Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
File:                     wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json)
Hash identifier:          PBr9uf7SNUfbbd5baskQDNktOUSroshZ+T3LrS/q7kk=
Subject key identifier:   50:14:E8:A8:FF:22:E7:F8:34:70:55:7F:D0:4F:10:0D:C6:AE:DA:91
Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Certificate issuer:       /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Certificate serial:       0199315AFFF1B8D4638A70887FDF601B991F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
Manifest number:          0139
Signing time:             Wed 10 Sep 2025 02:01:11 +0000
Manifest this update:     Wed 10 Sep 2025 02:01:11 +0000
Manifest next update:     Thu 11 Sep 2025 02:01:11 +0000
Files and hashes:         1: u0y20R9QTPyQ909oZwz8h1z4D_c.roa (hash: JOHDDdtCt33NzefI4pce2GppbGjse6UDJKzNAqgwUuA=)
                          2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: 5XqK1YGlOO/2ckM7KuA76P5YbyiIKqQBqsumpl8dooc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:5a:ff:f1:b8:d4:63:8a:70:88:7f:df:60:1b:99:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
        Validity
            Not Before: Sep 10 02:01:11 2025 GMT
            Not After : Sep 11 02:01:11 2025 GMT
        Subject: CN=5014e8a8ff22e7f83470557fd04f100dc6aeda91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:30:80:62:89:1a:d3:ca:f8:12:3b:3b:d6:1e:
                    27:9d:0a:42:76:6e:bf:74:05:00:6d:b0:76:39:67:
                    d3:0d:c6:fd:13:a9:8e:6b:3b:e3:f2:75:0a:f3:02:
                    6a:7f:12:fc:e1:13:3b:0f:10:6d:fd:e4:ad:23:50:
                    1e:d1:1e:8e:12:20:40:59:41:09:0d:2d:4d:17:ff:
                    07:4e:4e:cd:d0:9a:dd:e6:30:c1:17:ab:a7:47:e2:
                    74:0b:e4:b4:26:ce:d5:f7:42:1f:23:15:16:8d:a8:
                    06:9d:9b:7f:29:22:84:41:0f:5c:c5:d0:5c:ef:41:
                    0c:25:b5:e9:6e:88:cb:90:94:21:63:62:f7:d0:5d:
                    71:e0:29:f7:d7:d6:9a:fa:e0:cb:a8:39:f5:1d:0e:
                    5f:f7:96:fc:09:af:7c:c1:ae:c8:57:6e:15:bc:4f:
                    b1:b9:4b:ed:cc:1f:43:e2:62:8f:17:61:a6:88:66:
                    23:b7:34:b0:5e:af:df:58:58:9e:0f:0a:97:1c:3e:
                    71:b9:c6:c3:75:7b:f8:e1:ef:98:37:4f:d7:27:4b:
                    64:ce:92:a9:c0:31:8e:65:c3:c2:20:8a:4d:e2:9d:
                    de:11:46:fb:41:eb:16:d2:94:6c:8e:62:6f:c8:b7:
                    0e:a8:3e:0a:61:88:17:fd:20:c6:f8:02:8b:75:2d:
                    1b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:14:E8:A8:FF:22:E7:F8:34:70:55:7F:D0:4F:10:0D:C6:AE:DA:91
            X509v3 Authority Key Identifier:
                keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:39:f7:20:f9:50:31:ab:47:59:d2:d0:8a:94:7c:26:15:c2:
         81:d7:07:56:9b:a2:2a:3f:89:0b:5b:9e:ae:d4:55:a9:ad:74:
         64:20:f0:4e:23:84:76:bf:20:6f:c4:1c:6a:0c:58:1e:93:81:
         30:be:cf:ac:fc:e6:5f:fc:8e:8b:fa:4a:b6:e8:1a:61:fd:53:
         c4:fb:90:da:c2:fc:d3:b9:9d:63:a3:1f:47:0c:57:70:5f:6a:
         86:d9:0d:46:e7:c7:80:a9:b5:f7:46:15:aa:34:d4:a4:35:df:
         d4:89:e6:68:e4:b5:e9:11:a2:6e:b0:79:80:dd:b9:68:c1:04:
         2e:09:03:3b:69:22:19:87:75:0b:a6:53:a4:e9:1a:f4:9b:05:
         74:74:9c:e7:43:92:45:dc:83:fa:d9:4a:49:ae:56:68:3c:cd:
         de:2c:39:a9:5c:74:e2:81:00:77:f2:a6:d4:cf:6b:ce:f5:79:
         75:c1:46:65:ef:48:e8:65:a8:85:9c:4c:62:aa:8c:bf:bc:0b:
         0f:d6:5a:2e:37:f3:d5:63:f5:19:1d:f8:ce:9c:c6:91:d7:00:
         62:38:44:e5:0f:ed:0e:aa:54:5b:99:fd:3f:03:ed:58:fb:cb:
         ab:af:2c:d9:a7:fb:fa:31:ba:58:dc:b4:7f:4a:2d:b6:af:91:
         2b:69:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:34:27 2025 by rpki-client