Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
File:                     wtgszwyN6n1_atcujmJGLXviDVY.mft (raw, json)
Hash identifier:          I8fs6wXVN3SoUXLY4SnFzNd0wzbQUwC4zCMwzA5J0v0=
Subject key identifier:   9F:88:26:B3:D8:D8:D5:BC:9C:42:69:64:87:A1:AA:14:11:C1:CB:50
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       019921E73341F64810D52400A41690AE2A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
Manifest number:          1679
Signing time:             Sun 07 Sep 2025 02:00:23 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:23 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:23 +0000
Files and hashes:         1: 56E2eRNFxzpXqTECZSNhq9NrPOQ.roa (hash: kVqvgKF+nZSGal/AwDKY90LYsegDO41+Dxp8TZ0XdP8=)
                          2: JtbkknZoz-ZpYkGR5Faik_dT6m8.roa (hash: CKgz0QGH5sNSVcZST2h0jpMtQH08uuEFFd8ZyzC9G3o=)
                          3: ltRYivrHDrWNdxne_A9FIv1LJlY.roa (hash: qB1Eut1IyAFg4Lz5YzqH97WbuLNnEkbs/hF3c3T/wFo=)
                          4: wtgszwyN6n1_atcujmJGLXviDVY.crl (hash: XdJsFTX2FMWwIxR0y+AaGAq7aljNC3gFS3RDdhSSQEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:33:41:f6:48:10:d5:24:00:a4:16:90:ae:2a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Sep  7 02:00:23 2025 GMT
            Not After : Sep  8 02:00:23 2025 GMT
        Subject: CN=9f8826b3d8d8d5bc9c42696487a1aa1411c1cb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:97:92:6a:61:ad:2c:6d:c3:d0:f8:47:aa:
                    a2:ff:c8:4e:45:0e:e6:86:af:68:07:41:9c:21:50:
                    16:56:2a:5d:66:41:21:4d:b6:d4:64:84:06:da:2c:
                    bc:ff:09:6d:2b:0a:32:73:38:08:5c:57:bd:53:cf:
                    5f:aa:5c:61:f4:41:55:2d:b6:65:4f:77:07:24:24:
                    ca:43:c7:12:78:29:59:17:67:e0:29:ff:38:26:0d:
                    ed:d9:08:78:60:b8:6e:52:74:82:ed:37:f1:71:3e:
                    ff:4e:81:02:7c:f8:fc:85:9b:b3:7b:ae:6e:e4:85:
                    34:4f:15:d1:9a:da:4a:8a:0a:94:4d:da:02:95:d3:
                    3a:64:71:3c:57:f0:77:5e:ee:3b:05:99:db:c2:b7:
                    89:06:fd:6e:39:8a:8b:10:01:bf:21:09:c0:e7:36:
                    bb:92:3e:86:2a:80:50:9c:31:bf:5e:b2:6a:34:53:
                    8e:78:57:dc:9d:f0:a8:fb:b6:19:d3:f4:a9:00:67:
                    88:c9:4d:f9:d2:41:f0:ad:d6:83:cc:b4:6d:d7:a4:
                    dd:fc:72:cf:71:2c:2e:d1:bb:b2:a0:4c:1b:1e:f5:
                    af:61:3e:e2:27:0c:4f:73:27:0b:86:63:96:b4:8e:
                    23:cf:dc:4b:d1:e2:8a:c9:91:11:c4:07:86:94:96:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:88:26:B3:D8:D8:D5:BC:9C:42:69:64:87:A1:AA:14:11:C1:CB:50
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:88:33:f3:86:57:05:a4:04:21:39:77:8d:e5:f5:48:54:fe:
         4e:b8:26:65:76:a6:d7:97:02:59:e6:c7:d6:79:5e:f7:51:d4:
         04:b7:4f:ab:7a:a0:6a:2d:25:17:2c:89:a1:1f:5d:6f:ef:a9:
         d0:a1:ae:f3:3d:7c:9b:5f:cb:dd:9b:b0:ef:7e:a7:cb:ce:a8:
         66:aa:d8:c8:5a:48:2e:02:80:93:14:b2:b6:b6:36:df:55:33:
         1e:94:db:2c:ba:99:c0:0d:19:92:d6:a1:cf:76:c8:06:0d:09:
         ef:11:86:d2:58:71:f1:3c:3c:41:74:ae:72:b0:6d:da:87:05:
         7c:25:7e:4d:aa:88:db:7b:79:d8:b8:12:f1:ce:33:fb:ce:46:
         71:6e:20:20:92:a9:42:d0:ff:b2:44:04:62:e1:ce:84:ad:5e:
         91:fd:f1:6c:77:01:85:32:59:b7:a8:1b:22:bc:4e:00:6b:ae:
         e3:eb:0f:fd:44:b2:20:ba:49:8b:80:e3:e7:cf:14:ff:89:68:
         7b:b1:49:a2:d5:de:9f:57:da:47:ea:00:a9:a0:b0:5f:83:e3:
         af:8a:83:8f:3a:29:30:0c:b8:36:47:86:4e:3f:f0:af:d7:c2:
         07:0b:42:a1:4c:95:c5:f8:e2:fd:5f:89:5a:82:28:cc:52:a2:
         90:46:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:29 2025 by rpki-client