Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          CEmX540o5TYoOIT1xMuoxCvVAGqSU5m1Pmek51oVydQ=
Subject key identifier:   8F:F7:E0:8C:B6:10:E2:B6:F8:65:E0:60:A0:A7:6B:0E:17:1E:03:D3
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       0198D5BC284E8F24DC44CFFE5760D3C54576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          0811
Signing time:             Sat 23 Aug 2025 07:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:14 +0000
Files and hashes:         1: 1fBqan9eiGNKf_sVRt9T7w2ueco.roa (hash: B1F3p0oyzxC6K5ejaWJLuMfvLmGRqgLjI4bPANtUWaw=)
                          2: 2-jzsfhMMb0RIDszcU9Bxe3dil0.roa (hash: a5uAU6wg4ixL0x01+P2YcqFwvfYHW2TV3eZbSepEKRM=)
                          3: 4ZArBLnLocPpGHsaVFtOWy1GsWA.roa (hash: pqXDsHt86t8zsxtaFtGXKbg4QUfmimTh3EtiWAKZzkQ=)
                          4: 5n3pDdBZIfRKKwvF-PXsVxqWP7g.roa (hash: OEQS8BiFWADS330IE0IjflqpZ+380q91zFOvGv1tTY0=)
                          5: 6NktxJS7SV-soe69tE2zxPM1iWI.roa (hash: aqOZrEPKlIu+bqZiBozw+l4nXKMV/b9t1NxYsXKzpPY=)
                          6: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (hash: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=)
                          7: AX8BlTRT6cyA-hbrHSjerE9tcEg.roa (hash: TNhzICy1LRNCVxrWytbR/UE5yKjagpfkp4U27R7CF7o=)
                          8: AosAQto_z9OqcwqeC_SZWECJeJM.roa (hash: yf8rKxe7cxV+hvRaeqOv00ssVciIq9eecdLxMG0bKBI=)
                          9: DYexdmZOxcpbKWuAqDq2QX7NEFY.roa (hash: F1i23HVwCerE7yItsRmcmGbWDzsfKJ2ge5FBGIuSG48=)
                          10: ERe51qclsX1vtlIYSnp9k4CtxTU.roa (hash: kRCA0E3LofkB2UCr2ORCJ295mGOQpRVa8ZmBK6mCChQ=)
                          11: FYUC0pIEfsPLJcLPRM8ZNRdYzZE.roa (hash: Hi+b9v3/fuodL1f71yFY2qTEcK5Re2V3BNTHfOi008I=)
                          12: HsXdHC7XLr8L5Jap91e-0O8hqWg.roa (hash: 0AUM4AXSh8LD0LXCQT8OJCo+0466mL2PMgQaSwOGM/U=)
                          13: KXiyCJtTmpSmQTySjliHwyEv9bY.roa (hash: v92jqGLaXhQfwygEz2dXZNGz3A+5DlwPnY+2QQsgEyg=)
                          14: Me2_Prx_OH84___bzQH13Qqoab0.roa (hash: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=)
                          15: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (hash: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=)
                          16: SXtyu-lARAK6mFr8dcsc3AO10aM.roa (hash: WtowmT836SKvl3mx5ccU5OfbLe/aMlHE6wFpFFcNAek=)
                          17: SrEfDrHMkGEpdeA2ZUisx7ubFNA.roa (hash: RKPLlrEgQ53ytDlI3r+HGIuuyex97rpEUzMwWq38+9s=)
                          18: U-Ph48laIxEbF24jH6nOMT3OpLA.roa (hash: h/z1tS8nUsqG42P90V9Offm2msIM9SciPTSWhkVK3yE=)
                          19: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (hash: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=)
                          20: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: 6Ar+sV5FvFw18rsi4txGeV+PdOcwXk04F2cTyynd140=)
                          21: YhUiBt6aWDxfUxxlX_f5An_H3Vw.roa (hash: UUlZjHLoXxN7b5MRYoyNUfcSFhA/gMCkcrXZjW9BfPs=)
                          22: ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa (hash: jHjSzZUDGV2Tn0cFtWpJiySCbc4D9KXn4b20Sb0HAUA=)
                          23: iHplqt4DUNKw6ZOchFUdjPI3y9w.roa (hash: mQhvd0Sd0kmDl4SEDJMNNOJzjx+Zauw/1H6yRaPtWco=)
                          24: jW_AQF1FLR2FOQFIiQo2vVi_Y5g.roa (hash: Cb6kLOZMSHrNhb/6jW0Lj/1BPRCizi1qhHCgpnvp/Ms=)
                          25: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (hash: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=)
                          26: kPsDUSBkqswfaMzVi1Cye0vM8ks.roa (hash: w+xp6HNKwTbsH2m8GWhBFiGbaO4PIv65OfaGPcmfyUs=)
                          27: lKN4UVZtN90tPiHbxWVbAiES2eo.roa (hash: z/Q5abY5hFpeI2vwI0AV9WzD16kLOgpzqlnEO3K5QQg=)
