a5:
                    5e:9a:d0:87:92:de:ff:2f:18:21:e5:84:12:5a:54:
                    a5:9d:80:4f:4e:3d:63:ba:47:7b:83:8c:54:0e:d8:
                    cc:82:61:eb:d5:87:1d:46:4e:ea:3e:ff:10:60:20:
                    cd:09:7b:bd:7e:09:a4:db:3d:bb:3a:cb:3f:5e:b5:
                    71:76:e6:7e:8a:97:ad:b7:9e:bf:70:e5:36:35:9a:
                    21:cb:06:4d:cb:8d:62:5d:87:63:c0:c3:b1:16:ba:
                    b1:32:05:26:60:92:6c:9a:3d:de:1e:fc:78:ea:ef:
                    35:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9F:3B:BE:69:7E:4E:42:4B:8E:A5:EC:43:12:C7:AE:0B:0F:5D:C0
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e4:d1:e6:bd:e8:dd:53:31:0a:c1:16:de:69:4d:03:76:7e:
         33:02:0e:0d:75:0f:0b:c3:e5:82:5d:64:1a:47:71:75:ff:6d:
         aa:80:44:2e:b0:15:30:cc:6f:08:8e:b2:bf:74:3b:57:7b:48:
         c6:17:4f:54:d0:47:a2:4b:92:6b:c1:43:79:6f:f7:50:98:93:
         a5:5a:e0:3f:ca:b4:2b:92:57:5e:8f:87:e7:a0:57:ef:f8:de:
         60:64:58:05:e1:5b:06:e6:86:a0:28:e0:0d:7e:16:ea:47:d7:
         c5:ac:36:71:50:1e:5a:f7:f1:ee:8a:3d:26:f7:1b:f6:7d:d7:
         99:b4:c0:f1:ef:f8:f8:a9:9c:bb:df:ee:b0:96:ce:b8:02:7a:
         c2:99:ac:81:d6:82:5b:a1:0a:d0:64:ed:e4:8a:21:d4:c4:46:
         83:c0:2f:41:66:85:8e:a2:e5:fc:7f:35:b2:88:88:29:22:2b:
         6d:ee:7b:c8:2e:d2:1d:71:42:64:10:ea:7a:7f:4d:6f:ef:ab:
         f9:10:18:32:8b:e4:eb:95:1c:90:f5:8d:12:43:0f:aa:28:e7:
         1a:00:96:87:08:43:d9:7b:23:59:14:8b:92:4d:5a:83:e0:e1:
         1b:89:b6:57:99:a7:e8:df:12:22:5a:71:1d:9f:6a:6f:42:b2:
         f3:7a:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:03:55 2025 by rpki-client