Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          3DtpZooC9zKFTnwCTgh1iL6/5OfMUobnccXCz7vOZTI=
Subject key identifier:   32:DC:15:65:19:83:2E:5A:E2:A0:3D:44:AA:93:66:21:F6:A1:28:A7
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       01983EAB4C8E4ADAB5E459179004B1C9F71B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          06CB
Signing time:             Thu 24 Jul 2025 23:01:10 +0000
Manifest this update:     Thu 24 Jul 2025 23:01:10 +0000
Manifest next update:     Fri 25 Jul 2025 23:01:10 +0000
Files and hashes:         1: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (hash: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=)
                          2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: 8Uo1XYFd2KEaauK8zy8Kua4+rmLiJ9SYITI70eFhwFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:ab:4c:8e:4a:da:b5:e4:59:17:90:04:b1:c9:f7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: Jul 24 23:01:10 2025 GMT
            Not After : Jul 25 23:01:10 2025 GMT
        Subject: CN=32dc156519832e5ae2a03d44aa936621f6a128a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:82:3d:20:fb:d1:37:81:62:bf:da:15:37:
                    4c:54:70:ae:75:eb:3c:48:94:d9:eb:8e:fc:76:8e:
                    6a:ef:9a:6a:ce:e0:69:6b:cf:f9:f6:07:cf:8d:2f:
                    48:e2:de:37:8d:e9:55:4d:a0:3a:e9:7b:e3:45:2e:
                    1e:c1:9b:d9:5c:16:00:1e:65:ce:3c:87:27:f3:49:
                    13:7a:7b:de:b5:79:21:e9:97:7b:89:bf:04:15:34:
                    fd:01:86:53:15:f0:5f:64:19:9e:cc:08:2c:28:8f:
                    aa:7d:af:7e:2a:61:54:61:32:46:3b:81:f3:5b:67:
                    f8:67:28:00:8e:c2:90:f8:f8:06:ad:41:75:e5:99:
                    3f:7f:12:a1:7c:81:7a:a5:cb:80:a5:21:7f:8a:f3:
                    0e:8e:95:a3:43:20:8a:45:80:31:dc:e0:3b:60:3c:
                    97:a0:91:f4:ca:23:b0:4c:6c:61:00:27:c5:d7:c7:
                    e2:72:b5:5e:cb:45:5b:88:e3:28:8d:34:e9:4f:6d:
                    0c:68:05:4b:23:d0:d2:27:7a:a9:95:ec:91:a5:9f:
                    91:91:9e:00:82:49:f7:ed:27:8e:ed:c8:ef:a7:3b:
                    e6:04:65:9e:b2:34:01:eb:1e:d0:ad:15:7a:9f:72:
                    72:64:1e:6c:c0:92:e5:26:dd:01:33:63:21:bd:c5:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DC:15:65:19:83:2E:5A:E2:A0:3D:44:AA:93:66:21:F6:A1:28:A7
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:85:2e:a9:1a:26:55:b3:f7:57:fe:71:06:e7:0c:5e:80:b7:
         a6:4d:59:0a:6e:cd:cd:14:ec:99:a9:83:33:ca:1c:01:55:9b:
         76:d5:e0:e7:c6:f6:bc:a1:27:89:be:8e:4a:39:a5:e4:26:19:
         13:c4:1b:51:26:74:b1:34:62:bd:1c:b5:3d:3a:fe:c5:9c:be:
         81:93:06:db:03:5d:83:0a:4f:7f:31:59:06:91:1b:03:bb:ae:
         3b:d1:5c:ce:5e:09:b4:e7:c2:4c:1a:92:3e:f0:bc:b6:35:f8:
         c2:ce:fd:b1:4e:35:80:59:ea:c5:21:67:83:09:dd:e3:64:56:
         26:0f:90:74:da:70:12:ce:0e:f5:38:59:ec:11:45:df:8b:75:
         d7:65:32:ee:b3:e8:54:7f:80:5d:ab:d4:8b:e2:ef:04:37:dd:
         3a:cc:15:7c:3f:ad:22:08:fa:6c:ba:81:04:12:d0:25:9f:13:
         ac:84:4a:d5:c5:c0:4c:c0:aa:61:7f:60:e9:51:ae:b4:90:58:
         0a:24:42:42:54:81:8b:d1:ef:be:bf:c2:8d:17:31:3f:2b:c9:
         a5:1f:25:ab:bf:cd:47:60:b0:6e:3f:41:bf:7e:cf:27:5a:8a:
         9b:e4:8f:79:02:0e:b5:7c:0d:6c:5a:ee:9f:e5:59:07:6d:08:
         24:64:b6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 05:16:18 2025 by rpki-client