Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          hyVBd8bw69+yvEbFrHnmuVHh9YCS2yJHUS11TeQITeU=
Subject key identifier:   B2:E1:AD:A6:7B:04:C5:99:2E:6D:4B:84:C3:22:E7:46:77:62:BA:6B
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       0198D66066E525973AA795174B301EE9A85C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          1433
Signing time:             Sat 23 Aug 2025 10:01:38 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:38 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:38 +0000
Files and hashes:         1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=)
                          2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=)
                          3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: u2NSYpJBq+T3Gds+BWcZSEdRIC6Rj9yW0S4YEH07RF4=)
                          4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=)
                          5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=)
                          6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:66:e5:25:97:3a:a7:95:17:4b:30:1e:e9:a8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Aug 23 10:01:38 2025 GMT
            Not After : Aug 24 10:01:38 2025 GMT
        Subject: CN=b2e1ada67b04c5992e6d4b84c322e7467762ba6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:ed:0a:79:a1:91:aa:e1:80:20:c3:f8:a1:
                    3b:3a:1e:42:bb:63:ad:99:40:17:34:b1:42:80:31:
                    1c:7f:46:6a:9d:39:79:c3:c3:5f:b9:03:fc:dd:8a:
                    c0:ce:f6:9b:d3:0c:96:1f:5d:3d:b2:7c:9b:e2:d0:
                    a1:3d:31:d5:e5:c3:09:2a:86:72:ae:d5:56:4e:9a:
                    79:7e:e4:11:2f:13:43:cb:36:0c:46:d8:73:bc:36:
                    a5:db:7d:3e:0c:51:6e:d7:49:46:60:23:c5:82:0d:
                    f7:75:ea:39:89:9f:7a:d4:59:12:28:ac:95:c3:2c:
                    43:01:57:68:52:f5:64:7b:da:bb:91:68:32:5d:aa:
                    59:05:9f:60:64:a5:59:5c:dc:f1:94:9e:3d:9a:75:
                    56:eb:2e:ce:fc:c7:08:26:98:11:2d:14:51:ae:be:
                    05:66:ae:df:97:4c:36:5b:0e:e7:a3:29:e8:84:38:
                    31:73:7e:33:e3:94:79:eb:aa:99:fe:d3:43:d5:81:
                    17:e1:47:d6:d2:dd:4e:0e:55:82:7c:77:d4:85:99:
                    3f:8f:85:70:37:c3:d2:23:f5:ee:f2:06:47:c0:48:
                    2e:b4:36:6c:4c:e0:36:5b:59:97:45:b8:14:70:28:
                    f4:3b:1a:8c:d9:f7:83:15:76:53:6a:ed:b8:48:53:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E1:AD:A6:7B:04:C5:99:2E:6D:4B:84:C3:22:E7:46:77:62:BA:6B
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:94:c2:48:d8:8a:94:df:5a:19:99:07:7e:0f:75:ca:70:bc:
         8c:ac:d6:fd:66:00:b4:55:2b:e1:61:b4:7f:f4:1e:3c:8d:73:
         44:6f:e2:08:a6:12:a1:a3:60:63:55:f1:a6:36:c1:b3:1e:08:
         35:64:0f:86:75:08:bc:01:ed:67:e9:3b:e2:da:b5:e2:0f:a6:
         60:20:4c:6b:eb:92:bd:de:c4:bc:1c:f6:db:84:d6:29:11:55:
         b2:30:69:e2:05:72:79:57:c4:55:d6:5b:84:e4:f5:b5:53:ef:
         b1:50:21:7b:ad:e9:11:88:73:ae:6c:57:a0:46:36:0e:c2:91:
         02:58:35:5f:9b:4d:4f:e0:13:4b:1e:10:6b:a2:42:b0:32:81:
         c3:08:d2:c7:19:14:2b:c6:20:32:80:fe:8d:4a:48:68:2e:35:
         af:44:da:26:f1:ab:85:5a:0d:a3:21:cc:06:20:fe:de:79:b0:
         de:8b:94:8d:f3:ed:5f:b3:c8:56:d6:64:76:71:09:6c:3d:7a:
         91:8a:2d:99:0e:d8:54:ce:1b:bb:fc:f0:b2:5e:25:d5:9c:a6:
         c0:3e:11:95:3b:4b:c3:4b:10:c1:25:3c:7a:72:81:e3:bf:dd:
         a7:5a:4e:2c:87:ac:34:fb:98:28:70:38:71:c6:ea:b1:5b:79:
         8d:11:f6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:45 2025 by rpki-client