Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
File:                     WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json)
Hash identifier:          FhAin9nydT7tB0ZcGqLsOe3PMB3QK+QLQx+2X2Xgk5s=
Subject key identifier:   89:A8:C0:00:85:4A:8D:BA:4F:3C:BE:44:86:F8:1C:22:07:E2:89:72
Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
Certificate issuer:       /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Certificate serial:       0198D6606374D33795F1633443EA854BAF90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
Manifest number:          0D00
Signing time:             Sat 23 Aug 2025 10:01:37 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:37 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:37 +0000
Files and hashes:         1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: GFunW2O0y3aDc9MMI9YA5P1bWXTGakwax7Ae3Yk5HIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:63:74:d3:37:95:f1:63:34:43:ea:85:4b:af:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
        Validity
            Not Before: Aug 23 10:01:37 2025 GMT
            Not After : Aug 24 10:01:37 2025 GMT
        Subject: CN=89a8c000854a8dba4f3cbe4486f81c2207e28972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:a0:08:e9:ef:c5:51:ca:44:e3:c7:d4:fe:
                    22:0e:07:88:6e:b9:aa:58:9c:2b:f9:4d:8c:bf:88:
                    a5:09:26:c9:3a:29:22:56:05:68:de:92:cc:77:66:
                    bf:3e:f7:0c:c3:f0:ab:c5:67:73:b3:93:e5:b4:29:
                    34:b1:f3:31:c1:ba:bc:34:05:33:91:3f:d3:86:0c:
                    aa:c0:f5:ad:25:16:bf:5f:d8:ab:e3:55:b1:0a:01:
                    6f:32:38:ca:60:72:b6:64:f7:f5:61:8a:db:c4:ea:
                    55:db:f9:14:1d:9d:e6:72:fb:59:17:04:e0:84:da:
                    f6:d3:57:a6:83:b2:95:cf:ae:55:c5:26:20:f2:54:
                    48:73:7c:7b:d3:ad:50:ef:b5:a4:00:07:7d:19:6e:
                    de:47:80:27:34:8e:25:39:f6:b8:d3:7f:a4:fb:37:
                    48:66:c5:09:f6:b4:41:26:43:ad:60:9e:17:f5:61:
                    89:4a:0d:4c:1b:a3:fc:de:a7:44:87:ae:60:f5:e6:
                    a8:85:61:c1:58:15:ed:97:57:10:e7:1c:84:01:52:
                    e2:99:a8:a1:02:74:fe:2c:74:e5:69:a0:f6:c2:b0:
                    95:82:83:41:97:34:f3:1d:5f:c8:f9:0c:e9:e7:63:
                    7d:d8:c4:60:6e:22:40:97:e7:f4:ed:e5:6e:d5:48:
                    ed:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A8:C0:00:85:4A:8D:BA:4F:3C:BE:44:86:F8:1C:22:07:E2:89:72
            X509v3 Authority Key Identifier:
                keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:83:36:fa:e8:1f:f6:f2:11:23:1d:ef:df:01:32:11:59:
         ce:ed:5d:3c:3e:b4:dd:19:68:8e:83:b3:55:49:00:cb:1c:9f:
         50:ee:ea:78:88:79:04:3f:e7:e4:2f:d9:c8:c8:bb:30:16:62:
         3b:ae:0f:af:ff:36:b3:cf:07:87:7c:0a:ff:8b:c4:5b:6a:09:
         1c:00:c6:87:c4:83:f5:6d:87:e3:8f:9a:98:85:93:41:31:6a:
         dc:c8:a8:fa:01:6b:74:e6:1a:7c:86:80:32:53:4d:62:5b:e4:
         3f:ba:aa:a7:4a:a8:2b:db:fd:bd:38:08:45:a2:e8:33:3a:4a:
         c7:7c:d3:8f:17:ec:fa:68:19:49:53:2f:2d:72:9d:b7:ab:30:
         af:e9:9b:be:a6:04:03:d4:c7:f3:5f:56:6c:04:5c:12:db:16:
         47:36:68:66:5f:7d:a3:9d:47:c7:83:12:b9:5d:55:29:8e:a0:
         c8:2f:70:fa:85:85:8b:ed:c7:7f:2e:e1:ac:6c:00:ff:21:50:
         0c:02:b9:79:ac:24:d6:51:14:14:97:2c:14:14:8c:f7:8e:a7:
         c9:0d:7a:fa:68:76:ca:d0:f3:db:60:c4:42:5f:cf:a0:61:88:
         3c:67:5d:05:cb:13:7a:78:69:96:71:c0:59:61:91:a0:be:4a:
         ab:77:7e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:07 2025 by rpki-client