Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File:                     wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier:          e4VkALKytm2+r5Clgbp0ChBL4idC4wPfPHjIxKt1sQ8=
Subject key identifier:   85:C8:3A:F7:6A:37:53:EC:CD:DE:B7:94:8A:B0:AC:17:E4:F0:B7:65
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer:       /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial:       019922555A68A56FB739F068290877C42E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number:          1600
Signing time:             Sun 07 Sep 2025 04:00:42 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:42 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:42 +0000
Files and hashes:         1: h69ZP3KGJST0X8t2H0a84vHIE78.roa (hash: J750FBzG47GmCm3WoGWQrJESMcKlRjC1SRSpKQ3Vchw=)
                          2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: cmuTUYiinED7MbtKJ8LagE6/2gd0d26nsxjFgDyOFkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:5a:68:a5:6f:b7:39:f0:68:29:08:77:c4:2e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
        Validity
            Not Before: Sep  7 04:00:42 2025 GMT
            Not After : Sep  8 04:00:42 2025 GMT
        Subject: CN=85c83af76a3753eccddeb7948ab0ac17e4f0b765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:29:e0:fe:5c:53:5c:e3:f3:72:95:73:55:
                    08:8c:33:6a:f5:0f:89:4a:c6:75:ed:75:bd:d2:1f:
                    ae:85:81:1f:21:5f:e9:0e:be:03:06:07:ec:01:af:
                    5a:d6:d2:cb:e0:4c:59:c0:a6:b3:aa:ae:de:8b:2f:
                    40:da:e9:eb:ca:1e:f1:22:49:c0:6e:3d:ff:37:e2:
                    16:56:b5:69:a9:c9:b5:bc:a2:54:c4:94:98:2b:e4:
                    5e:50:e3:80:0c:39:3c:1c:bf:89:67:f2:1a:b6:60:
                    28:2e:2d:87:22:13:5f:13:0b:cd:d3:f6:b8:e6:1b:
                    2d:a0:fc:71:eb:b3:9e:d9:e0:3d:e2:0e:c7:c3:ed:
                    0f:5e:2d:af:f8:28:e9:6f:30:d1:44:e7:6e:30:16:
                    91:a6:62:8f:3f:c4:ba:de:f3:c1:79:bc:5c:88:e3:
                    82:41:22:0f:c0:96:8c:1a:0f:99:b6:30:0a:ef:c7:
                    11:76:db:ee:f9:0f:44:54:2a:17:1a:fc:ed:d5:36:
                    ca:e1:1b:d9:e9:0c:fb:43:de:da:91:59:9a:26:42:
                    35:ee:ab:15:0b:1d:3c:83:b3:17:68:9a:3c:d9:bb:
                    be:34:3d:50:03:3d:61:1b:12:74:61:17:a5:77:2b:
                    61:1f:e7:e0:a5:8f:52:5f:26:c0:8e:7a:d4:03:ab:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C8:3A:F7:6A:37:53:EC:CD:DE:B7:94:8A:B0:AC:17:E4:F0:B7:65
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5a:5d:07:e0:f6:2c:cc:ed:26:5a:ad:86:30:1d:60:f2:e8:
         64:ca:7d:ce:16:f8:70:37:8f:2b:fd:98:b1:7f:3e:d2:3c:e4:
         15:65:92:bd:bc:83:6b:a4:64:b4:7f:9c:b6:3d:a6:f4:a3:12:
         ff:ed:29:94:7a:b4:c8:5e:14:ca:90:dd:8c:21:5c:54:3b:75:
         20:ef:72:56:6c:41:eb:c6:2f:c1:d3:9c:68:8e:d7:1f:b7:29:
         33:82:fa:78:e1:3e:30:ca:1a:33:d5:b0:75:73:c5:2b:ff:77:
         b6:9b:2a:86:68:6f:50:11:df:46:45:d3:ad:48:86:e6:26:ef:
         1a:88:df:16:91:63:02:cd:27:f5:85:7d:48:5e:29:01:20:5d:
         83:ee:6c:b7:57:4a:e9:65:6d:62:53:ae:de:a5:c5:57:80:b9:
         63:ed:18:76:6c:04:af:96:15:1f:26:d8:fd:8f:93:0e:e8:84:
         ea:62:8c:b5:38:a2:c3:1b:f1:a1:04:03:40:da:78:58:04:4f:
         db:d9:21:73:01:f0:60:17:25:16:73:f5:5c:6f:74:bb:b8:df:
         ff:d9:63:69:09:99:18:6c:87:92:a3:49:5e:be:ac:5a:00:a9:
         ab:57:48:60:af:51:bd:fd:d6:ca:63:4b:83:f0:08:fd:4a:42:
         68:17:ce:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:26 2025 by rpki-client