Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
File:                     WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json)
Hash identifier:          FIQiN9l6VUHBXIpX8O1Z0plaTVrKmtSyQkxSY8WixeU=
Subject key identifier:   69:8D:6D:37:75:08:52:EA:90:B2:B5:54:CD:B9:FB:90:6C:75:4C:D1
Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
Certificate issuer:       /CN=58e02f2ca81ab802939530156e9631b18f515840
Certificate serial:       0198D515A9CE1F13ACEB322EECFD4E7F8A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
Manifest number:          017A
Signing time:             Sat 23 Aug 2025 04:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:23 +0000
Files and hashes:         1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: DeEMxmnxVT9mRzHf2rzt0R+WT9Xn0OMEhUtDXS0arXY=)
                          2: wKFImUWqJAZ63I73CUY6kU8vkUQ.roa (hash: 6TgnMHnPVKyV4LoYC0bcNEIls6efji/PtDzWQK1yR8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:a9:ce:1f:13:ac:eb:32:2e:ec:fd:4e:7f:8a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840
        Validity
            Not Before: Aug 23 04:00:23 2025 GMT
            Not After : Aug 24 04:00:23 2025 GMT
        Subject: CN=698d6d37750852ea90b2b554cdb9fb906c754cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:fa:03:85:ed:ef:ff:a2:e3:d1:e8:51:4f:
                    25:c1:fc:1c:7a:ad:85:60:75:2d:99:ee:bd:81:c4:
                    df:d2:90:57:bb:21:4d:40:1f:fa:36:d4:51:6c:27:
                    01:3c:7d:7f:93:b2:e8:f3:4e:18:bf:5f:14:c0:4a:
                    63:88:4f:c6:ab:b0:d3:cc:38:0a:f7:d7:4f:3d:24:
                    00:9d:d9:e0:61:5d:9c:93:1d:c2:58:11:9e:69:06:
                    d2:d0:1a:0e:ec:ce:a3:14:3d:1a:ba:9a:cf:e4:aa:
                    bd:9d:cb:0a:d8:51:69:65:9e:b8:2f:84:40:15:00:
                    04:1c:1b:a7:eb:55:90:ed:ba:9a:78:e0:64:cc:6c:
                    12:04:d9:19:1d:b6:60:38:1a:5e:21:cc:18:44:ad:
                    fe:7c:7c:36:63:8d:86:f5:07:6a:02:ee:78:d7:1b:
                    6e:7c:5a:3d:eb:30:13:83:cf:2e:4b:2c:f8:21:9a:
                    c4:b7:e3:74:89:ae:59:57:d1:e0:14:63:77:58:87:
                    3c:e5:a0:ee:a1:4b:ba:81:ac:1c:58:aa:0a:1b:43:
                    20:41:db:a8:7e:82:cb:1c:06:af:b6:f2:e0:81:1f:
                    cc:c2:71:e0:b9:29:d5:6f:d4:84:9e:59:5e:85:38:
                    32:8d:43:11:59:f6:84:45:f1:47:80:6a:4f:ff:2e:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8D:6D:37:75:08:52:EA:90:B2:B5:54:CD:B9:FB:90:6C:75:4C:D1
            X509v3 Authority Key Identifier:
                keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8a:7a:bf:32:fc:f0:0c:76:68:ff:20:64:56:58:e5:21:5d:
         02:fb:28:08:7d:f2:ce:0b:84:db:29:e0:c8:b8:ad:f5:45:33:
         c6:7f:5d:5f:e7:97:9f:37:de:79:a3:4a:d4:9d:fc:d4:1c:e4:
         0d:ba:8d:86:a8:9b:63:07:2d:3a:42:87:7d:aa:81:35:e9:31:
         d2:49:ee:04:7f:b7:bf:a1:78:42:d5:af:4c:67:f1:37:9a:ca:
         06:98:66:bf:55:39:1a:e2:24:04:20:ba:0d:05:07:2f:0a:bb:
         8d:fa:91:4e:bb:12:3a:b8:c4:d0:df:2d:65:52:07:ce:1b:31:
         83:b3:82:68:8c:6c:da:a5:f5:b0:19:39:bd:3f:85:e0:e8:7b:
         60:b9:9e:11:ff:e7:c5:0e:57:54:9d:d8:72:0f:46:46:30:d8:
         24:f3:11:47:b3:2f:e4:25:d3:96:0c:fa:f9:b6:91:4d:18:b4:
         e0:c5:f8:45:1d:a7:8d:c1:6d:d0:7a:f4:09:1e:f6:e1:2b:d8:
         cd:36:2e:72:1c:28:87:19:f8:dd:33:4e:a5:ee:01:a4:6c:d5:
         2c:2d:8a:36:67:8b:af:72:31:77:a7:6c:59:de:39:05:07:11:
         58:fb:0c:c9:d8:4e:0e:af:00:7a:0f:52:66:df:9a:ea:4c:d7:
         7b:4b:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:55 2025 by rpki-client