Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File:                     Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier:          v60oZ9k4HWGNHrXu/u6zb8fWz6nUSx6dTovGg5GzmrM=
Subject key identifier:   A4:18:5A:4D:26:FC:7E:F5:9F:4F:D2:08:B6:A2:46:02:F3:18:D6:C7
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       01992367BEC730A2E5035155F842DB3B840C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number:          12F2
Signing time:             Sun 07 Sep 2025 09:00:25 +0000
Manifest this update:     Sun 07 Sep 2025 09:00:25 +0000
Manifest next update:     Mon 08 Sep 2025 09:00:25 +0000
Files and hashes:         1: 1-Nwco5vWw63pYOoiXeEziJ8cPec.roa (hash: A8og17z+q1WxTvxdTmf8v2Hsh2pkC1lSNWSe2XBfRe4=)
                          2: NP9ETkcPIfZiSMV55HsJboQ-GHY.roa (hash: cI4wvFFvTdVvpTjPJ+zLUBYHPo+x7aSz3XoVXrfmrY4=)
                          3: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: u40u/aOeZ+RRL4KJrvrTS8FkHN9uL2WQvIRk+wN4g7U=)
                          4: oASD19FfafZ9Bk1cWcQplzT_eGk.roa (hash: 5KCTISkJIdPY0yxRXHdtjkMOZNoEuDC1m+xGq1kXxdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:67:be:c7:30:a2:e5:03:51:55:f8:42:db:3b:84:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: Sep  7 09:00:25 2025 GMT
            Not After : Sep  8 09:00:25 2025 GMT
        Subject: CN=a4185a4d26fc7ef59f4fd208b6a24602f318d6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:a8:07:be:1f:7a:39:1f:88:32:53:b5:7c:
                    96:a1:5d:c2:22:41:37:c8:d4:d0:53:91:9b:53:7e:
                    87:6d:30:db:fe:a1:c6:2c:41:4b:d7:02:73:11:23:
                    5d:69:8c:50:e1:5d:05:a2:b7:13:c7:b6:d4:e7:95:
                    a3:0a:38:35:7e:18:1c:e3:a1:f5:9f:3a:12:b2:08:
                    63:62:e1:a0:d8:5c:21:8d:72:ae:a9:e9:2a:a7:41:
                    8f:dd:28:0b:14:46:b5:30:0c:26:46:3e:41:f5:53:
                    f1:b7:4c:5f:9c:e2:fb:2d:cf:9a:6f:cb:1c:15:7d:
                    c0:e1:7d:11:fe:eb:35:e6:9a:a6:96:df:fa:5a:ac:
                    a8:f5:f7:ba:b1:20:d7:24:3f:f1:8c:bc:9a:4f:49:
                    05:4e:93:cf:c8:c0:05:15:6f:41:43:14:09:b9:fb:
                    3d:a1:f3:59:17:13:2c:0d:16:db:ac:0c:4e:2e:99:
                    8e:f1:0c:ae:3b:d2:61:ce:63:b6:0a:b8:01:d7:c9:
                    19:67:1c:25:02:c5:e1:db:d6:9e:97:c9:c8:73:e2:
                    02:1d:21:f9:34:1c:92:f4:c1:b7:9d:8c:39:2b:1b:
                    dd:4b:3f:13:47:d7:24:39:c8:38:53:e9:db:11:9c:
                    21:22:3a:c1:95:e0:d5:64:53:90:a4:ac:be:4d:d4:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:5A:4D:26:FC:7E:F5:9F:4F:D2:08:B6:A2:46:02:F3:18:D6:C7
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:bb:8d:fe:82:81:c8:a7:c6:a8:94:30:14:4c:69:60:31:92:
         bf:15:df:39:25:d2:c7:a9:35:2d:aa:c9:a4:0e:07:51:aa:cd:
         57:bf:6b:05:ed:9e:d4:49:81:23:00:c8:b6:1f:37:60:8e:e2:
         d1:cc:1d:f2:58:0b:0f:6b:4f:fa:6a:55:3d:77:c7:e4:f6:fd:
         d9:f2:7b:0d:46:00:f0:9f:5f:35:99:38:1f:67:c8:22:b8:d8:
         22:ae:a2:a3:87:9a:54:10:8f:8a:6e:0d:26:0c:2d:7b:20:dd:
         15:3f:4c:cf:2a:d3:38:c8:bf:55:88:19:aa:48:90:31:29:ad:
         db:47:bf:56:c6:9e:75:ab:ac:df:45:95:75:37:dd:77:57:5d:
         60:40:d7:05:e6:bd:e9:81:4b:6b:87:ed:7d:e8:9a:af:c0:c6:
         06:25:4f:a6:17:7f:41:07:dd:29:da:37:d4:e1:50:02:95:6f:
         16:09:ff:41:85:46:0b:25:30:3d:99:2a:96:5a:64:f5:5e:57:
         41:65:8c:62:61:10:a8:07:88:bb:f0:ad:0f:41:a6:4d:ea:22:
         92:cf:d9:ee:33:c7:c7:a3:e6:c7:cb:af:1a:85:6c:33:c4:51:
         1a:f9:7c:97:b4:52:f5:b9:0b:ab:39:78:81:0a:dd:17:ce:f2:
         73:06:a4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:19 2025 by rpki-client