Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          otnksbXmQH6cRzs5OtynDfx8nJqZ2/6JTicSflIaT5o=
Subject key identifier:   34:3F:00:D8:95:C6:D1:76:69:8A:F7:ED:5B:5A:17:1C:9F:C4:D9:87
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       0199518A4CA61F8F1D3610A7DF90F9E59403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          1696
Signing time:             Tue 16 Sep 2025 08:00:42 +0000
Manifest this update:     Tue 16 Sep 2025 08:00:42 +0000
Manifest next update:     Wed 17 Sep 2025 08:00:42 +0000
Files and hashes:         1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
                          2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
                          3: i5mGJT0yJZDnIoQ1wNKAWKtKyaQ.roa (hash: RYHnkpcFD3LGUlEQEfMbI20B/0yaDUu4RMrbiJV8nWc=)
                          4: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: LuiwJFUqgXP2Z+FyALSqRMpD4FxBkgv/FwdB593VF9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:51:8a:4c:a6:1f:8f:1d:36:10:a7:df:90:f9:e5:94:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Sep 16 08:00:42 2025 GMT
            Not After : Sep 17 08:00:42 2025 GMT
        Subject: CN=343f00d895c6d176698af7ed5b5a171c9fc4d987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:01:e3:67:fe:ba:99:b8:8b:4f:cc:fc:6c:
                    ec:b8:8d:3a:9b:d5:3a:9b:73:b0:0f:66:60:46:ce:
                    d7:af:df:9d:51:de:fb:f0:9b:5b:8e:36:0a:b0:6a:
                    dc:d9:3b:a4:e6:af:a2:ad:d0:82:3a:ac:da:3e:b1:
                    8c:d5:c5:f4:71:16:52:ad:96:da:af:22:2c:a1:ac:
                    57:ea:84:e1:1e:e1:16:6a:db:d1:c1:7b:d8:39:72:
                    4c:d0:e1:ee:14:64:47:68:d0:f9:7b:7c:41:55:ba:
                    1b:87:32:13:ae:f7:c4:a3:ae:54:3e:a3:44:61:9d:
                    44:23:67:4e:6d:de:07:48:03:f8:23:15:be:d6:db:
                    ce:b5:25:e0:68:2d:20:4c:00:b5:af:e3:e0:6f:01:
                    a3:f7:45:f4:ce:f7:8f:02:9c:e9:db:15:df:87:37:
                    2b:bf:fc:6a:47:d5:cd:6d:35:8b:52:b3:84:1c:a2:
                    d4:45:b1:4d:33:74:ff:ab:4f:90:98:06:29:29:94:
                    8e:2b:42:b2:15:88:21:7f:1d:0a:40:e0:d1:0c:3a:
                    18:f8:f0:04:ea:b9:a6:a0:26:5f:84:08:27:42:bb:
                    46:b6:00:53:5f:6f:a8:90:dc:80:70:63:ab:bb:09:
                    93:65:d9:16:28:04:a5:51:e8:dd:e2:a5:81:82:23:
                    c1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3F:00:D8:95:C6:D1:76:69:8A:F7:ED:5B:5A:17:1C:9F:C4:D9:87
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:1c:09:e4:d7:72:73:c9:eb:ee:27:c0:86:2d:50:14:3e:
         23:e1:b0:39:94:4a:95:37:de:98:de:d7:28:e9:9e:eb:36:56:
         15:4b:c5:a7:21:e6:df:c2:e1:38:69:71:c8:53:70:ec:1a:b1:
         2f:fa:1c:d5:d0:05:fe:8d:ab:74:ca:79:73:d9:77:b7:10:17:
         b5:38:02:f0:35:4d:34:69:da:f6:87:ae:d6:da:15:d1:aa:15:
         c7:d1:31:bc:0f:96:9f:05:fd:99:72:3a:34:69:b4:b8:04:f6:
         ab:90:04:96:f5:6c:cd:c9:98:80:dc:fb:ec:13:25:84:fa:75:
         1b:0a:e8:38:2c:06:71:8b:e8:44:a9:3a:86:1c:41:06:a9:26:
         14:59:b9:1a:c8:03:eb:37:5e:d2:5e:88:8a:a6:56:77:8c:68:
         71:81:3f:f9:b8:86:ce:8c:eb:be:bb:df:7a:9a:44:7b:b9:b2:
         5e:6c:fc:a5:15:26:49:d6:18:9e:1b:a7:b1:73:de:79:e7:5d:
         b9:cc:d3:9b:ce:98:97:84:32:4d:7e:5c:18:45:ef:79:70:32:
         a8:c2:bf:67:5b:e3:ea:c7:89:4b:d3:44:7a:13:a4:9c:a5:25:
         ee:9e:a3:19:50:2a:0e:e9:01:14:1a:0b:80:b3:55:03:8c:00:
         43:1b:80:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 13:37:44 2025 by rpki-client