Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
File:                     WXtExKeTHGam_56S27MspyPUzPc.mft (raw, json)
Hash identifier:          7APUP0ACR4wxBH3Bucpd0g6cXOaIdM8i0rX55nZ1aSc=
Subject key identifier:   73:C3:07:4C:3B:51:7E:0A:73:2F:8B:A5:0F:28:12:FB:98:F7:BF:91
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Certificate issuer:       /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial:       01991A9C557B8FB1588B043DEBE3FAAA9CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
Manifest number:          1671
Signing time:             Fri 05 Sep 2025 16:01:16 +0000
Manifest this update:     Fri 05 Sep 2025 16:01:16 +0000
Manifest next update:     Sat 06 Sep 2025 16:01:16 +0000
Files and hashes:         1: 27thg2xR1ns9dxvQknh6OQz2HQE.roa (hash: 8utEVwtgJM/87D9G8Lvp0Zap9PR/R1pmHN8nnbsDNS0=)
                          2: 7EOkJISYh1lPEvtjEsSd_uB091A.roa (hash: iyJBe6KDY2jgmtE4ar31VWghuSb4Z0TN62CuRa0HGDo=)
                          3: IsbNRUwtF97TzTNIl7-2xG06qDM.roa (hash: ZJvUiTXJS17zRJXm+MWYGG6p9Wcs9KOAFeVCvx+kP0Q=)
                          4: WXtExKeTHGam_56S27MspyPUzPc.crl (hash: 91uOTDYxXG8CwrRUyMIRYqHWD/diz6Ua4HiW8OIAmuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1a:9c:55:7b:8f:b1:58:8b:04:3d:eb:e3:fa:aa:9c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
        Validity
            Not Before: Sep  5 16:01:16 2025 GMT
            Not After : Sep  6 16:01:16 2025 GMT
        Subject: CN=73c3074c3b517e0a732f8ba50f2812fb98f7bf91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:be:2f:7b:c9:db:3c:ec:5a:a8:b1:d5:16:
                    8d:98:75:94:b7:ab:2f:ef:e3:a5:e5:96:95:c2:a3:
                    a4:6c:c5:31:10:69:4e:b8:7d:06:fe:d6:19:59:c2:
                    4e:68:d3:bb:b7:53:2e:1b:09:27:8e:42:8e:e7:6a:
                    55:5d:7e:b6:87:3d:f4:2e:c5:4d:95:db:81:80:39:
                    ad:ab:3d:db:47:c8:bf:8d:29:02:b7:e6:e0:19:af:
                    7e:0c:93:d0:9a:9c:43:ca:97:cb:9e:e7:2f:83:05:
                    f0:c1:7a:4c:97:db:05:40:bd:4c:f1:2c:de:50:6b:
                    92:5d:b0:13:77:4b:ac:9b:bd:07:3f:4a:4c:1d:60:
                    92:76:20:34:e6:7f:d2:16:34:27:a0:f5:22:f9:f8:
                    03:49:6b:19:aa:81:7f:6f:df:a7:1c:82:28:51:45:
                    9d:e1:68:c7:7e:5f:f5:19:6d:45:e4:cc:9b:4d:cd:
                    d6:76:48:ee:9e:2c:81:09:38:5c:ee:ac:04:55:59:
                    69:a9:dd:82:68:56:b1:f4:20:6e:05:91:1a:16:bc:
                    74:28:7b:d2:03:29:02:e2:35:27:0f:ca:d2:33:08:
                    5d:b9:3b:a2:9f:67:43:ea:b3:af:5b:e6:69:a9:71:
                    6d:99:c0:ed:75:26:22:04:61:56:a2:e8:de:60:b2:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C3:07:4C:3B:51:7E:0A:73:2F:8B:A5:0F:28:12:FB:98:F7:BF:91
            X509v3 Authority Key Identifier:
                keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:83:02:f3:d2:e1:99:3d:ff:56:fe:37:c6:22:0e:bc:ac:8f:
         04:56:6b:96:39:3b:af:2f:89:e7:96:4b:77:7a:29:fa:c1:c7:
         b3:3c:9f:61:0e:d9:47:09:44:d7:5d:fb:89:3f:f8:ea:50:a4:
         cf:e1:06:cc:8e:ca:81:9f:2d:30:1a:83:80:6b:c9:62:30:13:
         9c:1f:83:47:ef:3b:65:85:5a:38:51:92:8c:55:be:e8:32:79:
         88:f6:33:47:10:04:44:94:07:32:a9:d1:66:24:fb:89:17:3e:
         bc:22:39:ca:7b:84:fd:89:d5:e9:fb:c9:aa:f4:c5:c8:63:f3:
         95:3f:a0:1f:c0:2b:26:84:9c:a0:a0:01:7a:8a:e4:21:e8:64:
         47:97:a2:6e:8e:0c:87:94:a4:f7:ba:e8:61:d0:68:43:51:05:
         a1:eb:9d:3e:65:f1:35:3c:a4:3c:13:83:56:a9:6e:15:f2:7f:
         de:0a:7a:ea:29:f2:7c:a0:f9:42:9b:5c:dd:04:79:a5:da:c6:
         6d:7d:42:1c:8b:6f:85:dd:61:3d:09:57:c1:89:d0:5b:b9:25:
         fa:26:f0:e6:e2:1d:77:59:eb:93:d4:6b:d2:89:03:67:77:e7:
         65:14:bd:5d:b2:78:ef:25:9b:af:9b:17:de:23:67:cc:a3:c6:
         31:2c:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:09:08 2025 by rpki-client