                          28: lUfZhOt-wvUulei1P4O40ILh6W4.roa (hash: KvgRSxa7IHlLzvxb6tBzeiNZVGLjogvJrOdyYd+Hhtw=)
                          29: nMNUMFD0D6QsYK_jnD6pqYmeXsk.roa (hash: cEJMwKIA2yxBnNxWn1mu5jHlICkXHOt6q6vHqbiLucg=)
                          30: om7cnxirwY1mF6WG8GSa3rsaVqw.roa (hash: +3vNfJz4iobOk77Hgvoshz1u99toaeiukQN3KQqch5c=)
                          31: pSPQssN5kDIUCVU97gVJ5sRDFrA.roa (hash: 2T2Pj/Lur1RrWbVnX6sEjqE6EYLVtljOc+B0vUZ0Otg=)
                          32: qP-ljFIZwxDHqtXoeZTlA3LFnMQ.roa (hash: D4ZJ1otWT2E4xoZhtkVLy+1+bK1l0mAAxLn6w3oGmdM=)
                          33: ra3KqgTuCiwRC0PZJRve-Bdxvjg.roa (hash: mcABOKGSXtu9A2WM6jvcZmDeS/Ld950DxdjwmVB9gHU=)
                          34: sUXFPW0NRpJM4hG7LzPDan-v-Ek.roa (hash: p4O9sfEQ+qJe5DEqRIHGkARxsLT8DQyNzXhwr7CF1/w=)
                          35: vU2HddgRMZd-n9GXfaubZsaeTag.roa (hash: fORgxQlTLiLIEJTKyJ2i2MnWHaJ55TGjD8VWzhhqp5Q=)
                          36: wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa (hash: hApFysPixMC2EBljVd1zm9U6jkNX4gLFQUXs9uZSHu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:28:4e:8f:24:dc:44:cf:fe:57:60:d3:c5:45:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Aug 23 07:02:14 2025 GMT
            Not After : Aug 24 07:02:14 2025 GMT
        Subject: CN=8ff7e08cb610e2b6f865e060a0a76b0e171e03d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:8b:77:9c:f6:79:a7:62:10:bd:84:a5:f7:
                    e1:46:a7:a4:50:55:c4:99:5f:64:7b:39:5c:6e:7b:
                    b3:0f:c1:97:5f:08:97:3d:67:c3:ac:8a:d0:42:a4:
                    b8:14:4d:00:04:fb:8e:61:84:a3:97:04:4f:97:f1:
                    b6:a2:26:31:74:a5:0c:67:51:26:96:24:de:f8:d5:
                    b9:75:6c:72:31:6b:ba:3c:4d:6b:ce:39:90:1d:b1:
                    95:82:ca:47:5d:7f:ff:8c:28:2b:7d:95:5e:1e:a9:
                    38:c4:e5:59:a4:6f:c7:09:62:0b:49:a1:ad:60:58:
                    4f:69:b4:a9:17:2c:f2:d2:16:17:10:a3:23:6a:18:
                    a0:51:1b:ee:bf:23:42:7b:be:c7:91:17:dc:f4:cb:
                    3a:d5:75:55:59:b5:88:8c:45:e1:97:d1:dd:1a:6f:
                    90:7d:5f:cc:65:2b:5b:b6:ca:9f:cb:50:50:af:98:
                    00:c3:b5:d2:72:0d:26:db:5c:df:0e:96:b0:f3:a6:
                    21:15:d2:59:67:72:a8:27:6e:49:63:b5:c6:41:0a:
                    99:60:f5:cc:4e:3f:c1:1d:a7:ca:96:5f:8c:1b:05:
                    ce:d2:5e:4a:5b:b7:43:b7:35:47:c2:ed:ba:6f:08:
                    76:1b:2f:6c:f7:2c:16:8a:d2:15:2b:06:f0:9b:67:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F7:E0:8C:B6:10:E2:B6:F8:65:E0:60:A0:A7:6B:0E:17:1E:03:D3
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a0:71:bd:08:07:34:a2:78:9a:38:54:08:67:e0:09:fd:cc:
         4e:95:51:80:cc:f6:ff:c0:c3:39:4d:bf:ef:09:76:a4:2e:e7:
         ef:92:69:7c:3d:13:83:2b:19:bd:cd:11:e9:15:ea:59:29:81:
         0d:48:c1:a4:1b:e5:8a:c9:51:72:4e:a8:42:d9:b9:02:dc:4c:
         63:65:34:28:48:e9:e2:86:a3:32:32:78:f3:a4:77:4e:cc:d7:
         46:60:bd:fd:d5:4d:4c:d6:fc:fc:59:5c:f3:fc:b0:36:d0:ab:
         e2:59:3b:96:34:9a:c4:61:49:ea:0b:8d:9a:c9:1f:22:b8:74:
         af:1f:b4:63:62:be:ba:aa:b8:c2:da:1c:7f:8b:48:88:71:66:
         94:71:2a:c2:b9:c6:6c:7e:30:ce:39:cb:26:1e:c2:a3:ef:63:
         17:66:fb:bb:8c:5a:ad:fc:60:98:17:f1:7a:ea:c6:88:df:ab:
         42:23:25:55:17:6d:4c:39:aa:5d:45:7a:f4:c6:0c:41:e4:32:
         db:65:ed:ba:04:bc:ea:36:fe:2f:e6:60:ea:bc:0c:73:98:c9:
         85:82:db:9a:d4:20:f4:9d:14:c0:72:a4:da:bb:34:9d:4b:9f:
         d9:7a:3f:2f:81:76:57:f4:79:c7:a7:e9:c3:3e:b5:fd:70:71:
         ae:7a:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:51 2025 by rpki-client