Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
File:                     W8qreqGscUP4vII8c0sWc6CbuIA.mft (raw, json)
Hash identifier:          o5QONogSSSOKRa4Y7Z+CVrsUZ9CIiFdQRqRj+Q/NXy4=
Subject key identifier:   D0:C6:39:C3:CF:95:44:E6:73:17:DD:30:67:0C:CC:7C:45:40:E0:84
Authority key identifier: 5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80
Certificate issuer:       /CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
Certificate serial:       019922C37329C8358CA4E6F3582BAC7CC20E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
Manifest number:          13AD
Signing time:             Sun 07 Sep 2025 06:00:58 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:58 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:58 +0000
Files and hashes:         1: MAQmOa8DCOFnP1AvP10tvRzxgoU.roa (hash: js//CnDRXGCUWJu0u0iMvymBvRN/ZDLpajOTcw67kv0=)
                          2: W8qreqGscUP4vII8c0sWc6CbuIA.crl (hash: RXOTzNLLVjkOM9+zrDHdMo4w4/1YV5xnzMrjWR3KBMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:73:29:c8:35:8c:a4:e6:f3:58:2b:ac:7c:c2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bcaab7aa1ac7143f8bc823c734b1673a09bb880
        Validity
            Not Before: Sep  7 06:00:58 2025 GMT
            Not After : Sep  8 06:00:58 2025 GMT
        Subject: CN=d0c639c3cf9544e67317dd30670ccc7c4540e084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:83:a8:4d:32:93:0e:e6:5e:05:fb:65:cc:
                    53:cb:f6:b2:f3:17:95:40:32:6c:ba:d8:0c:44:48:
                    e2:89:6e:8a:1a:d4:e7:5b:41:af:c3:f2:77:9f:71:
                    05:fd:03:b9:84:bc:2c:8d:23:7d:1e:ca:df:1d:57:
                    13:19:eb:27:ca:2b:92:0f:65:bc:56:35:b5:c3:46:
                    34:77:6c:65:bd:89:db:1e:79:e0:42:33:1a:23:6f:
                    8d:9b:f1:85:14:2b:10:3b:cb:82:51:4c:67:95:6c:
                    7f:79:e7:87:b1:cb:e1:af:3c:d4:92:0f:ea:fb:b0:
                    c6:8a:71:37:d8:82:7c:b6:55:ec:59:52:a9:31:3a:
                    6c:58:58:9c:c5:d2:ff:80:95:18:f9:e1:3c:36:c5:
                    96:f0:d8:f5:27:17:88:12:89:60:31:be:50:55:4b:
                    9c:7e:42:1e:fb:cc:35:7e:68:3b:6c:05:d7:70:0a:
                    1a:69:80:cd:95:9d:f6:77:d0:ef:79:30:79:2a:4f:
                    82:82:97:2f:e2:ea:c2:6c:47:21:cf:af:7b:d6:0f:
                    57:2a:e2:1a:4d:16:14:03:f9:04:eb:22:2e:56:c3:
                    06:e8:ad:d9:11:e4:51:82:58:a7:22:4e:f7:76:b2:
                    7c:88:b0:7f:34:db:b4:31:ea:a4:83:d0:a6:ce:e5:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C6:39:C3:CF:95:44:E6:73:17:DD:30:67:0C:CC:7C:45:40:E0:84
            X509v3 Authority Key Identifier:
                keyid:5B:CA:AB:7A:A1:AC:71:43:F8:BC:82:3C:73:4B:16:73:A0:9B:B8:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8qreqGscUP4vII8c0sWc6CbuIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/98d41e-234e-45e7-82eb-3d1e0ee4b651/1/W8qreqGscUP4vII8c0sWc6CbuIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:a9:df:07:0c:07:e8:d6:33:45:ee:f3:dc:a7:8e:2d:a7:
         d1:42:da:7a:30:0d:5a:98:06:22:3d:fd:cf:81:e9:e0:38:c8:
         77:fe:74:c5:d5:02:3f:40:3a:49:d5:57:d1:b2:fa:5c:d8:f1:
         93:b2:17:4e:b3:4a:72:72:53:2a:3e:ea:68:07:8a:db:21:92:
         a7:1c:9e:1f:96:53:50:1a:8a:e8:f9:b8:63:fc:0f:cf:fa:e0:
         fb:86:fb:a5:b7:5c:fb:47:da:81:f1:46:65:82:fb:59:a3:9d:
         12:a8:0a:c9:69:ea:52:ea:6d:b7:15:d9:58:7e:94:79:36:03:
         d7:ab:64:85:d2:a9:b3:c6:77:e2:6a:c6:8e:67:8d:a1:ef:8d:
         fb:0a:3c:8f:89:4b:a4:8d:1e:ba:f2:66:79:25:bb:4a:e2:61:
         4a:1c:ff:82:37:97:de:f4:65:96:98:a9:22:ff:ac:d1:9e:1a:
         7b:a9:fd:a5:3e:3d:58:ca:39:05:46:78:20:3a:03:28:71:4b:
         3e:9b:a5:92:84:ee:ba:24:2d:37:b6:24:3d:c4:c7:94:41:9e:
         8e:c6:8c:84:62:c3:1b:e7:19:9e:ed:64:78:94:c8:2a:d8:e9:
         17:fb:a9:39:85:80:20:44:f9:ae:30:b9:73:89:a8:02:c0:97:
         6a:fc:e6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:10:28 2025 by rpki-client