Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File:                     wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier:          PR2qhBhKRaeT4JRgkKdhmiVB3krMELAy0SL830jYv6A=
Subject key identifier:   8B:D2:98:2C:46:7F:7A:F4:C6:92:4A:ED:90:F9:1F:B1:F0:C9:83:C3
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer:       /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial:       0197D70765DD5DB2082B7E1F67A95DFC10DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number:          03AC
Signing time:             Fri 04 Jul 2025 20:01:15 +0000
Manifest this update:     Fri 04 Jul 2025 20:01:15 +0000
Manifest next update:     Sat 05 Jul 2025 20:01:15 +0000
Files and hashes:         1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
                          2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: YR9j3Ez+p1+sIHaSdD8POA7Di7cf/H92KJRX+32EQCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d7:07:65:dd:5d:b2:08:2b:7e:1f:67:a9:5d:fc:10:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
        Validity
            Not Before: Jul  4 20:01:15 2025 GMT
            Not After : Jul  5 20:01:15 2025 GMT
        Subject: CN=8bd2982c467f7af4c6924aed90f91fb1f0c983c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:45:e5:b1:a9:12:3d:16:89:6f:15:91:6f:b9:
                    71:e8:c1:71:11:ad:87:2a:4b:d5:0c:8f:4e:e1:19:
                    b2:0d:f1:43:11:af:9f:89:38:db:e2:d8:18:ff:70:
                    41:65:58:bc:1c:9a:5f:2b:91:ce:c3:cd:44:6d:ce:
                    6a:d0:34:c5:be:67:3b:a7:e3:85:58:e0:aa:7a:a1:
                    26:a9:4f:87:59:3b:92:58:9f:1b:50:35:49:4a:47:
                    14:e0:4f:8e:b0:38:64:ab:92:8b:82:9a:5c:91:3b:
                    ff:8e:23:70:95:de:3b:9d:8f:18:15:41:0c:55:87:
                    d8:97:cb:3d:e1:db:4f:dd:8a:21:8e:32:0d:11:82:
                    ed:6e:a0:13:5b:b5:f7:42:43:ab:8c:dc:d3:55:5e:
                    01:b2:a3:9b:dc:88:e6:f7:e4:f8:73:a1:62:d8:25:
                    a8:38:b5:ba:36:9a:87:49:b6:90:f2:ed:f2:b6:e8:
                    62:87:ed:87:10:13:fa:d9:25:87:21:ae:b9:12:fe:
                    88:16:29:3f:8e:61:b4:da:fa:c5:56:47:96:65:41:
                    df:e4:08:80:c8:06:83:11:2c:8c:0b:51:fe:0a:98:
                    4a:5c:36:c1:59:1b:c4:44:a5:17:ef:28:50:fc:e9:
                    9d:6f:3b:86:9d:15:f7:91:7e:7f:bb:61:86:56:34:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D2:98:2C:46:7F:7A:F4:C6:92:4A:ED:90:F9:1F:B1:F0:C9:83:C3
            X509v3 Authority Key Identifier:
                keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:64:43:cb:13:01:4e:1e:91:e8:c9:1e:81:13:08:5c:54:
         94:77:97:2c:dd:90:82:27:00:5e:01:f1:dc:e4:28:a9:ef:dc:
         d8:3e:ac:44:92:0c:38:64:8e:af:e4:7e:33:95:d5:9a:ce:45:
         de:58:48:60:55:f4:e8:0e:9c:e9:c2:b7:4b:d7:24:b7:0b:3c:
         43:ad:d3:b2:b1:dd:b0:6f:f7:e6:66:cb:98:25:ed:f0:f8:e1:
         64:ec:9e:2e:a1:b3:df:0d:43:fa:c5:13:a9:41:42:dd:56:6d:
         14:57:16:45:2e:98:1d:10:45:c3:7d:26:c6:7f:f5:4c:ba:3d:
         cc:e3:4e:e2:22:5e:b6:d5:96:78:bc:96:2a:62:0b:fa:7e:d0:
         d2:b6:8d:10:6d:64:56:cd:85:44:3c:8a:d0:c0:3b:28:ba:4f:
         47:52:a1:ce:2b:d9:3d:6f:d0:e9:08:0a:2f:c4:0e:3a:ef:6d:
         e9:95:c6:95:73:ae:7d:0b:b4:84:0d:c4:44:79:8d:6c:21:47:
         24:59:f7:e4:a6:70:8d:b8:b3:5b:d0:b0:c9:86:0e:f9:a3:93:
         c3:a9:20:e8:22:0e:c1:48:3f:19:20:ca:ce:39:1d:86:0a:c5:
         28:cc:e2:5c:d8:39:f7:38:6f:3b:bf:b3:6d:70:93:11:5c:0e:
         03:bb:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 01:54:12 2025 by rpki-client