Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
File:                     wh-rdnRH02kRl0z5ux0a6RMfyEU.mft (raw, json)
Hash identifier:          XPFzErIEhPWNzdSckF3IGpbyRLQOXNeZTfAk1xaJo34=
Subject key identifier:   55:8E:3D:F3:27:C3:C2:ED:EB:24:A4:08:A9:D7:B9:A4:B9:DF:49:F3
Authority key identifier: C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45
Certificate issuer:       /CN=c21fab767447d36911974cf9bb1d1ae9131fc845
Certificate serial:       0198D4E06FF956C2D4A49904D1FA4330047E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
Manifest number:          13D6
Signing time:             Sat 23 Aug 2025 03:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:15 +0000
Files and hashes:         1: prGV5vanh8ZP5p3KxsDzpumMYgk.roa (hash: hK6jdh1nUN3ur+bES2D8ND74m74aDMb2GNKxeALcVf8=)
                          2: wh-rdnRH02kRl0z5ux0a6RMfyEU.crl (hash: 9TIj6da2Styx7JX76dEAIETU/T1kXZ4MoREogjJGRS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:6f:f9:56:c2:d4:a4:99:04:d1:fa:43:30:04:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c21fab767447d36911974cf9bb1d1ae9131fc845
        Validity
            Not Before: Aug 23 03:02:15 2025 GMT
            Not After : Aug 24 03:02:15 2025 GMT
        Subject: CN=558e3df327c3c2edeb24a408a9d7b9a4b9df49f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:99:c5:e8:17:6f:07:d7:07:19:38:9f:8e:
                    c7:f0:d9:ff:00:c3:0b:3d:f1:62:b4:cf:81:b4:29:
                    24:ab:57:00:6d:e4:77:51:28:f5:15:b1:82:b5:00:
                    10:59:ee:f1:9f:0b:1d:0c:8a:b6:45:cc:67:5d:53:
                    47:f6:5e:c2:28:6f:c8:24:9d:fa:db:cf:5f:c0:19:
                    5a:04:d1:2b:86:8b:42:95:8a:fa:68:be:2d:40:e9:
                    39:50:50:59:2c:f7:e6:34:dd:03:4a:f3:50:77:a0:
                    96:ac:c7:55:e7:73:66:4b:3f:00:c7:8b:87:94:a3:
                    e6:98:44:9c:0f:e1:ef:48:0e:b7:27:e1:3c:45:9d:
                    c4:12:3f:5e:95:2a:73:a4:32:81:b7:2f:3d:fa:a1:
                    a8:62:4d:5c:16:7e:79:7a:76:b0:bb:5a:28:1b:32:
                    fe:cc:a2:15:4d:4c:eb:89:c2:ac:88:10:3f:76:df:
                    46:30:2f:8e:49:88:27:51:fe:34:72:c9:e0:d2:86:
                    14:8e:0d:30:35:0e:b3:1f:e5:e5:df:e0:03:91:a5:
                    4c:98:11:ab:0a:61:4b:d0:8a:66:8d:5d:74:a5:3c:
                    7c:9c:6a:de:7f:41:65:06:8e:c3:e9:60:78:eb:b2:
                    9f:5e:e5:a2:7c:0a:e6:fd:ad:56:33:d1:f1:83:b9:
                    c3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8E:3D:F3:27:C3:C2:ED:EB:24:A4:08:A9:D7:B9:A4:B9:DF:49:F3
            X509v3 Authority Key Identifier:
                keyid:C2:1F:AB:76:74:47:D3:69:11:97:4C:F9:BB:1D:1A:E9:13:1F:C8:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh-rdnRH02kRl0z5ux0a6RMfyEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ceb5a1-16c0-478f-a2cf-4f225d088566/1/wh-rdnRH02kRl0z5ux0a6RMfyEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:76:fc:89:e5:4f:0e:87:d9:dd:69:b0:94:f0:a7:ca:55:58:
         0f:1a:b2:24:cb:68:01:dd:f3:f6:da:36:da:48:ca:ce:52:a7:
         94:21:94:4c:00:63:ed:a2:03:cf:bc:73:37:f2:e8:08:52:88:
         54:59:d8:c7:57:e0:2f:b5:9f:cc:de:18:ba:5c:4f:d9:4b:d0:
         3a:a9:18:dc:6b:4b:34:c4:bd:20:5b:44:8e:47:19:31:17:84:
         aa:22:64:3b:40:7e:27:34:fa:7f:ac:f6:76:b4:9a:27:3a:5c:
         56:25:e0:4e:7c:ef:8f:d5:a4:2d:ed:31:ad:5a:59:a6:6d:7f:
         0b:bb:b8:d1:6e:00:38:85:5a:08:f7:09:49:63:2b:7d:de:40:
         e6:c2:9d:c6:c1:f9:e4:58:21:83:b8:44:b2:57:de:23:c6:9a:
         89:b0:bb:6a:8a:57:d6:88:77:b4:e7:11:72:72:cf:ae:c9:6b:
         f5:63:00:43:fd:53:a6:bb:7a:ef:cc:00:e6:42:ce:07:34:55:
         e0:37:c8:79:e2:23:4e:74:cd:44:0a:c0:c1:cd:bc:85:31:15:
         93:ae:4a:c0:c4:97:83:81:5b:b3:1f:c9:30:c3:0b:57:f3:72:
         67:e8:40:ac:79:40:79:b1:8e:09:c3:a7:88:43:6c:6c:50:8b:
         4e:dc:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:52 2025 by rpki-client