Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
File:                     wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json)
Hash identifier:          2B02RPUFgXI3PWqi6sUuBwQKy1bOuv1epYKFRCp1mDM=
Subject key identifier:   08:77:2E:8C:EC:0B:D4:B8:B8:E5:19:0D:82:A6:F5:DA:34:C6:C6:81
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Certificate issuer:       /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial:       0198481BE0BE036D774D4A1EFA8D2A1B4FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 19:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:43 +0000
Files and hashes:         1: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (hash: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=)
                          2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: 5CU9ShuovxhJ81T2dtmtxB5sNZtudpikE8BcqIqUXEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:e0:be:03:6d:77:4d:4a:1e:fa:8d:2a:1b:4f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
        Validity
            Not Before: Jul 26 19:00:43 2025 GMT
            Not After : Jul 27 19:00:43 2025 GMT
        Subject: CN=08772e8cec0bd4b8b8e5190d82a6f5da34c6c681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:db:22:74:01:55:d1:e4:ed:1d:2b:b7:10:
                    ca:f1:7d:b7:19:df:6d:17:31:4c:58:3c:08:07:7e:
                    24:6c:86:2d:28:56:46:94:fb:dd:84:36:59:2f:ed:
                    7f:3f:db:3d:23:3d:db:d5:fc:f2:74:cc:be:6f:2d:
                    6b:a5:b5:f7:20:1d:ba:f3:53:35:4e:49:c2:ae:28:
                    0e:f4:f6:9d:14:6c:cb:b3:15:16:b5:88:ba:c8:dc:
                    44:10:de:1f:7a:ca:51:04:ce:a9:87:99:63:f0:bf:
                    1f:af:06:48:d2:4e:11:42:95:e6:95:3c:ec:8c:dc:
                    b5:7d:90:2c:f4:a1:79:ba:1f:9b:69:75:b9:c4:72:
                    5d:d6:10:01:57:1e:60:4c:ea:45:18:21:6c:9d:a9:
                    a9:6b:41:1d:e7:bd:6e:10:a6:82:ea:0c:7d:a8:8f:
                    ec:29:26:ba:42:4a:42:d4:a2:9b:42:ed:9c:70:09:
                    e1:55:2d:52:96:05:23:a2:7f:f4:d8:32:63:6e:b1:
                    61:98:83:fc:fe:1d:dd:9e:29:a2:1a:3c:1d:49:44:
                    db:6a:e2:23:8b:c7:e2:dd:c5:22:8e:9b:c5:20:1b:
                    ac:1b:ba:42:64:a7:ed:94:e4:0b:c9:89:88:be:91:
                    aa:2f:95:31:1b:4e:28:d8:82:6e:52:89:0f:06:96:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:77:2E:8C:EC:0B:D4:B8:B8:E5:19:0D:82:A6:F5:DA:34:C6:C6:81
            X509v3 Authority Key Identifier:
                keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:df:e3:16:4e:97:c5:8e:61:a7:2b:8b:d8:4d:7d:3a:02:
         13:4d:da:de:26:b1:4d:62:a1:19:48:b5:be:1b:44:36:1b:e3:
         7c:f0:10:f0:ca:cb:df:7f:ce:fd:ae:13:e6:a5:2d:00:36:98:
         62:62:cf:d2:5c:c1:f6:fd:1e:89:7a:1d:38:3b:71:3e:78:55:
         7f:e7:a7:b3:0f:50:d5:b2:07:25:f3:ef:34:39:39:82:1e:df:
         36:33:53:c5:ac:a4:79:95:51:0b:50:a9:21:e0:8c:2c:67:ce:
         b0:8e:b3:12:63:9b:37:58:0d:ff:38:61:b4:d2:e3:06:3a:74:
         67:ca:e7:12:17:10:ab:4f:45:6d:bb:46:c2:51:8f:e0:1e:53:
         ec:73:56:83:02:db:f4:91:2f:a3:02:48:bc:68:e1:13:2e:8c:
         e0:46:e8:00:10:06:5e:33:26:9b:c0:07:93:82:26:0a:bd:b6:
         d8:6e:be:2e:48:56:56:cc:7b:00:43:ea:b0:6b:4e:20:8c:cd:
         ee:94:cd:60:06:98:5d:1a:0c:5d:fe:d0:44:7f:76:2f:1a:75:
         87:fe:10:84:e4:94:95:6b:df:d7:f9:78:0b:a4:80:38:31:41:
         c4:a5:63:4f:3a:17:71:a1:40:3f:f0:48:f8:19:dd:67:60:6e:
         b3:37:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:12:22 2025 by rpki-client