Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
File:                     wmxJkkbYEuUuy6e39V4m7a71NG4.mft (raw, json)
Hash identifier:          4oRO3M1VFY0dCMF9DrKeFLoO0pnYSgxDQsem99k41+k=
Subject key identifier:   AC:94:60:45:43:E8:27:48:11:EA:3E:D1:D9:50:3D:0D:D3:C1:09:ED
Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
Certificate issuer:       /CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Certificate serial:       019921E7BF55453D9D0FAAF9E8D1D2989F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
Manifest number:          0955
Signing time:             Sun 07 Sep 2025 02:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:59 +0000
Files and hashes:         1: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (hash: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=)
                          2: wmxJkkbYEuUuy6e39V4m7a71NG4.crl (hash: tnPrTR8ebEIJEWIXg0oQmnIDFd7LNZN1fOfuSVKj6hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:bf:55:45:3d:9d:0f:aa:f9:e8:d1:d2:98:9f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e
        Validity
            Not Before: Sep  7 02:00:59 2025 GMT
            Not After : Sep  8 02:00:59 2025 GMT
        Subject: CN=ac94604543e8274811ea3ed1d9503d0dd3c109ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:89:9f:bc:0b:14:f9:d1:7b:93:83:0e:44:1f:
                    53:e9:92:ba:b3:4f:8f:69:2a:41:ae:dd:fb:86:d4:
                    27:fd:ac:9c:73:56:77:30:6d:86:92:00:50:09:df:
                    08:34:fa:d7:2c:16:1d:28:ab:81:26:f2:3a:50:f9:
                    fa:64:4c:6b:ef:a3:b0:02:e3:0c:67:b5:65:ae:bc:
                    07:d2:88:7a:5b:1a:68:32:99:2a:c2:ac:73:5e:56:
                    1f:01:66:28:d0:33:37:9f:a6:2a:77:98:51:5b:c1:
                    9a:98:68:9c:33:b8:28:2b:7d:95:57:c5:46:41:04:
                    2e:58:b0:b5:84:b7:f8:f8:1e:17:02:0d:eb:c9:6a:
                    46:a3:34:81:f8:22:20:a4:a8:19:f3:2d:c1:07:ef:
                    66:3c:e1:a6:3f:cf:84:cd:58:b5:dd:0e:01:6e:9b:
                    c4:a0:69:50:6f:f7:7b:f6:22:b4:42:11:77:d5:c0:
                    8b:cb:ba:30:c6:c1:29:5f:7b:76:5a:ca:5c:e7:74:
                    6e:0d:32:5a:89:8b:07:c3:19:b5:69:17:92:68:22:
                    9c:5f:c0:d4:31:3f:83:aa:aa:c3:85:28:10:bf:8b:
                    9a:7f:04:cb:71:d3:06:13:0c:14:fa:21:d0:71:30:
                    cf:1c:66:ef:18:93:77:d0:26:67:c0:f6:a9:f0:71:
                    2b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:94:60:45:43:E8:27:48:11:EA:3E:D1:D9:50:3D:0D:D3:C1:09:ED
            X509v3 Authority Key Identifier:
                keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:22:7a:e5:6d:87:48:b5:02:6b:68:b7:51:57:20:07:1b:3b:
         17:ec:1c:03:1c:a3:b0:6a:b7:ab:db:4e:c6:99:61:7a:09:a2:
         87:45:14:3d:5b:c4:2d:d4:09:32:c1:89:38:10:8b:47:ea:e4:
         a2:a6:a8:52:43:2e:7a:a9:18:f6:96:9a:e0:35:11:e1:ed:d2:
         d3:47:13:ee:cb:53:fc:62:73:ba:45:2e:bd:71:cf:a7:13:7a:
         22:b6:fa:ab:92:ba:1e:3b:85:07:49:99:af:9f:64:48:ce:d2:
         4d:6e:7c:8b:d7:f2:29:28:66:fc:72:6e:23:7a:a0:c5:fd:38:
         df:a1:e1:f7:2c:15:f7:1a:69:27:ab:da:c2:c1:3c:c8:3b:b0:
         58:02:c2:01:ac:b6:98:da:58:e6:df:92:b7:01:1d:a7:d3:5c:
         0b:05:3c:e8:f5:32:84:b2:2c:24:57:c5:f0:c5:dd:2c:e6:be:
         6c:6a:95:85:b0:3b:b5:84:3e:a2:fc:9b:ec:91:36:bb:4c:c8:
         84:49:bc:f1:45:ea:0a:3a:77:19:ef:cd:46:b2:66:d7:38:bf:
         06:03:4f:fe:69:42:1f:6f:ff:42:90:3d:78:cf:54:e8:e1:22:
         60:80:3a:ab:a8:7b:ef:33:e6:53:f8:d6:b2:c4:40:2f:3f:3a:
         30:be:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:31:37 2025 by rpki-client