Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          8ONYVaEHuzxmRPwwICtvP/yZC7SVuG4puBoGDqk8l8k=
Subject key identifier:   73:22:15:B7:23:B2:91:20:F2:85:2D:14:FF:89:54:AC:19:13:7A:4A
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       0197B6A1B1C7D679E95C33F5BDA100AD8C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          15BF
Signing time:             Sat 28 Jun 2025 13:02:19 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:19 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:19 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: aQ15-5dar1aqgdmTJxXJsHa1LDw.roa (hash: 1rVI43V3MOJKO7UAkMxeh1LlYc7UXyA9BgVQnSxTc5I=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: w9CCNIRy8hi897gidAMgmBq7sk1lXguuuBEBWM6CXPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:b1:c7:d6:79:e9:5c:33:f5:bd:a1:00:ad:8c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Jun 28 13:02:19 2025 GMT
            Not After : Jun 29 13:02:19 2025 GMT
        Subject: CN=732215b723b29120f2852d14ff8954ac19137a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:0e:4f:1a:bc:c4:71:88:c1:20:b2:82:66:
                    19:6f:05:8a:eb:47:ee:df:2a:dc:a2:1d:68:d1:d7:
                    90:10:93:1b:bc:1f:ec:67:63:be:bf:0f:f5:aa:6c:
                    7c:bc:cd:3a:b0:ed:83:32:37:1d:7e:98:b5:1d:81:
                    16:fc:60:ea:7c:35:f3:e9:a2:65:5c:9d:1a:8c:c0:
                    d6:89:ff:0f:2d:8f:42:fe:8a:20:cb:8d:11:1c:d4:
                    2c:22:2e:e5:75:3f:00:f6:e9:ba:bc:62:b2:74:bb:
                    c7:85:c7:48:f6:79:fc:fc:89:e8:ec:c0:8f:d4:a6:
                    83:59:0b:fb:f0:65:09:02:8c:81:81:eb:2d:f8:9e:
                    92:7b:08:99:c6:09:11:ea:74:03:91:76:9d:85:b2:
                    96:4d:26:e9:15:44:cd:a3:6d:5e:af:c3:30:91:de:
                    69:4d:cd:8e:ab:d3:93:2b:08:7a:14:6a:cb:1f:93:
                    a7:ad:d6:c7:68:8e:f8:fd:d9:b2:8b:98:5c:48:70:
                    71:57:55:78:29:b4:67:03:f7:d3:18:9d:20:7d:10:
                    00:de:13:fd:db:f7:ff:b9:6b:f5:b5:71:72:d7:d8:
                    aa:a1:35:fa:d9:41:68:77:50:d0:40:78:ba:10:ba:
                    0b:87:7b:80:bd:da:09:7f:96:44:ec:a8:a5:00:39:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:22:15:B7:23:B2:91:20:F2:85:2D:14:FF:89:54:AC:19:13:7A:4A
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:8a:69:2a:22:45:9b:70:83:ea:b5:77:39:d7:e7:51:48:
         43:7a:24:97:e3:e5:81:71:93:b4:69:ed:6b:f6:91:cb:9a:b7:
         3c:2d:75:b3:e5:60:81:01:39:46:d2:f8:56:ca:38:a7:8a:6b:
         0d:51:20:ae:a2:3a:aa:e7:62:41:c0:17:cc:ee:f5:36:a5:a6:
         82:d7:94:27:03:c4:b2:64:8d:90:ab:d3:79:9d:fa:44:99:ac:
         cf:f9:3d:a9:3b:46:be:a0:74:8d:43:b7:d2:95:12:61:e6:3c:
         a1:4c:85:58:02:d0:19:40:96:3a:ec:23:1b:83:8c:0a:8e:2c:
         a5:6c:1b:d1:0a:fc:70:66:2c:fe:be:a1:44:e8:2e:44:a3:cb:
         09:d6:07:1f:0e:74:08:3a:07:b9:01:64:7c:ce:af:46:f4:4f:
         79:84:74:22:cb:01:55:60:87:c5:3e:b6:63:c4:05:47:da:cb:
         bd:f1:68:06:23:04:f4:60:c1:0c:22:9d:20:4f:30:56:03:fd:
         1a:b8:1a:2c:87:69:85:3e:9c:b7:3e:39:30:ed:8e:98:31:57:
         8c:17:4f:4e:60:8d:43:2e:2e:ac:7e:90:c0:0f:44:86:a6:2c:
         c3:4a:72:ae:b0:23:ab:27:48:d0:ee:44:46:54:be:f5:61:f2:
         e1:29:33:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:24 2025 by rpki-client