Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File:                     wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier:          aze1+WagCsPZ+1Y5eJRZZTrM0dpc9WtjZEziY5O4/2k=
Subject key identifier:   8C:65:73:41:77:B8:9D:6B:BE:88:76:77:13:38:91:3D:B2:E8:E4:B9
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer:       /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial:       0199221E3C7283A393A8C74CF52469FDA550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 03:00:30 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:30 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:30 +0000
Files and hashes:         1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
                          2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: 53F68lvxZAYUCu3Xg1EG4a5O1elCHUFUskXrhYWzo4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:3c:72:83:a3:93:a8:c7:4c:f5:24:69:fd:a5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
        Validity
            Not Before: Sep  7 03:00:30 2025 GMT
            Not After : Sep  8 03:00:30 2025 GMT
        Subject: CN=8c65734177b89d6bbe8876771338913db2e8e4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:79:1e:cc:1b:a3:3f:bb:f2:c1:e0:e5:ef:
                    19:ec:93:95:99:ce:32:14:c8:e9:77:f1:fa:92:d0:
                    66:b5:c5:12:07:ec:33:34:e4:25:2c:90:8e:d2:7e:
                    19:28:7b:9c:27:1c:7b:8c:b3:f0:47:ff:60:b7:fe:
                    31:43:52:a1:23:10:68:4e:05:fa:c2:46:00:d9:61:
                    9e:b6:4e:e8:69:3f:15:eb:53:e1:8f:11:66:83:e7:
                    79:e7:f3:54:c5:b2:39:25:d0:aa:f9:9c:b0:ba:41:
                    4c:83:1a:35:02:de:cb:a9:cd:63:ef:2d:0e:65:2d:
                    06:77:69:e3:45:f6:95:ba:79:98:de:26:73:4d:7c:
                    ee:11:c5:fc:33:a0:f8:72:2b:f7:f3:b6:d3:87:88:
                    0a:cb:90:7a:63:42:84:3c:28:7e:4a:39:3c:e0:03:
                    62:2a:e4:5d:c9:b8:bd:91:07:e1:a0:96:c6:8e:1c:
                    f4:e8:83:cf:2d:f7:ff:db:e2:c5:ae:de:37:eb:e9:
                    8f:5f:25:24:ee:71:e0:04:2d:23:3b:a7:a4:f0:24:
                    8d:35:6e:3f:80:c8:b8:20:54:58:78:16:8a:56:27:
                    eb:07:3c:74:56:9c:d4:db:47:1d:31:90:e6:4f:e1:
                    57:a3:89:f0:00:52:b4:c2:21:55:36:59:69:9d:5a:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:65:73:41:77:B8:9D:6B:BE:88:76:77:13:38:91:3D:B2:E8:E4:B9
            X509v3 Authority Key Identifier:
                keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:d2:8a:14:1b:d0:42:ed:a1:ed:8f:78:bf:f4:0c:0c:76:
         d8:c0:5c:b6:86:05:6f:56:76:b8:69:8e:3d:a0:1c:da:33:fc:
         cc:80:51:9a:d0:0c:0e:06:67:20:75:18:d1:d6:85:7d:f8:54:
         eb:ae:45:3f:43:a7:80:13:8e:f4:5b:6b:2c:ec:74:87:aa:82:
         26:09:06:de:80:86:4f:90:90:77:ac:83:33:9b:b8:7b:19:88:
         37:0f:c7:1c:4e:a4:f7:6e:a6:ae:31:d9:85:b9:3b:c1:fa:32:
         96:07:e0:a0:8c:c3:72:f4:1e:ec:5f:79:79:3c:53:e0:b0:33:
         5d:6c:54:bc:e2:f3:aa:54:5e:e2:38:47:1d:39:44:de:ef:f0:
         04:ca:8b:96:44:0f:b3:a2:82:a1:6a:d9:66:44:d2:95:da:2d:
         66:6a:ea:03:8c:e1:f9:bf:28:c5:f2:b0:0e:f6:34:4e:3c:50:
         09:77:de:2d:bd:17:84:05:eb:06:2e:e7:b3:da:c5:f5:1e:56:
         e7:6a:f5:52:af:f1:0f:0e:16:e0:1a:5f:4a:0e:39:3e:34:4d:
         88:17:28:50:f8:36:a9:7a:54:00:a5:1a:17:78:ba:b9:4c:cd:
         55:3c:cb:d7:3f:75:67:50:ae:59:dd:5c:5d:3d:a3:07:99:38:
         4f:9d:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:05 2025 by rpki-client