Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File:                     Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier:          KL2LD/wquXSEbyMERuUbVYezdh1jpqt3oOMK+rLSpI4=
Subject key identifier:   4F:C2:61:A9:4F:A9:03:18:1B:7F:15:70:4F:2A:B9:1B:24:F5:25:E3
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer:       /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial:       0198D473E65039EC0CA2828605B1098E6BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number:          088A
Signing time:             Sat 23 Aug 2025 01:03:41 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:41 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:41 +0000
Files and hashes:         1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
                          2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: eCoeShqGeaMxNHyBE+AItLdolBgi/8ECd6dOs/z5Vmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:e6:50:39:ec:0c:a2:82:86:05:b1:09:8e:6b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
        Validity
            Not Before: Aug 23 01:03:41 2025 GMT
            Not After : Aug 24 01:03:41 2025 GMT
        Subject: CN=4fc261a94fa903181b7f15704f2ab91b24f525e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f2:61:9e:9d:91:de:75:76:21:38:56:6c:0a:
                    cd:d6:b4:96:e6:6f:0d:a7:08:7a:1d:35:7e:67:3c:
                    9f:44:0d:f6:7d:81:24:6d:8b:f5:60:ea:73:f0:5b:
                    08:e4:fe:25:f1:e2:1a:ce:15:e9:fe:66:05:72:9d:
                    46:35:be:0e:46:06:66:c6:1a:1d:e5:47:73:6b:93:
                    d1:9f:b2:94:5e:b0:e4:b7:8d:b1:54:7e:ee:73:2f:
                    3d:1a:a5:38:05:20:51:46:50:53:58:02:b7:89:8f:
                    38:23:72:de:d9:d9:78:31:25:50:a9:fc:03:6c:c2:
                    25:f3:a1:22:b3:c8:e3:bc:ac:54:f7:fe:90:aa:a3:
                    87:d1:41:36:c6:79:3a:fb:bc:72:2d:a0:fa:1d:fc:
                    79:57:31:7a:1a:44:b8:e6:23:f9:12:46:2e:aa:18:
                    69:dd:a6:df:6b:aa:52:9e:6c:5e:f7:42:dc:79:14:
                    f6:a3:11:27:ed:35:4f:a4:46:43:9e:43:d1:06:82:
                    7f:3f:ac:c4:92:f0:0b:ca:3b:87:b1:20:5c:5b:92:
                    d3:1e:08:c8:a5:a0:c3:e3:ba:77:c7:b5:33:dd:01:
                    9c:b8:e0:0c:5f:70:f5:12:55:b7:5b:eb:49:ab:cb:
                    60:37:06:f3:fc:13:21:d8:af:02:d1:3d:d2:c1:72:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C2:61:A9:4F:A9:03:18:1B:7F:15:70:4F:2A:B9:1B:24:F5:25:E3
            X509v3 Authority Key Identifier:
                keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4c:a9:e2:21:05:0e:f8:61:c0:63:01:56:ee:4e:65:58:e7:
         77:a7:6a:83:f2:ac:f7:fc:4b:d6:4e:a8:73:d6:a2:ae:c2:f4:
         46:67:db:22:a8:9f:e8:b1:f7:ee:df:70:a4:96:16:da:9d:87:
         a5:a9:92:f5:a3:d3:51:21:31:9b:2e:89:ad:73:89:4a:37:b5:
         0e:8a:13:e5:e6:bc:31:60:08:38:96:8c:05:a5:ca:e6:ae:2a:
         be:96:7e:3e:04:72:30:b5:54:0e:f1:4c:30:a2:92:f1:bd:92:
         0c:d6:78:23:59:26:ac:4c:d9:11:cd:5b:a6:75:2a:e7:c7:2e:
         12:49:da:fe:d0:ea:10:32:5d:f5:16:45:c0:18:71:af:b1:eb:
         87:2f:9a:62:0b:35:1a:39:48:fd:fe:c3:2e:2c:03:b3:4a:ac:
         64:0c:bd:a0:1d:06:f6:83:12:4b:27:af:f8:c9:c5:60:b0:8d:
         79:86:9b:ab:2d:32:df:68:12:38:15:5a:bf:22:f9:36:60:c3:
         8f:60:8d:97:fa:79:a2:63:28:5a:9b:e6:db:38:cf:dc:dc:71:
         5d:a0:2b:22:72:e6:60:87:60:c7:4e:57:50:76:03:9b:0f:98:
         29:98:37:64:89:fa:48:80:f5:2c:a8:c1:73:b4:ea:d6:f0:ba:
         af:6f:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:51 2025 by rpki-client