Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          ji+UWWpCAzk/+dnCz8AvBZnC26U3dWsdHpAHXwPu0E4=
Subject key identifier:   5D:27:CE:0F:36:90:8A:99:15:0B:EA:9B:17:12:70:C4:FF:25:D8:00
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       0198D4730956DEC5BD17F57C73832ED6975D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          1653
Signing time:             Sat 23 Aug 2025 01:02:45 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:45 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:45 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: aQ15-5dar1aqgdmTJxXJsHa1LDw.roa (hash: 1rVI43V3MOJKO7UAkMxeh1LlYc7UXyA9BgVQnSxTc5I=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: iNbYnvxFZt1qKl0kJsnmEImJPGv7Fai8mSMzGfIWlIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:09:56:de:c5:bd:17:f5:7c:73:83:2e:d6:97:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Aug 23 01:02:45 2025 GMT
            Not After : Aug 24 01:02:45 2025 GMT
        Subject: CN=5d27ce0f36908a99150bea9b171270c4ff25d800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:a8:fd:9a:48:11:d7:21:d9:49:6d:36:f5:
                    90:75:0a:39:3d:57:4e:34:fa:ba:31:70:a4:28:a1:
                    44:5a:02:6e:e4:02:16:cb:ae:77:9d:13:d8:12:58:
                    71:1b:91:76:f2:d9:8d:17:9d:59:d0:9f:fe:7f:38:
                    5b:8e:69:8f:14:6a:d9:37:da:c0:9b:04:a5:c1:07:
                    3f:70:6a:1f:2d:51:d4:bf:68:70:20:b2:06:66:30:
                    82:88:b2:09:ca:8c:52:0f:38:53:32:8b:71:de:ba:
                    14:f7:ee:2e:e6:28:e7:6a:25:6b:cf:d5:15:92:a9:
                    1a:ef:12:1f:d3:11:b3:11:bc:9f:5a:c0:25:d1:13:
                    1c:ac:23:38:0a:a5:aa:d3:fc:b5:fd:11:0f:52:9e:
                    8d:59:3f:8f:af:ec:9c:f4:95:7c:58:a2:e2:b0:c9:
                    25:6e:1d:06:c8:47:90:0b:1e:88:3d:b0:20:3f:88:
                    ec:da:2a:ad:4a:f8:29:1b:c2:c7:78:10:96:50:84:
                    05:4b:7e:12:75:77:f2:b1:0a:79:fc:a4:2d:54:82:
                    26:a7:83:dc:94:60:6d:02:4a:43:bb:5c:62:f6:88:
                    0d:e4:29:6e:64:7b:c6:51:2c:15:a4:60:a3:d5:f6:
                    72:6c:1c:e1:17:01:50:94:18:57:a8:40:59:e5:e4:
                    81:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:27:CE:0F:36:90:8A:99:15:0B:EA:9B:17:12:70:C4:FF:25:D8:00
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c4:20:09:6a:c5:93:49:af:78:2d:16:26:1c:61:c9:b3:ce:
         e7:0d:c1:28:cb:25:47:7f:d8:5b:4f:74:a7:59:a1:4a:27:bb:
         4b:eb:7d:18:42:29:60:3b:9c:1b:fe:77:52:24:24:db:e1:b0:
         8b:8f:0a:1c:af:cc:b9:f3:af:d0:a2:9d:4e:8e:38:bf:70:e3:
         cd:38:ee:9d:93:66:a2:f8:f1:cb:30:7d:0b:ca:8f:d7:6e:16:
         f8:bb:c5:d6:da:f7:55:ce:9a:09:5b:e1:6d:7e:0f:54:f5:96:
         5f:3c:dd:ef:5f:cd:ec:66:40:8a:1c:c5:e9:da:ad:d3:19:d0:
         94:95:ac:39:90:6e:6b:12:eb:d2:ac:88:a3:79:8a:86:f6:86:
         0d:5d:a2:12:9e:2a:9a:65:85:d9:06:62:5b:2d:7b:5e:14:5b:
         f2:a8:b9:fd:d8:b0:77:91:11:66:6c:b5:c1:1d:25:af:a7:58:
         fb:66:6a:b4:31:49:f2:74:5d:b6:69:64:46:65:d2:bc:63:e5:
         68:fb:8a:84:81:06:36:f0:fb:0f:48:ff:2c:af:fd:f7:fe:68:
         12:fe:5f:fe:47:2b:59:81:c8:81:57:d3:ec:bd:63:89:1d:69:
         b1:c4:2c:91:fc:a2:75:c8:80:5e:5f:ef:2b:21:65:8c:7e:4a:
         79:78:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:12 2025 by rpki-client