Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
File:                     WBU_sgucj4zPbDmPTWGyFwfhu-I.mft (raw, json)
Hash identifier:          iFy6Do91K4xyu3WFvwQcvMnu55Cd9K2yp/Rx7N7aHfk=
Subject key identifier:   3D:4D:96:51:EA:21:00:EA:06:94:C6:AA:48:94:B7:37:62:CC:A4:A7
Authority key identifier: 58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2
Certificate issuer:       /CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
Certificate serial:       0199FC21B48EE00A0766A2D3F63FB5713F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
Manifest number:          0660
Signing time:             Sun 19 Oct 2025 11:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:31 +0000
Files and hashes:         1: 7W8eYCQR1gvjfWgrfSnogkOFcxk.roa (hash: UFbZQJ5acf+PAUwxnTzDedz7AaCrRC23rxKRoylsSkI=)
                          2: WBU_sgucj4zPbDmPTWGyFwfhu-I.crl (hash: X+o1pNKrzSmx4bscVrEcSS0ctJTZnJhams9lB8D66vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:b4:8e:e0:0a:07:66:a2:d3:f6:3f:b5:71:3f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
        Validity
            Not Before: Oct 19 11:01:31 2025 GMT
            Not After : Oct 20 11:01:31 2025 GMT
        Subject: CN=3d4d9651ea2100ea0694c6aa4894b73762cca4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:15:d2:d7:39:5f:22:8d:7d:ff:7d:a2:14:
                    2c:8b:f3:57:49:47:66:31:de:c6:d4:ee:b9:44:51:
                    72:ae:cc:ae:03:73:54:8d:ca:ef:ea:21:9d:2d:f5:
                    f2:b9:e5:8b:d6:12:47:7a:f1:ce:7e:9a:7d:cf:af:
                    fa:b7:f1:63:ec:e6:02:85:dc:48:b1:61:e5:3d:12:
                    09:7b:3c:94:2f:d3:58:4c:8f:e1:e0:c1:32:30:90:
                    d3:75:5f:a5:67:48:ea:f3:8d:5d:ef:70:2b:9d:9e:
                    e2:21:55:a0:89:31:54:40:c4:6d:a3:3c:48:41:8f:
                    a4:b5:45:5b:02:59:cc:6a:f9:d0:0d:4a:56:f0:35:
                    a0:ad:46:ec:75:7e:0a:a6:e1:4b:54:aa:db:77:3a:
                    e0:66:31:51:54:a2:db:83:53:c8:ab:18:4f:20:f5:
                    4b:57:92:24:5c:b5:85:df:a3:06:f9:ff:01:aa:da:
                    f1:7c:b2:b4:ed:60:ad:15:80:e9:c1:ad:b1:15:a8:
                    03:70:3e:a9:60:45:ce:6f:d3:4b:e7:ae:c8:c3:88:
                    17:e9:5c:49:fa:23:ae:5f:39:21:a6:81:78:28:a1:
                    3e:27:b0:1f:89:14:67:5f:09:eb:75:01:66:7f:3b:
                    fe:67:24:9d:ed:df:36:49:2d:11:fb:0b:de:53:d5:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4D:96:51:EA:21:00:EA:06:94:C6:AA:48:94:B7:37:62:CC:A4:A7
            X509v3 Authority Key Identifier:
