Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File:                     wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier:          FCHzeya8+Dua3IoPEFzRacktobROd9B9ZrAllCDxwdQ=
Subject key identifier:   78:E6:7B:F4:7F:A0:9B:0C:F3:8A:CA:9F:48:7C:58:56:C9:EE:0F:2B
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer:       /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial:       019933128384CB54FD706F17411386874B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number:          1095
Signing time:             Wed 10 Sep 2025 10:01:15 +0000
Manifest this update:     Wed 10 Sep 2025 10:01:15 +0000
Manifest next update:     Thu 11 Sep 2025 10:01:15 +0000
Files and hashes:         1: lXUonjcSHCnymM91YbnZZiIsRN8.roa (hash: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=)
                          2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: UWniH2nzQs3ZC4JeTpdhdaSviCG3pGwnTi3agPWGPdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:12:83:84:cb:54:fd:70:6f:17:41:13:86:87:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
        Validity
            Not Before: Sep 10 10:01:15 2025 GMT
            Not After : Sep 11 10:01:15 2025 GMT
        Subject: CN=78e67bf47fa09b0cf38aca9f487c5856c9ee0f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3a:6b:3b:08:db:49:81:23:f9:9a:05:c8:cd:
                    84:8e:8b:29:b0:41:47:95:dd:63:38:8d:b5:75:8e:
                    4d:25:e6:ee:6e:db:80:51:91:ac:a6:0d:1e:3c:2d:
                    51:e6:99:e4:24:cb:fd:5d:66:a5:21:fe:06:18:53:
                    b0:09:0f:77:c4:de:47:1e:ef:bf:9b:db:a3:fd:0d:
                    8f:66:82:08:dd:2b:0b:b1:bb:af:18:89:6a:6c:8c:
                    96:73:f6:51:f5:df:e6:47:d8:e9:55:62:49:63:25:
                    67:c5:76:52:00:5d:0d:64:15:e4:7c:62:8c:0e:f0:
                    8d:f6:64:b3:2c:97:89:94:b3:7b:fd:5b:a7:8d:87:
                    aa:1a:1e:bd:9a:f7:0b:0a:25:19:59:12:a2:f4:b5:
                    fd:69:6a:fe:21:f9:06:a2:d7:4e:c9:52:a9:c1:be:
                    5a:93:35:72:d7:b5:e2:f4:bb:da:96:34:35:7e:fc:
                    07:a7:01:1e:57:f4:bb:52:de:d1:8d:27:18:02:02:
                    8d:08:b8:1e:cb:32:1d:39:13:ce:75:bd:2e:1f:ef:
                    70:94:cb:d5:65:32:58:38:62:5c:bd:bb:a2:49:c3:
                    35:8c:53:68:a4:91:e7:de:80:0b:e8:cf:42:f5:2c:
                    33:9c:6e:4d:9c:91:dc:26:13:45:37:8f:6d:c5:c3:
                    94:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E6:7B:F4:7F:A0:9B:0C:F3:8A:CA:9F:48:7C:58:56:C9:EE:0F:2B
            X509v3 Authority Key Identifier:
                keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:5a:77:9d:f2:ce:45:bf:50:97:01:b0:1c:42:61:91:b3:
         10:a3:7b:43:f6:f8:fa:0a:a3:d5:5d:2c:f3:7f:8b:90:7e:dc:
         85:f0:6a:c5:c4:1b:33:63:d8:db:1c:d6:0b:d7:7d:9a:84:e8:
         92:8c:52:d4:30:88:09:2f:45:a0:da:76:d3:01:32:05:b1:2f:
         5d:d9:38:92:d0:f6:69:8e:b1:55:26:dd:83:53:aa:45:4b:f2:
         de:ad:a8:60:ca:54:9c:be:44:68:05:a2:de:4c:15:e5:29:0b:
         29:00:fe:43:75:2e:cf:2e:57:a0:27:e5:6d:46:9f:32:53:6e:
         e1:15:d5:68:23:7a:17:fc:e8:42:6f:ff:bd:29:10:3e:11:55:
         c6:24:2d:1f:7a:fa:f2:1e:3c:00:88:55:1e:cf:72:2a:fa:68:
         86:6e:db:60:09:9b:7f:03:32:53:c9:46:3e:e2:59:c3:d7:68:
         68:fc:1e:33:9c:6e:8a:1f:d0:c5:13:74:06:3a:04:2e:39:4b:
         94:62:49:1b:da:1f:50:c3:d9:66:c4:bf:c2:2d:e4:89:7f:b7:
         76:a2:62:e1:2a:6a:f3:7a:a9:b5:38:b6:dc:14:36:18:fa:53:
         11:c6:dc:f5:45:40:ef:93:83:19:a9:d2:30:ef:5f:3b:1d:f0:
         d6:07:b2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:27:09 2025 by rpki-client