Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
File:                     WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft (raw, json)
Hash identifier:          MVGaaknntLZx5gd0x1x3d4M3UPiFGekzJbl8BeerhMI=
Subject key identifier:   8F:B1:7E:DB:66:62:94:55:19:50:A6:2E:13:68:35:81:34:E8:8D:39
Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Certificate issuer:       /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Certificate serial:       0197B7456586313BC0E35063C0D3F15B3C72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 16:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:07 +0000
Files and hashes:         1: WQIOJXHFculSf7VKNcTI4G1FzB0.roa (hash: 1m31qu3p2ND5PEv0/zfE1Skv8FXpx3eh76tg/GNUGqE=)
                          2: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl (hash: mGcpt7HKGkPeV0pQVHlQuH2qCcnaL6AOyQYK9eOPeaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:65:86:31:3b:c0:e3:50:63:c0:d3:f1:5b:3c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
        Validity
            Not Before: Jun 28 16:01:07 2025 GMT
            Not After : Jun 29 16:01:07 2025 GMT
        Subject: CN=8fb17edb666294551950a62e1368358134e88d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:58:51:9d:0e:37:52:b3:53:c3:b9:d8:81:
                    29:3b:df:f5:f6:f6:00:b3:8b:4d:9b:46:e2:5d:75:
                    81:5e:79:73:7d:3a:7e:f9:35:15:35:53:7c:25:29:
                    8f:31:db:af:3d:9b:fc:c0:c7:ef:c4:44:cf:f4:19:
                    cf:b0:23:ef:c5:fe:ec:16:29:a4:f0:f7:c7:b6:39:
                    96:a0:d9:f7:7d:bb:0c:8b:72:be:ea:f0:28:bd:90:
                    8c:89:51:e7:ee:d7:db:2f:56:58:79:e9:5b:fd:db:
                    7b:1a:23:fc:92:ef:6b:fd:8c:7e:2b:c1:c9:95:51:
                    a7:fe:89:46:4b:71:90:0a:96:4a:f4:79:e3:21:f3:
                    5f:ae:e9:2a:92:c8:bb:09:e1:df:38:d8:f0:2c:3d:
                    6f:f0:57:03:ea:15:f1:db:ed:1f:70:b0:74:be:d0:
                    f3:f4:ec:72:d7:35:86:e5:9c:31:24:22:f6:20:e1:
                    9c:24:79:ed:c0:34:5f:eb:2d:27:24:bf:ff:aa:19:
                    44:56:41:45:f2:2b:4e:ea:d6:c6:bf:39:96:5d:a6:
                    cf:90:70:9a:8c:07:14:b3:b3:50:c1:9d:36:9f:51:
                    e8:14:11:b1:dd:6d:4b:28:81:f4:b3:44:17:4d:01:
                    32:d9:25:31:10:41:1e:d1:69:1a:ff:4f:9a:fc:a4:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B1:7E:DB:66:62:94:55:19:50:A6:2E:13:68:35:81:34:E8:8D:39
            X509v3 Authority Key Identifier:
                keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1b:f6:78:9f:c1:75:78:21:62:23:15:ba:73:af:c7:e3:d8:
         33:0c:25:0c:b7:60:47:fd:00:0e:da:69:d9:4c:ae:59:72:5a:
         4e:68:47:5e:17:0a:b4:7a:1f:fa:5a:26:60:88:f4:a3:60:98:
         3d:45:26:f3:9b:9a:43:e7:16:0b:25:66:e5:00:b6:47:b2:62:
         c4:5e:73:46:49:3f:79:d0:37:0c:1a:de:a5:e6:41:12:c1:3b:
         ae:0b:aa:b2:65:0f:7a:b9:6a:0b:dd:77:9f:ee:de:a1:85:af:
         e9:40:2b:53:3c:be:eb:b8:30:08:88:bc:7f:28:64:2a:c4:0c:
         fb:ed:0e:b7:81:21:0f:d2:58:cc:54:eb:90:28:a2:e5:66:76:
         99:ac:66:f2:5f:be:16:d8:87:9f:5d:92:e5:fa:a2:43:30:d8:
         96:83:8a:23:01:92:4e:d2:32:ee:9f:4a:47:81:5f:fe:65:dc:
         eb:50:5f:fa:2c:3d:cf:04:ba:6c:d9:19:a0:a9:13:e8:a6:5c:
         5a:8b:ed:d9:16:6d:0c:e4:cd:aa:54:78:86:7d:f3:19:64:01:
         e8:bc:f4:eb:30:48:de:ae:1c:2c:c5:fb:48:99:5f:3b:5d:2a:
         11:29:71:bc:47:8f:96:06:56:8f:39:6c:a0:39:fb:e0:19:17:
         e3:05:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:00 2025 by rpki-client