Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          SywOk4g0Cpj2UsBFbFC3J4S1zcb5bmU+nIYZF5ebx/s=
Subject key identifier:   B5:19:5D:EC:CE:0B:15:65:DD:6F:BE:56:CF:34:B6:D3:CA:78:A2:FB
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       0198D660E8371FAC128DA2C6FA98E1EDA855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          1650
Signing time:             Sat 23 Aug 2025 10:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:11 +0000
Files and hashes:         1: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: b0G3YK1BEun4+3ddO0H0c10NDHcW1xB7RRt/1QnlYEE=)
                          2: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (hash: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=)
                          3: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (hash: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=)
                          4: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (hash: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=)
                          5: qEBSULOSMZqvdv0jIfml2f7tabs.roa (hash: nH9uGd3tMpksCUbkWl3JLVG6iE75o6qgmjF/U2MlHRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:e8:37:1f:ac:12:8d:a2:c6:fa:98:e1:ed:a8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: Aug 23 10:02:11 2025 GMT
            Not After : Aug 24 10:02:11 2025 GMT
        Subject: CN=b5195decce0b1565dd6fbe56cf34b6d3ca78a2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:80:20:e2:9f:70:7d:a0:93:4d:55:aa:49:0f:
                    b6:5e:48:c6:94:54:53:54:6a:96:54:8a:12:05:a4:
                    77:90:28:7c:f3:e2:0f:7a:4f:f1:94:39:ff:25:4f:
                    fa:e4:15:8f:62:60:0a:13:0c:4e:25:59:bb:32:b4:
                    77:65:50:de:67:f6:ea:84:c0:24:99:3c:ec:d0:49:
                    1f:91:bd:1c:24:29:76:67:bb:66:49:28:14:ab:4a:
                    a0:25:29:c3:93:ef:c2:3d:e8:bf:f1:21:eb:56:08:
                    08:4b:17:e6:38:36:c7:b8:2b:45:f9:e6:4d:a6:ae:
                    61:cb:d1:ab:67:58:e2:53:37:08:72:72:9a:7a:fb:
                    59:33:91:19:d8:c5:ac:a0:bb:51:55:ec:f9:44:f6:
                    9e:f1:69:db:bf:c7:66:d1:b1:db:24:f0:2f:0e:4e:
                    1d:e4:5f:33:4e:d5:25:a1:05:0f:9c:83:74:33:a8:
                    7b:49:eb:4e:a8:4e:98:a0:d5:94:d2:f0:43:1a:2d:
                    e6:8a:fa:88:08:07:f1:27:52:01:24:22:21:38:da:
                    be:6a:52:e5:b1:56:ff:a1:2e:24:47:c5:53:87:30:
                    ff:bb:e0:92:d2:40:02:90:fa:d9:30:69:8b:f0:f9:
                    0b:c3:9c:8c:0f:a9:c8:6b:eb:09:eb:01:ee:29:15:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:5D:EC:CE:0B:15:65:DD:6F:BE:56:CF:34:B6:D3:CA:78:A2:FB
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:06:ce:17:e4:b4:33:b1:4f:df:c6:a3:18:cd:9b:6c:e9:81:
         96:b7:ec:ee:e5:9b:37:2f:bd:6d:67:55:b4:b2:5c:66:e1:c8:
         89:38:90:31:32:0e:cc:2f:5f:71:f1:48:a1:71:e5:09:19:e9:
         85:64:d3:81:8b:aa:80:ee:f4:99:9f:0d:53:4a:7e:56:78:50:
         7a:ce:1e:a7:c3:cd:04:cc:c1:5a:21:27:a8:d7:cd:0c:bf:4a:
         c8:3b:74:1d:15:2d:25:6d:4c:bb:36:be:c8:28:d2:36:80:fb:
         94:8a:69:41:7a:fa:fa:c7:e1:fc:63:4d:28:df:5d:56:3b:19:
         e9:07:e9:1f:a8:7d:01:2e:0a:a6:fc:9b:a6:7a:6c:90:f2:bd:
         72:6f:f9:bf:b1:db:4c:ea:93:ef:29:2b:b9:fd:6d:11:65:09:
         6f:18:e3:0e:96:ea:1b:c1:b6:5b:9c:a3:30:e8:78:c3:a2:27:
         56:2d:20:71:b9:96:3d:33:43:f4:1a:47:58:d9:e1:da:35:84:
         9e:08:3d:45:02:fc:a4:ce:d2:cc:73:52:bc:27:95:2f:33:9b:
         ee:c5:87:e8:20:e7:19:ad:b2:f4:c7:16:66:d9:1a:60:8f:6c:
         0b:7a:df:6a:f1:b8:fa:6c:c7:a1:32:9d:19:74:28:27:67:15:
         12:e3:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:14 2025 by rpki-client