Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
File:                     WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft (raw, json)
Hash identifier:          fQT6kSGL92cVuwRneW1w7ezOx2da+cG9R6KD4liGcl0=
Subject key identifier:   F5:02:0B:07:79:7C:00:F7:9F:3C:9A:C8:46:0E:69:4A:EC:D5:AA:DC
Authority key identifier: 5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05
Certificate issuer:       /CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
Certificate serial:       0198D65F211242852B591DBB3BDC0672F16E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
Manifest number:          0992
Signing time:             Sat 23 Aug 2025 10:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:15 +0000
Files and hashes:         1: 1-u2sU3DDBTp7tslVtZM2YXONawE.roa (hash: hY4Vnqp2FHEqA3NhSl3nyi2JgSEr1mIebkZ+fS2Quh0=)
                          2: WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl (hash: wxkeH2dY4hlDgfQaRwJ9Gqr8Hjb4e/pvlVhKjoPl7Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:21:12:42:85:2b:59:1d:bb:3b:dc:06:72:f1:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
        Validity
            Not Before: Aug 23 10:00:15 2025 GMT
            Not After : Aug 24 10:00:15 2025 GMT
        Subject: CN=f5020b07797c00f79f3c9ac8460e694aecd5aadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:54:22:3a:b3:22:cd:fa:f3:82:35:71:4b:
                    c7:bf:8a:b0:49:78:9c:a6:93:42:c2:05:82:84:93:
                    a1:33:58:fb:4c:e2:67:b8:53:79:0d:36:6d:68:dc:
                    5d:17:5d:48:4e:df:be:07:05:e5:86:0b:14:cc:9b:
                    38:df:31:18:1d:78:96:05:76:74:88:8c:38:81:d4:
                    d1:b1:09:df:06:e7:8e:cf:86:40:c0:1f:8a:8e:ef:
                    cf:ea:7f:12:4f:ec:46:b6:4d:c0:6d:03:21:a5:e5:
                    e4:33:38:55:37:16:75:fa:6f:3d:8d:28:f8:40:5b:
                    52:30:47:95:a8:96:53:24:62:b0:f4:96:5f:1b:2b:
                    dc:c4:85:2e:d8:8d:d1:59:b4:92:84:94:b1:9b:a9:
                    7f:32:3b:7e:91:98:f0:af:ab:09:9e:33:d1:80:b6:
                    a7:31:3b:bc:7b:e4:38:8b:a8:f8:9c:c2:74:1f:da:
                    0a:79:4b:9c:52:57:6b:01:bb:08:00:3b:9d:fe:a8:
                    50:89:69:f8:9f:97:bb:60:cb:2f:cb:3e:84:02:2b:
                    b4:6e:4f:33:c5:c6:b7:56:55:d4:c0:33:85:97:96:
                    79:ef:f2:b7:c4:23:9f:3a:62:02:aa:d9:3d:f4:2e:
                    b5:ca:bc:82:17:0a:6a:fe:32:66:05:e3:18:a8:59:
                    f7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:02:0B:07:79:7C:00:F7:9F:3C:9A:C8:46:0E:69:4A:EC:D5:AA:DC
            X509v3 Authority Key Identifier:
                keyid:5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b3:31:02:13:10:c6:f9:2b:4c:fb:a7:a9:12:ce:79:fe:b2:
         99:39:2d:4b:51:01:14:b3:a3:ff:81:90:29:2a:2b:29:cd:bd:
         ee:5e:57:3b:97:1f:d9:81:73:53:67:d9:2d:3a:b4:d0:85:56:
         c9:21:df:87:d5:83:10:b6:37:cf:c9:f8:71:0e:ba:d3:2e:73:
         21:0d:08:55:cd:42:e4:0f:da:35:cf:22:78:ef:22:74:32:7c:
         ae:88:d4:87:c9:aa:cc:ae:07:4b:91:04:7d:4c:ba:05:c8:2c:
         7c:24:2a:97:f5:96:eb:77:42:6a:69:83:dc:e7:a5:24:1e:bf:
         60:17:99:ec:dc:2c:2c:e3:8c:74:75:df:c1:af:0e:ce:f2:d4:
         33:ad:7d:3b:21:01:ae:c0:62:b1:64:e3:78:b2:75:86:d8:7b:
         d1:70:33:00:98:1c:d4:cb:fb:6e:55:fe:dc:a3:f5:b3:37:e2:
         c7:07:98:38:6f:f1:e6:c2:55:5c:59:ae:c8:bb:b0:c8:23:9b:
         b7:63:c2:96:b4:ef:b0:4d:bc:a8:23:27:be:e5:91:9c:7a:27:
         a8:de:84:88:b0:2a:3b:2f:66:ec:3f:f2:20:90:5a:02:87:fc:
         0e:59:e2:72:a2:2f:ab:78:f3:0f:4d:3c:13:25:8b:bf:e0:3f:
         ab:78:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:56:36 2025 by rpki-client