Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File:                     Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier:          KZoE1KDbXh45141r3znJ+y4YOv79/VyYte63jOaAaII=
Subject key identifier:   5F:95:B1:62:42:54:F1:9D:CD:F9:35:11:D2:29:A5:82:60:7E:BB:B6
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer:       /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial:       0197B632A26940F20A8544E9653758B7803C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 11:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:01 +0000
Files and hashes:         1: 2x0oIHlLniQgJ8wCGF91u-VP36U.roa (hash: hTRJW3J22JabEFrfjLPUALfCkvH53/llK6Ms4YgJ720=)
                          2: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: 0Jk8ygQBZKJYXEapQVMypGwnSP9ZHeAU+s8N/BZNRkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:a2:69:40:f2:0a:85:44:e9:65:37:58:b7:80:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
        Validity
            Not Before: Jun 28 11:01:01 2025 GMT
            Not After : Jun 29 11:01:01 2025 GMT
        Subject: CN=5f95b1624254f19dcdf93511d229a582607ebbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:b4:3d:da:5b:ac:32:66:7f:5d:67:29:8a:
                    e5:4b:34:32:ab:62:90:94:e0:1e:7c:5f:25:cd:26:
                    0b:47:b5:f2:9b:54:53:e4:10:58:d8:78:9c:43:11:
                    42:c1:a3:1e:87:db:9e:74:5f:94:3a:b2:10:65:60:
                    24:26:12:46:2f:d0:69:f2:55:31:4f:fc:9b:f7:16:
                    1d:66:8d:e0:b7:8f:37:38:11:4e:7f:9e:84:49:0c:
                    02:b2:a9:32:54:3b:ac:03:9f:d3:9e:08:5c:12:0b:
                    db:89:02:7f:5c:93:5f:b0:f3:6f:c4:ce:01:14:64:
                    92:01:76:14:49:82:a9:c3:8e:66:e5:15:4d:57:7f:
                    61:22:c5:11:ae:a3:36:b2:5e:f4:5a:f3:a5:2d:7f:
                    a4:95:df:6f:f0:d3:7e:94:f1:7a:5a:13:f3:dc:54:
                    eb:c8:52:08:21:ca:f3:f9:9d:d9:7d:de:7f:52:70:
                    76:84:21:a4:38:39:f7:58:ef:83:de:a0:10:28:59:
                    a7:4f:2a:99:4d:d1:f9:2e:90:ba:a2:88:36:45:32:
                    c1:a0:e2:1f:ed:61:2e:cb:08:0e:b6:38:ea:2a:e4:
                    3b:1b:6d:4a:94:38:88:11:0a:97:be:cf:3f:76:25:
                    19:f3:02:cd:7a:e5:b2:76:a9:02:2d:41:df:1e:3d:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:95:B1:62:42:54:F1:9D:CD:F9:35:11:D2:29:A5:82:60:7E:BB:B6
            X509v3 Authority Key Identifier:
                keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3b:6c:2e:14:70:88:59:dc:af:52:7b:61:0c:ed:a8:a7:6e:
         b3:59:1f:e7:da:bc:6b:bc:fa:3b:37:9b:06:e4:83:9a:f0:d6:
         e4:67:6d:a8:c7:94:69:bd:b0:7f:b8:c8:d9:de:e0:7c:41:3b:
         22:29:a5:28:33:93:6e:da:89:be:e1:1b:74:57:8f:a5:44:75:
         ed:91:10:76:61:84:92:ce:70:47:01:7d:da:55:40:08:85:01:
         f9:65:fe:e7:d6:14:00:d6:6c:4e:5d:01:a9:d8:59:d6:db:69:
         28:76:e2:42:86:38:5b:a1:0d:f4:2d:19:32:b6:68:89:82:db:
         7b:7c:ac:c5:62:3e:13:26:11:2c:66:05:06:d0:60:82:7b:9d:
         bd:c7:5e:c4:61:8c:80:b0:3c:1f:e7:f3:63:ac:a8:d9:ef:29:
         b5:48:df:52:52:7a:db:73:75:1f:53:62:05:44:9b:a9:7e:bb:
         3d:ee:06:68:43:64:91:f0:6d:99:99:9a:ac:5b:0f:40:9a:de:
         78:6d:09:2b:d4:d0:1f:b3:27:24:06:67:fd:6f:7f:56:fc:9c:
         cd:a2:d1:bb:84:2e:b2:da:a6:2c:c8:a4:53:86:41:cb:7d:c1:
         d4:d2:c7:99:c0:13:37:72:cf:83:67:05:c7:81:42:fd:62:75:
         e8:b8:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:07 2025 by rpki-client