Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File:                     WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier:          OTUR1KFbpHK6cLwetYyRhhxOZU5ZFdYGlPagEI5JNbU=
Subject key identifier:   98:6D:AB:2C:59:49:52:58:BC:3D:63:C6:57:FB:24:2D:BB:D9:B8:A0
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer:       /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial:       0198D9CE207E1587A8D7BD575DCD538739D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number:          15B5
Signing time:             Sun 24 Aug 2025 02:00:21 +0000
Manifest this update:     Sun 24 Aug 2025 02:00:21 +0000
Manifest next update:     Mon 25 Aug 2025 02:00:21 +0000
Files and hashes:         1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: W89ZFitH0J15yzV5NmnoyF1Wy4chwib/os8/noPZgfM=)
                          2: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:ce:20:7e:15:87:a8:d7:bd:57:5d:cd:53:87:39:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
        Validity
            Not Before: Aug 24 02:00:21 2025 GMT
            Not After : Aug 25 02:00:21 2025 GMT
        Subject: CN=986dab2c59495258bc3d63c657fb242dbbd9b8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:3e:b0:50:8e:68:83:46:c8:07:f9:f0:e1:
                    09:78:7c:04:ff:00:cb:40:57:18:f8:1a:dd:50:a8:
                    7f:85:fb:8b:62:87:9b:c8:89:29:4c:f3:8f:97:38:
                    3c:32:a4:80:b2:89:6a:3b:14:c9:52:0f:5a:03:4b:
                    de:d0:47:94:c3:d1:87:76:32:0d:6b:68:c4:87:83:
                    47:b8:be:a7:d8:be:a6:cd:bd:1c:4e:d1:ae:89:3d:
                    8f:18:a1:ae:0c:58:77:2c:45:00:33:46:a7:40:fb:
                    24:4e:cb:60:0b:9f:c2:0e:25:a1:0b:71:1d:af:fb:
                    60:6e:4b:9a:93:ad:85:a4:7b:70:c6:a1:43:5d:66:
                    47:3e:8b:5d:75:81:4c:b3:9d:60:78:56:77:bc:eb:
                    96:ec:39:83:56:22:dc:1e:8c:05:64:a3:95:7e:ad:
                    f1:33:85:5f:b8:b2:58:d2:71:10:29:3e:54:fe:3c:
                    00:88:32:f2:a5:13:b2:45:ea:94:d2:60:8b:d0:13:
                    0a:67:b6:16:63:a5:a5:3f:c9:7d:44:8a:b9:c9:04:
                    4e:9f:3d:a4:46:fd:41:91:2a:22:4b:3f:f2:1a:7a:
                    fc:8b:d0:3c:ab:47:d9:08:ba:44:22:94:55:75:b2:
                    b5:f8:97:b1:15:8b:3b:50:41:62:b8:2e:9a:ef:64:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6D:AB:2C:59:49:52:58:BC:3D:63:C6:57:FB:24:2D:BB:D9:B8:A0
            X509v3 Authority Key Identifier:
                keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5a:fe:c5:08:77:ec:43:be:40:8a:f2:a4:48:ed:3c:71:a6:
         2a:20:95:da:f7:20:4c:02:ab:b9:08:af:78:29:65:79:4e:96:
         83:79:64:48:3f:ed:ba:3a:f6:3f:51:18:36:4c:9f:45:3c:a2:
         42:de:91:f2:cc:4c:57:95:46:f8:f3:0e:a9:ed:15:e0:aa:9a:
         a6:1b:a5:8b:e4:46:d4:a5:f0:63:74:ab:9d:74:c2:51:d9:47:
         e0:d5:47:a2:b0:13:8e:3c:3e:ce:5e:81:a3:77:ba:57:e4:36:
         ab:f5:47:b0:73:d4:b2:39:44:0f:03:de:15:e9:f8:d2:7e:43:
         3c:42:34:50:4e:2e:9d:19:f3:c8:2f:d8:a8:1a:fa:79:c4:9b:
         ee:13:9c:32:c1:40:29:cb:a5:f3:40:1b:d2:57:f4:e0:d0:5d:
         80:3a:a5:50:71:bb:0f:a2:24:6a:f1:ce:a4:6c:54:7a:cb:a4:
         ae:cd:5d:3b:39:b4:70:4c:4b:79:21:21:f2:fd:8d:3b:34:5b:
         f0:1b:de:5f:07:0f:5c:f7:5f:f0:31:67:a7:5f:af:98:5d:f3:
         0a:40:b0:c6:16:50:de:35:6f:23:9e:8d:03:8e:2e:49:cb:d6:
         43:df:65:34:8b:46:80:08:df:78:ec:56:18:df:4a:45:39:bb:
         75:01:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:04:53 2025 by rpki-client