Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
File:                     WiHxhbSzhmdV26ABC88QuUqKpmw.mft (raw, json)
Hash identifier:          j7PtJa/18QjaBlLe1MFTyzNejO3coD357OpQYDufYqE=
Subject key identifier:   BD:39:97:57:15:A6:C7:28:50:28:A3:A4:D7:0F:08:6C:1D:A2:69:C6
Authority key identifier: 5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C
Certificate issuer:       /CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
Certificate serial:       0199221F3DD058FD120503B3FE44A86D4D4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
Manifest number:          1614
Signing time:             Sun 07 Sep 2025 03:01:36 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:36 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:36 +0000
Files and hashes:         1: MT9vPInoaysz5wep7peoXlzT3YM.roa (hash: 3Nc11g2iFkPxsowhqR+tamDkBXdlZBe0DtJ8wPuCW4E=)
                          2: WiHxhbSzhmdV26ABC88QuUqKpmw.crl (hash: QtZg7YFlR3fcl0Q+AbLTaSZ5Qg9xbwbWA1AUoNV1DMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1f:3d:d0:58:fd:12:05:03:b3:fe:44:a8:6d:4d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a21f185b4b3866755dba0010bcf10b94a8aa66c
        Validity
            Not Before: Sep  7 03:01:36 2025 GMT
            Not After : Sep  8 03:01:36 2025 GMT
        Subject: CN=bd39975715a6c7285028a3a4d70f086c1da269c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:75:21:b5:de:2d:86:50:2c:0c:57:50:ca:
                    61:ed:ed:90:52:1b:23:6f:4f:cc:b9:f9:ab:e0:7b:
                    84:85:87:21:85:52:5b:9d:e6:a2:f8:05:24:21:d8:
                    97:0e:8e:19:fc:24:3d:9d:1f:8c:0b:d6:df:87:7b:
                    6e:91:c1:4f:8c:35:88:06:ca:0c:18:fd:80:76:bd:
                    7a:43:31:71:8e:ba:29:2d:6f:0e:41:60:7e:40:1e:
                    ba:92:32:cb:db:8d:65:cf:c9:6b:16:71:c7:e4:bb:
                    2b:96:60:c2:e9:b1:37:7a:70:59:3a:62:b2:79:d1:
                    ef:eb:e9:21:9f:5f:b3:c5:56:29:37:83:09:af:59:
                    b9:65:f0:78:29:aa:56:59:17:29:d3:92:7d:e2:ea:
                    dd:c0:a4:0f:c4:93:c5:6e:57:fd:16:eb:69:e8:49:
                    fd:cd:40:90:c3:72:ce:7d:70:02:d8:0c:02:3e:ad:
                    7b:73:fc:83:27:8b:75:25:15:bf:95:42:10:61:8e:
                    96:5b:34:90:87:27:d9:da:20:7c:c1:69:2f:bc:2a:
                    e0:64:54:4a:bb:0a:c9:29:f6:84:17:c3:78:53:ce:
                    7c:69:b1:46:21:22:c6:03:ef:66:74:35:ba:04:91:
                    cb:33:2d:87:0a:6e:f6:8b:9a:eb:59:49:22:b7:87:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:39:97:57:15:A6:C7:28:50:28:A3:A4:D7:0F:08:6C:1D:A2:69:C6
            X509v3 Authority Key Identifier:
                keyid:5A:21:F1:85:B4:B3:86:67:55:DB:A0:01:0B:CF:10:B9:4A:8A:A6:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiHxhbSzhmdV26ABC88QuUqKpmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/bf73f5-f414-4a13-b716-9cb7fc154425/1/WiHxhbSzhmdV26ABC88QuUqKpmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:11:a1:98:cf:9f:48:39:8c:a3:a8:6f:bf:cf:a5:ad:09:50:
         4c:8e:b5:85:57:7e:e8:21:0f:65:e7:a1:93:f1:2c:db:b0:a8:
         b7:d0:d8:2b:0d:0c:24:14:c4:97:36:55:33:75:f0:ff:6d:4f:
         c3:ec:37:37:43:cd:26:4e:05:61:c3:8c:43:b2:de:ea:7f:87:
         01:02:b3:4a:66:14:f1:05:2f:f4:16:89:1f:c0:c8:a4:20:c2:
         a4:38:49:e8:8a:f0:c1:be:0a:cf:72:8f:00:90:bc:e2:f8:30:
         9e:be:f7:d6:1f:54:13:4b:69:23:8e:ea:39:83:e6:47:39:b9:
         f9:80:85:99:98:de:5e:49:a9:36:05:d0:75:3f:7e:37:82:18:
         76:69:b4:fc:af:60:05:83:fa:13:68:59:42:b8:65:cc:70:ee:
         86:c2:46:5c:75:a1:36:6c:7e:a5:7d:bc:b2:9b:78:d5:a1:c3:
         19:89:9c:c6:56:c7:c2:54:e1:76:47:a4:2b:3b:aa:bf:8a:b2:
         b1:2b:a4:bb:b9:83:a2:e3:96:5e:28:8d:e2:02:b1:6d:fd:d1:
         a7:19:f5:bf:68:5e:b3:35:d2:fb:99:6d:cf:22:fc:c5:3e:ee:
         5f:b8:5e:3c:6a:6a:3e:2f:ac:4d:64:12:cf:2b:84:b9:a2:91:
         f4:23:a4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:02 2025 by rpki-client