Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          BZoVM2W3q3FzBMMlsqi3cpIA+Yl7czh1BIwIISn4H50=
Subject key identifier:   CE:37:8B:3A:08:59:95:56:37:D9:B0:FA:84:7A:AF:F7:CA:A8:31:80
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       019922FABCBBA9005D8378A43A638EB20932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          10FA
Signing time:             Sun 07 Sep 2025 07:01:21 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:21 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:21 +0000
Files and hashes:         1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: 9N7OLlky2sNzEJSYJjbWcwJ1OtipSBxZNdKCPMdK49g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:bc:bb:a9:00:5d:83:78:a4:3a:63:8e:b2:09:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Sep  7 07:01:21 2025 GMT
            Not After : Sep  8 07:01:21 2025 GMT
        Subject: CN=ce378b3a0859955637d9b0fa847aaff7caa83180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:1b:2a:3d:28:df:c2:09:68:e0:57:ac:8c:
                    f7:d7:1d:0c:dc:ed:d3:a4:d2:14:6b:1f:90:4c:24:
                    b4:ef:39:9e:ed:55:d8:0f:25:ac:26:34:34:1f:e9:
                    e1:72:c2:61:c1:df:8d:28:0f:25:2c:91:48:90:b8:
                    8f:fc:97:d2:f6:8b:40:7c:b7:da:c5:91:91:e5:36:
                    81:47:b8:c5:b7:9c:3a:8e:95:2a:53:1a:65:db:05:
                    0d:d5:36:74:18:0d:fe:00:b8:eb:b9:36:4a:34:f2:
                    61:0c:bb:17:c9:bc:12:ec:45:c7:93:ee:17:79:43:
                    52:c1:75:4e:3c:54:50:a0:3d:6f:87:dc:10:55:f0:
                    fc:a7:c0:1c:00:d2:42:0c:f2:97:f1:c3:a1:5e:10:
                    d0:21:28:20:78:75:d4:37:62:c7:55:f9:5c:87:c1:
                    43:cc:60:5a:7f:20:dd:0b:9d:a1:b8:ea:c6:91:fe:
                    00:78:e2:1a:07:29:da:49:b8:8f:61:43:8f:8e:f4:
                    66:be:05:52:2f:75:81:03:ce:27:98:e8:51:08:73:
                    55:05:92:ad:26:bb:2c:03:e8:be:49:ff:6c:de:89:
                    e0:48:4a:65:c3:48:77:6e:ef:9d:5b:52:7d:88:b8:
                    ab:d2:36:b6:c5:e6:fb:77:47:53:e0:7f:5e:ca:86:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:37:8B:3A:08:59:95:56:37:D9:B0:FA:84:7A:AF:F7:CA:A8:31:80
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:34:91:39:d2:7b:6a:2b:01:85:2b:cf:85:c1:06:67:21:2e:
         fe:d5:29:e3:2b:e5:a3:44:a0:5e:ca:48:c6:91:64:ed:ec:ed:
         ca:45:97:57:06:ea:da:c3:3e:6b:9d:55:c0:54:1e:ef:e0:30:
         50:06:ef:c4:b2:f5:28:28:bc:b9:91:b0:fc:1b:d7:59:8c:eb:
         eb:57:09:ab:57:56:5e:e3:04:8e:d1:8a:7d:ca:c1:33:71:ae:
         0d:4c:1d:71:7c:2f:75:a1:1d:83:de:b5:1c:f2:26:72:20:ea:
         db:07:eb:d4:67:51:6a:67:3d:7b:aa:13:ce:1a:ca:6e:e3:a1:
         4d:8f:9b:3a:e7:57:65:74:32:a7:cf:3f:85:15:ea:aa:5e:07:
         6c:7f:cf:15:98:19:5e:57:6e:80:25:37:7f:ee:6e:ff:61:da:
         6e:14:b5:f4:14:0a:87:51:22:53:e5:ff:e7:b9:39:1c:3c:b1:
         c7:6d:ba:4f:84:5e:27:18:fc:36:70:46:ea:35:85:0c:d7:2e:
         73:d9:21:f9:3d:e7:b9:37:64:9e:a2:cf:b7:1f:d8:5c:5b:bc:
         c1:82:23:ac:36:32:12:e9:d8:b7:f3:a1:d5:1c:bb:d5:df:c4:
         e2:d8:b8:63:69:76:a8:de:3e:1b:98:0c:23:26:b6:da:35:4a:
         22:bc:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:14 2025 by rpki-client