                keyid:58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:75:ee:d8:65:d9:6c:65:3e:91:c5:03:6a:c1:b5:6c:cd:87:
         86:71:92:49:b9:d1:48:c6:7e:4d:24:19:19:0d:2b:34:29:7d:
         52:8e:f1:fa:7d:eb:07:e2:29:79:cb:b1:41:c0:26:82:2c:3e:
         df:ba:65:83:0a:ec:a4:3c:2f:71:bd:19:78:72:f7:5f:7c:4e:
         86:a6:bf:46:ba:2c:73:ad:1c:b8:d7:60:f5:77:ac:61:eb:60:
         2f:82:d4:5f:3c:89:50:7d:06:a6:ae:e0:11:2f:4a:34:3a:1b:
         ea:f1:bf:11:b0:cd:d6:26:1c:c0:95:16:f3:19:48:ef:20:9e:
         55:d9:94:f4:56:b9:1a:c6:63:2c:8a:47:95:09:96:ae:28:0a:
         45:c7:d1:31:bf:eb:5b:7c:0e:92:55:54:86:d4:16:47:0d:39:
         ee:1f:8b:75:fe:f4:d7:37:90:21:23:29:8b:fb:1d:33:e4:52:
         6e:16:74:1f:08:56:23:a3:95:83:ee:5d:8c:0d:f7:b4:ea:d3:
         5a:a6:b6:55:5b:34:ae:41:86:d1:ab:c9:ed:49:a7:8a:80:5a:
         b7:90:d7:c9:00:10:59:b8:d7:b3:d6:bb:5e:e9:9e:42:70:42:
         93:ed:95:48:c3:8c:6b:8b:10:34:1f:4b:1c:e4:22:e1:ef:81:
         5d:0e:8b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbSO4AoHZqLT9j+1cT99MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTUzZmIyMGI5YzhmOGNjZjZjMzk4ZjRkNjFiMjE3MDdl
MWJiZTIwHhcNMjUxMDE5MTEwMTMxWhcNMjUxMDIwMTEwMTMxWjAzMTEwLwYDVQQD
EygzZDRkOTY1MWVhMjEwMGVhMDY5NGM2YWE0ODk0YjczNzYyY2NhNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujoV0tc5XyKNff99ohQsi/NXSUdm
Md7G1O65RFFyrsyuA3NUjcrv6iGdLfXyueWL1hJHevHOfpp9z6/6t/Fj7OYChdxI
sWHlPRIJezyUL9NYTI/h4MEyMJDTdV+lZ0jq841d73ArnZ7iIVWgiTFUQMRtozxI
QY+ktUVbAlnMavnQDUpW8DWgrUbsdX4KpuFLVKrbdzrgZjFRVKLbg1PIqxhPIPVL
V5IkXLWF36MG+f8BqtrxfLK07WCtFYDpwa2xFagDcD6pYEXOb9NL567Iw4gX6VxJ
+iOuXzkhpoF4KKE+J7AfiRRnXwnrdQFmfzv+ZySd7d82SS0R+wveU9W7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1NllHqIQDqBpTGqkiUtzdizKSnMB8GA1UdIwQY
MBaAFFgVP7ILnI+Mz2w5j01hshcH4bviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JVX3NndWNqNHpQYkRtUFRXR3lGd2ZodS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80OTAxZjMtODkzNC00ZTkwLWFhZjct
Njc2MWQyNzg0ZDhkLzEvV0JVX3NndWNqNHpQYkRtUFRXR3lGd2ZodS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80OTAxZjMtODkzNC00ZTkwLWFhZjctNjc2MWQyNzg0ZDhk
LzEvV0JVX3NndWNqNHpQYkRtUFRXR3lGd2ZodS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnXu2GXZ
bGU+kcUDasG1bM2HhnGSSbnRSMZ+TSQZGQ0rNCl9Uo7x+n3rB+IpecuxQcAmgiw+
37plgwrspDwvcb0ZeHL3X3xOhqa/Rrosc60cuNdg9XesYetgL4LUXzyJUH0Gpq7g
ES9KNDob6vG/EbDN1iYcwJUW8xlI7yCeVdmU9Fa5GsZjLIpHlQmWrigKRcfRMb/r
W3wOklVUhtQWRw057h+Ldf701zeQISMpi/sdM+RSbhZ0HwhWI6OVg+5djA33tOrT
Wqa2VVs0rkGG0avJ7UmnioBat5DXyQAQWbjXs9a7XumeQnBCk+2VSMOMa4sQNB9L
HOQi4e+BXQ6L/A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:02 2025 by rpki-client