Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          akF40BFej2zqi6RGg29uuE0THteTjB/0PmAaVIx7WLA=
Subject key identifier:   88:F8:E1:E5:C8:C0:E8:49:CD:CA:B3:F0:BD:35:49:7F:39:18:D5:FB
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       0198D65FE0E8320C4AA240EC186B8A3C6A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          15DC
Signing time:             Sat 23 Aug 2025 10:01:04 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:04 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:04 +0000
Files and hashes:         1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: aRrCNbWYreRDoUzO5HhnpT/18iME5sDxLrckznUVHyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:e0:e8:32:0c:4a:a2:40:ec:18:6b:8a:3c:6a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Aug 23 10:01:04 2025 GMT
            Not After : Aug 24 10:01:04 2025 GMT
        Subject: CN=88f8e1e5c8c0e849cdcab3f0bd35497f3918d5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:9e:66:ef:bc:51:64:c1:b3:41:67:b9:06:
                    cc:7c:65:7c:e3:a5:5d:aa:4f:84:0d:be:57:87:76:
                    b2:03:5a:ee:40:25:45:04:e9:1b:c2:f0:36:37:9c:
                    38:d8:69:16:86:32:03:0f:98:d1:74:ca:7a:b0:64:
                    8f:3a:2f:8e:71:bc:e9:bd:fc:6c:60:6d:ac:6d:7a:
                    fb:eb:d9:49:c4:2d:a8:32:4f:6e:af:5d:42:2c:e7:
                    26:1c:51:b1:e4:48:31:d9:3f:22:e3:17:0c:7d:57:
                    91:bb:a8:4e:7b:13:75:56:58:cf:af:8d:16:22:8a:
                    80:c9:29:e8:56:6f:f1:e4:a3:79:85:10:5f:cd:44:
                    5b:84:e2:78:95:33:12:c2:f9:20:66:5a:49:d6:cd:
                    6c:33:22:d5:90:a4:e9:9c:00:b2:72:8f:d6:c3:1f:
                    64:1b:74:c0:37:2d:14:b7:8f:b4:57:5e:76:5b:60:
                    6d:79:92:4c:08:9f:3d:80:86:a1:f4:dc:88:f2:fa:
                    f6:77:19:b2:13:50:93:2d:76:19:1e:35:c1:d8:37:
                    c0:31:84:7a:12:21:4e:3f:61:50:2a:14:da:31:45:
                    27:29:64:b5:91:1a:2c:ab:36:35:ac:74:1a:af:9d:
                    32:ea:4a:bd:85:d5:d2:ee:6d:0d:93:34:fd:0b:02:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F8:E1:E5:C8:C0:E8:49:CD:CA:B3:F0:BD:35:49:7F:39:18:D5:FB
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:68:d5:5e:de:91:61:22:39:5b:c6:51:76:8b:1f:64:4a:a0:
         ef:a0:b6:35:75:fe:c5:53:77:4e:9d:1f:89:d7:d4:62:83:34:
         24:2f:64:e9:fe:da:34:b5:a6:ef:73:2a:1e:4d:59:89:99:a8:
         4f:a4:c9:ba:c4:d4:e4:73:44:96:37:37:43:28:ec:b2:40:33:
         09:85:bc:59:0f:6d:77:f4:1a:61:50:ce:1e:9c:74:1f:d3:f1:
         96:97:3f:5a:5a:3e:c9:2d:80:61:ca:aa:21:4d:22:61:fa:e9:
         56:b9:a2:69:bc:b7:0c:0a:d3:dc:73:fc:21:1a:27:83:12:a9:
         d1:7a:ea:24:d9:d3:6f:8b:0d:9f:27:63:43:e7:4a:4a:d5:ff:
         20:19:f4:e5:a3:d8:70:fa:e7:f1:04:4f:73:b6:86:e9:d3:c4:
         e5:83:93:20:e7:ca:0a:cd:a2:1a:65:c8:96:db:4c:58:9c:28:
         15:48:25:60:84:9c:ad:07:29:46:68:24:96:aa:05:1b:bc:56:
         f6:82:9c:fe:f3:4b:d8:70:60:fa:8a:63:79:ca:3d:42:da:15:
         21:f3:6f:83:16:cd:19:2e:f8:78:8e:ab:77:27:a3:61:37:65:
         4e:12:1d:08:fa:fc:91:f2:50:33:a4:cd:fd:bd:55:26:38:3c:
         1f:8f:cb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:33 2025 by rpki-client