Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          ZHN/vCs3En46sa8fA9xLiqLR0076YaQap14ht5dNQag=
Subject key identifier:   92:0F:64:AF:FB:A8:66:2F:1C:9F:3C:06:C4:46:5C:F5:D1:8F:9F:AB
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       0198D54E52CC8F6F641B4955854CCFA9AE51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          01A9
Signing time:             Sat 23 Aug 2025 05:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:16 +0000
Files and hashes:         1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: 0uR+/BO+Aqy7xM8luP/2gQscavf2kHSLYkQaF62ABm0=)
                          2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:52:cc:8f:6f:64:1b:49:55:85:4c:cf:a9:ae:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Aug 23 05:02:16 2025 GMT
            Not After : Aug 24 05:02:16 2025 GMT
        Subject: CN=920f64affba8662f1c9f3c06c4465cf5d18f9fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:e9:dd:46:67:35:a2:3c:92:97:af:ff:f8:
                    84:b8:41:11:3d:69:a3:38:ea:d2:0a:8d:9f:06:9b:
                    80:eb:26:28:be:2e:84:3e:80:d7:cd:3e:d9:63:58:
                    b7:6b:79:a1:87:4f:60:c0:1e:aa:a2:33:c4:0e:86:
                    64:8b:6e:05:bd:ff:55:07:fc:bd:c5:f9:ea:fb:21:
                    95:c4:ba:56:58:c4:ed:5a:6e:35:54:fe:20:02:ad:
                    ea:2b:c9:01:da:59:13:5a:06:e3:e3:38:38:85:6a:
                    f1:00:04:22:3a:18:eb:e9:c1:b4:d1:e5:0a:d1:27:
                    d9:0d:53:1f:e5:bb:b9:ce:0d:41:8d:df:5f:bd:6e:
                    56:30:71:93:cf:2a:0f:cc:3b:27:a7:11:14:e3:04:
                    1f:7b:57:f6:ab:f1:20:ee:3d:25:d4:ee:12:78:b6:
                    82:60:5f:9a:58:95:4e:00:1a:49:9e:af:e7:c5:b9:
                    0e:f5:7f:fd:ba:52:e7:c6:69:4f:47:1b:71:24:e1:
                    68:bd:5d:be:59:ee:8a:31:0a:b0:79:c2:67:c7:3f:
                    a3:f4:e2:71:77:92:49:30:42:45:af:04:8a:45:0f:
                    37:d6:3a:46:bc:1c:f9:a7:31:e0:ea:6b:c5:d0:bf:
                    eb:ac:50:cc:43:0c:5a:63:75:40:a4:7e:a1:3b:c9:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0F:64:AF:FB:A8:66:2F:1C:9F:3C:06:C4:46:5C:F5:D1:8F:9F:AB
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:29:ca:41:42:82:be:87:88:19:6e:c4:9c:ef:a8:c2:ae:4f:
         80:75:bc:05:d3:d2:77:13:b4:16:b5:99:fe:8a:5d:27:fa:4c:
         75:a6:3e:97:bd:9f:0b:e4:8b:e8:b4:8a:76:74:43:39:1c:44:
         cf:15:7a:c3:a7:c5:d5:29:fd:96:e1:d6:e7:ec:1e:2f:a9:5a:
         a5:09:24:e0:90:7e:d5:9d:a6:17:93:f0:57:6e:ee:60:62:2b:
         94:25:0f:47:9a:7c:c3:15:4d:9e:c7:15:28:ed:01:01:ba:85:
         43:d1:d0:0a:e4:6a:e3:0e:9f:ed:b1:71:d2:bf:99:b6:4d:76:
         21:6d:56:f5:ac:3e:c3:66:23:aa:b5:6d:49:10:88:35:78:86:
         1a:99:36:c8:81:3b:b5:ca:50:8a:93:0e:44:5e:2b:c9:42:66:
         08:7f:8b:1f:8e:8e:05:fb:ed:db:97:c2:ef:04:46:60:e2:c6:
         ec:a1:83:15:08:01:83:ce:50:cb:9d:c3:de:56:3a:81:8b:85:
         71:bd:a6:a9:b9:53:3a:66:85:5f:ef:6a:ec:db:92:bb:a2:8c:
         bf:a5:92:c1:6a:be:20:42:f0:a1:ef:86:b8:10:a5:2b:f8:f5:
         97:52:b7:39:ed:ed:60:a0:00:cf:55:da:38:af:3d:4b:16:83:
         59:72:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:54 2025 by rpki-client