Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File:                     wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier:          lpfWTJ/XnocYbjzwYsCbMJ8KnPwtY0JY/DnonNQ8LAE=
Subject key identifier:   4A:30:11:3C:C9:81:2D:AB:08:11:37:CE:D1:37:D0:CD:53:C4:14:9A
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer:       /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial:       0198D515753805650FFFBCDCD1810DE0455C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number:          05B8
Signing time:             Sat 23 Aug 2025 04:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:09 +0000
Files and hashes:         1: nlp-yymaqYzgw12m1QvoCWjeZIw.roa (hash: Yssi7rDTBVMdou6reFU3+Vkw3D/c6F2oI+HGCYZH4Sw=)
                          2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: bLbPlM3fRrXssKljzZ0ZOUX8BpQ8+z7khntrtvxwJTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:75:38:05:65:0f:ff:bc:dc:d1:81:0d:e0:45:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
        Validity
            Not Before: Aug 23 04:00:09 2025 GMT
            Not After : Aug 24 04:00:09 2025 GMT
        Subject: CN=4a30113cc9812dab081137ced137d0cd53c4149a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5a:83:75:c2:7f:a8:c4:cd:56:a1:ac:64:f1:
                    8b:40:70:a4:ab:44:d3:96:ff:f3:5c:bf:59:eb:82:
                    88:15:f1:6a:d6:db:3d:5c:e4:74:73:cb:15:02:63:
                    4d:2b:35:9e:6b:8e:10:3a:0a:f1:c1:d8:47:bf:f4:
                    ea:73:61:b4:cd:26:7f:15:25:86:09:11:36:27:4a:
                    85:b1:ea:7f:09:39:28:b1:b2:fb:11:e8:ba:74:39:
                    eb:ac:74:5c:50:5e:df:03:fe:21:5f:ff:ef:f0:25:
                    0a:2f:52:cd:28:db:d3:14:4c:53:20:ea:67:d8:ff:
                    84:bd:e9:4c:ca:df:7a:0a:b9:0d:0a:34:be:ae:a1:
                    48:bd:cf:b2:7c:3a:75:bf:ff:89:8c:9b:63:90:bd:
                    1c:b8:30:4d:03:73:4f:a3:89:c4:7c:b3:d9:c8:25:
                    39:92:41:1c:d6:cc:a8:8e:f6:31:f9:3a:4a:bf:90:
                    e1:2a:52:a3:ac:f1:7b:57:bd:d3:d5:fd:97:c3:a7:
                    e7:a7:b4:a4:6b:a9:5d:ce:f3:0a:16:a6:0f:e8:4a:
                    79:85:8b:57:14:32:23:49:04:8b:78:6e:52:b4:d6:
                    4d:f5:22:72:de:ea:44:50:60:02:0e:9a:ab:5e:49:
                    53:54:6b:40:f1:11:8f:57:9b:a7:02:41:e3:cf:1f:
                    4a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:30:11:3C:C9:81:2D:AB:08:11:37:CE:D1:37:D0:CD:53:C4:14:9A
            X509v3 Authority Key Identifier:
                keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e1:e0:c4:f6:41:07:4b:3d:53:55:b1:06:c5:fe:df:f7:03:
         ce:b9:74:cf:7b:07:c7:55:bd:ce:55:45:c4:8c:a6:e1:04:a1:
         ab:fd:f4:f3:cd:a6:01:8d:f4:ee:0d:7d:8d:cf:f5:d1:59:b8:
         93:4a:3e:b7:87:02:3a:61:e8:7b:5f:4a:b8:31:70:66:a7:72:
         72:ec:f9:40:b6:2e:06:1c:53:a1:06:0e:11:c8:bc:9e:fd:55:
         1f:97:87:99:f8:ad:66:1c:8a:25:e3:fb:9d:07:75:ea:7c:c9:
         c0:97:fc:1f:8a:c3:f6:57:fc:e1:b1:c6:53:fe:b9:8a:b2:1f:
         a3:64:14:06:87:e4:cc:6a:a0:0e:4c:2b:ba:9f:d4:b2:a7:6e:
         20:9a:48:23:12:e7:91:54:e0:da:a2:5a:d4:21:cd:3b:d0:b2:
         ca:4f:1f:9b:b9:f8:fc:e8:44:fc:9e:b2:d5:d6:49:24:89:5c:
         0d:c4:d1:00:12:b4:91:0f:8d:a3:a6:25:d3:2d:47:7a:84:f9:
         88:11:f1:f4:ec:50:51:e0:22:20:95:ef:df:17:3a:82:8e:78:
         85:0c:0a:15:db:e3:a4:bb:dc:87:2e:f7:6a:57:dd:fb:62:04:
         16:11:9d:53:47:9c:8d:15:a2:45:66:5f:3c:38:69:f4:06:19:
         17:dd:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:58:14 2025 by rpki-client