Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
File:                     WBU_sgucj4zPbDmPTWGyFwfhu-I.mft (raw, json)
Hash identifier:          AzrYtwYdbwlCU+vY9meYO8Oi6etBrH2A+hu/UohE+d0=
Subject key identifier:   A9:F3:AF:47:8E:41:0C:FA:26:37:5A:B5:A0:96:C6:16:EB:EA:29:81
Authority key identifier: 58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2
Certificate issuer:       /CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
Certificate serial:       0198D4A82FF82B8A7E11F73C14F0FD7B488F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
Manifest number:          05C7
Signing time:             Sat 23 Aug 2025 02:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:48 +0000
Files and hashes:         1: 7W8eYCQR1gvjfWgrfSnogkOFcxk.roa (hash: UFbZQJ5acf+PAUwxnTzDedz7AaCrRC23rxKRoylsSkI=)
                          2: WBU_sgucj4zPbDmPTWGyFwfhu-I.crl (hash: 17GlD/vWnxRnpAq2EX+GbMTmcBhv0HkC6TtL9Lx7wnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:2f:f8:2b:8a:7e:11:f7:3c:14:f0:fd:7b:48:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
        Validity
            Not Before: Aug 23 02:00:48 2025 GMT
            Not After : Aug 24 02:00:48 2025 GMT
        Subject: CN=a9f3af478e410cfa26375ab5a096c616ebea2981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:7a:b2:e4:89:1b:12:e2:c6:01:38:d6:db:
                    48:3d:f4:bb:af:e7:0c:07:bb:3b:63:e3:01:9f:68:
                    f9:be:33:e8:89:68:84:cc:12:bf:0d:5b:75:2e:aa:
                    71:02:5b:54:d1:47:39:dd:dc:5f:13:62:3b:bf:32:
                    b2:49:d6:2d:0e:89:91:0f:73:04:35:a9:29:84:d8:
                    34:8f:50:d6:d2:1f:d7:ea:83:21:11:d4:4e:d7:2b:
                    73:60:2d:04:6e:8f:d5:70:a6:91:f6:a5:42:e6:f2:
                    89:a8:02:72:08:df:be:d2:2d:2c:3b:e6:b4:33:6d:
                    27:e1:f9:6b:d6:72:7a:07:80:39:d9:09:b6:04:fe:
                    94:9b:db:d5:ad:50:61:e5:37:85:82:03:6f:bb:71:
                    62:7a:e8:d6:1c:c4:09:2d:14:dd:58:67:cf:be:79:
                    ce:84:7e:fb:e1:05:02:d4:07:51:10:9a:ae:eb:e6:
                    60:d1:d4:80:bd:ef:0e:07:7e:8d:80:53:2f:f2:48:
                    2b:6c:e4:48:e6:78:df:33:e9:27:de:1e:a0:9a:cf:
                    cd:ed:e1:b6:37:fa:12:46:b0:7a:91:e3:a0:03:42:
                    9d:aa:ea:f0:a2:31:fe:9f:e1:00:2d:c0:32:ea:26:
                    05:91:f1:35:d5:ad:03:67:1c:5b:d1:96:b7:6b:5e:
                    32:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F3:AF:47:8E:41:0C:FA:26:37:5A:B5:A0:96:C6:16:EB:EA:29:81
            X509v3 Authority Key Identifier:
                keyid:58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6f:f8:de:3b:19:3b:95:67:7a:a9:ab:60:4b:41:c0:60:50:
         bc:17:4b:53:66:74:b9:2b:72:f6:75:88:d9:1a:b2:b2:93:7a:
         e6:a5:ed:db:96:15:8a:a7:57:5e:e3:8d:ae:f8:7c:77:27:59:
         4a:5b:6a:5a:88:bb:61:dc:54:68:2b:6d:92:7a:12:a9:e5:df:
         17:62:2c:79:f0:a0:e9:76:03:2b:88:4e:37:cc:3a:96:05:9a:
         77:2e:a6:c8:5d:b4:03:32:41:74:36:e2:5b:67:93:f0:55:48:
         8b:91:d1:05:06:4e:82:a5:a2:e3:37:8d:4c:b1:30:73:2e:ef:
         eb:9b:f8:d9:09:aa:10:84:07:81:a0:75:66:b5:cf:a8:53:e6:
         6e:e0:f3:1d:4c:35:c6:55:d0:59:35:01:96:c1:56:04:6a:d0:
         f4:b6:8f:9a:30:4b:9b:87:7c:37:36:e7:2e:e1:42:14:a6:30:
         3f:da:9f:0e:10:ce:68:c2:38:3a:35:73:2b:29:d0:da:05:07:
         14:da:bc:29:37:ef:64:8d:9d:8b:b4:12:be:5d:86:6f:ea:77:
         c6:91:a7:e7:05:f2:df:d7:08:48:10:39:87:a9:57:95:de:c1:
         04:f1:c7:ab:8f:c6:c8:64:9f:36:41:77:3d:6c:e0:ea:71:c7:
         15:91:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:52:05 2025 by rpki-client