Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          gEN2g72OLTikrzZzk7rr5wyM7OaqLi7P9VBCIfUkBtE=
Subject key identifier:   7A:FD:B1:3B:8C:59:CB:21:FC:DC:DF:51:A7:38:43:A2:D0:E5:C0:E9
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       0198D70583E3C92C40F7CA58946D1114DD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          0604
Signing time:             Sat 23 Aug 2025 13:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 13:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 13:01:59 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: Z1F9ri3qyElwgaEjq4qlpfvXW8l60gMM9m41ieV09pE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:83:e3:c9:2c:40:f7:ca:58:94:6d:11:14:dd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Aug 23 13:01:59 2025 GMT
            Not After : Aug 24 13:01:59 2025 GMT
        Subject: CN=7afdb13b8c59cb21fcdcdf51a73843a2d0e5c0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:1c:46:f7:27:53:a3:ac:8a:d6:46:5c:37:
                    22:02:32:ff:60:16:d5:2e:01:39:e1:c9:d6:5c:78:
                    58:82:c6:a2:97:9d:6d:97:8a:a8:25:c5:9e:60:f4:
                    f5:8f:ff:29:37:6f:97:81:e5:81:58:c5:45:ea:c7:
                    ef:f5:f4:20:7f:2b:6d:12:c2:24:7f:ba:c4:31:3d:
                    48:2b:83:a6:3f:e1:2e:85:16:3c:f3:66:16:9a:86:
                    ee:1f:99:97:82:f0:65:59:ff:f2:57:76:8e:0f:18:
                    64:37:26:1c:fd:58:d6:7d:91:f5:b3:8a:88:91:0b:
                    88:c4:87:32:05:7f:6d:09:18:4a:06:9e:e2:4e:51:
                    e3:ba:70:fe:f7:be:27:ad:12:11:13:31:e9:54:32:
                    38:44:a5:df:73:0f:a4:0f:04:be:b9:fa:38:cd:1a:
                    05:e2:6f:54:d6:c5:6e:76:0e:86:42:75:65:b0:d1:
                    eb:fa:2d:28:c1:77:4d:65:cc:df:07:52:c9:40:3d:
                    3b:98:95:42:e4:06:60:0d:91:f4:fd:b8:70:b6:25:
                    e3:fb:b8:1d:49:8b:60:73:1f:22:91:0d:26:56:58:
                    f4:2b:87:e4:77:a0:e9:4c:f1:bd:03:10:57:61:64:
                    e2:ef:47:d3:a0:cf:ad:ee:ff:e6:41:3f:cb:94:56:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:B1:3B:8C:59:CB:21:FC:DC:DF:51:A7:38:43:A2:D0:E5:C0:E9
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9b:15:28:1a:d5:dc:cb:40:47:51:67:87:16:50:e5:48:06:
         ea:7d:d0:a2:2e:6b:6f:70:b8:e1:6c:08:87:e7:25:e8:ee:17:
         f2:77:18:af:39:af:ce:d9:b3:b0:01:5a:37:25:18:0e:03:a8:
         8e:22:96:8e:b4:01:db:f3:d0:ba:d9:45:3b:c1:2d:77:a4:b1:
         8a:c2:84:b2:02:13:69:fb:8d:1f:96:15:f3:ca:d6:65:2d:d8:
         10:93:31:65:15:13:49:fa:e9:43:f1:f3:a0:73:67:7f:8f:bb:
         2b:de:a1:5f:94:71:6c:bd:86:62:e1:bf:9b:3d:53:f0:67:5b:
         97:8e:2f:9c:56:b4:e9:c8:81:93:f3:ab:c2:1b:7f:10:03:b7:
         38:38:7a:7f:44:c8:f3:28:9f:92:8c:b8:74:1a:cc:b3:d1:dd:
         68:e1:59:e6:0f:99:64:af:2d:c8:77:52:f0:d9:14:c9:2e:bb:
         f3:eb:e9:59:5c:f5:eb:82:53:97:cd:0a:db:81:01:8d:f4:e2:
         08:59:94:4c:0d:d8:4a:1f:59:ca:6f:97:10:b9:13:42:a9:5e:
         de:77:98:7b:14:7e:23:70:15:33:81:d9:32:0f:d1:19:0d:b8:
         ac:c6:2e:38:ba:ae:b0:50:30:fc:3d:3a:7d:84:62:e7:a0:54:
         07:67:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:53:12 2025 by rpki-client