Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
File:                     rwsdp573_B75WWLcigHyuNSzUr8.mft (raw, json)
Hash identifier:          04gwm/PsTBdzvWzsVn0Zn4l6BUlTtWbce1d1cyTo/4I=
Subject key identifier:   4A:55:5F:B6:67:36:60:0C:5E:74:6C:B4:AF:DE:D0:97:5F:94:35:D8
Authority key identifier: AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF
Certificate issuer:       /CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
Certificate serial:       0199179ACE10B86F7ABE5310D14F584D582E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
Manifest number:          166A
Signing time:             Fri 05 Sep 2025 02:00:45 +0000
Manifest this update:     Fri 05 Sep 2025 02:00:45 +0000
Manifest next update:     Sat 06 Sep 2025 02:00:45 +0000
Files and hashes:         1: U5_8oTuDnte69dU3vdG0YoeLHOc.roa (hash: rv7n9SJHDz/xEcEFGYa9oVX9oX3xMxXlPJsPEJruS+w=)
                          2: rwsdp573_B75WWLcigHyuNSzUr8.crl (hash: Tgw16qT19x+XmXWQiHDhg+2UwCe2ouFuxCjJyS0YsXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:9a:ce:10:b8:6f:7a:be:53:10:d1:4f:58:4d:58:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
        Validity
            Not Before: Sep  5 02:00:45 2025 GMT
            Not After : Sep  6 02:00:45 2025 GMT
        Subject: CN=4a555fb66736600c5e746cb4afded0975f9435d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:05:c9:2a:dd:dd:39:5c:6e:b5:54:e0:7e:
                    ba:f3:11:fd:52:d9:f7:1c:61:5e:82:bd:0f:26:6f:
                    b0:2e:63:9c:11:b6:52:2d:bd:25:28:18:d7:24:0e:
                    81:eb:8c:cf:f4:c9:df:01:e5:d0:22:78:c2:ec:02:
                    98:76:a5:ad:09:8d:04:91:88:bf:b6:bf:c6:69:5f:
                    7b:87:c0:9d:dd:b7:06:a4:1e:30:07:2b:ac:de:f0:
                    02:b8:05:a3:3d:5b:b1:70:a1:5a:3b:0e:cf:29:43:
                    f6:8e:da:a1:15:61:8f:1b:03:df:9c:f0:c4:bc:5e:
                    1c:24:18:f2:d1:e2:99:3b:0d:1e:c8:bd:19:b0:f9:
                    38:24:c4:11:9e:73:44:bc:05:f8:4e:61:aa:ac:f9:
                    3c:07:1c:b1:47:2a:b7:21:a1:34:06:c2:ee:ec:fc:
                    e3:e8:5e:01:50:b6:1a:25:c7:58:3f:b0:d8:f4:8e:
                    b6:0d:3e:36:3c:39:aa:fd:88:cd:7f:0e:ea:16:bf:
                    a0:47:de:3c:6f:35:f0:e0:22:5b:3a:36:3c:cd:6c:
                    e7:b5:8c:c1:90:29:3b:ca:2e:ae:05:70:bc:02:3a:
                    e2:c3:07:fe:0f:33:6c:c5:82:a5:3f:c4:c1:b9:45:
                    70:d0:91:2f:9e:bb:a3:fd:3a:66:8b:3e:bb:d1:39:
                    70:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:55:5F:B6:67:36:60:0C:5E:74:6C:B4:AF:DE:D0:97:5F:94:35:D8
            X509v3 Authority Key Identifier:
                keyid:AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:79:14:b1:2c:16:87:58:7e:70:54:a6:4d:10:26:65:7a:de:
         c6:96:dc:71:21:a2:63:93:de:3e:9e:af:e3:ca:ad:6c:88:66:
         da:68:81:86:69:5a:6a:cb:4d:0d:c5:e7:65:cd:d9:d5:8d:82:
         27:76:1c:18:f3:ab:30:d4:c3:f1:f6:bb:f0:f9:0b:2c:be:1e:
         b0:75:d3:5b:7e:5c:fb:b0:17:32:3b:8f:d5:8e:26:67:b3:85:
         dc:43:b3:ea:f6:53:2b:18:3d:26:cf:25:a3:1e:8a:de:a0:e1:
         df:f9:05:6c:d3:5b:6d:d2:64:61:d5:b3:de:b8:44:63:9a:60:
         03:14:de:2b:4b:30:bc:21:bb:ec:bf:a4:28:c0:f7:df:74:7b:
         8a:55:48:67:14:19:a3:af:71:1e:9b:82:c3:15:22:bb:14:14:
         1f:b4:ff:5b:3c:d4:45:d5:a3:46:18:a9:f3:63:da:ae:5d:07:
         6d:64:be:58:25:8c:a2:f6:87:1e:c3:a6:98:33:c0:44:25:7c:
         96:ab:3b:b8:c7:61:b2:99:de:56:97:02:35:b5:d1:c3:a0:2e:
         ff:db:6b:c1:24:dc:f2:3a:1b:f3:c6:8a:20:12:11:b7:93:09:
         a2:03:a9:2d:15:2a:24:e1:5a:fd:e5:f8:82:55:33:f7:6e:e3:
         94:8b:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:21 2025 by rpki-client