Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File:                     WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier:          ARt+adIJbjc6+V++jxkmvXSMu63Wt17D1gMss79a9wE=
Subject key identifier:   1E:16:16:68:D8:27:59:CA:E5:2A:0E:9A:B8:EC:18:F9:78:85:B5:D9
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer:       /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial:       0198D5F1404A85EB14EC383AE8A6CBD5D9CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number:          01A3
Signing time:             Sat 23 Aug 2025 08:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:14 +0000
Files and hashes:         1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: yXNXQIqyemfrgcPFYttzsoEgmIF8bCQJg+Qbe1z0jns=)
                          2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
                          3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
                          4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:40:4a:85:eb:14:ec:38:3a:e8:a6:cb:d5:d9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
        Validity
            Not Before: Aug 23 08:00:14 2025 GMT
            Not After : Aug 24 08:00:14 2025 GMT
        Subject: CN=1e161668d82759cae52a0e9ab8ec18f97885b5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:4d:ee:0c:6c:91:58:e5:99:e7:f5:84:d6:
                    40:eb:f3:00:2a:1b:88:9e:db:cd:9c:fc:24:f0:af:
                    36:90:fd:b9:cb:e8:e6:cf:a3:c6:2c:01:71:9e:6d:
                    c4:f2:04:9a:2d:0e:0b:d7:7f:14:b9:e7:67:f2:aa:
                    f4:f3:e4:be:c8:13:54:73:8c:6a:2b:be:17:b1:cc:
                    4f:26:ba:bf:fa:38:29:2b:de:38:13:15:03:e6:4f:
                    ec:8c:2d:7e:02:54:a6:77:a9:4e:29:e5:8b:8b:4a:
                    bc:2e:9d:b1:a3:1d:fe:f5:49:18:53:5a:70:67:6d:
                    b6:c5:ee:4d:2b:df:bc:81:bc:39:3a:64:4c:d2:1e:
                    00:7a:5b:2d:1e:62:d0:bc:2f:a8:f3:ee:ca:52:f7:
                    39:5b:df:26:c5:ad:93:25:7a:2c:c0:60:14:ba:75:
                    dc:47:a4:34:1a:e6:7b:0c:a6:66:cd:d6:1c:bc:1c:
                    e0:4c:50:ba:5a:63:03:0d:31:32:63:a2:c4:03:d7:
                    cb:a8:70:c2:3a:07:23:25:d4:24:c0:27:95:a2:5e:
                    fb:05:51:09:4f:3c:3d:7d:4f:b5:07:97:16:e0:34:
                    85:8b:19:6e:e8:12:39:8b:9c:1e:ca:79:72:46:5f:
                    de:3b:8f:1b:30:a5:e5:99:a1:fa:b9:19:b2:e6:e5:
                    10:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:16:16:68:D8:27:59:CA:E5:2A:0E:9A:B8:EC:18:F9:78:85:B5:D9
            X509v3 Authority Key Identifier:
                keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:54:e2:57:3e:56:e4:d6:31:2b:ab:b2:16:ff:51:7d:d1:4e:
         0b:d1:b4:ed:c3:c7:56:44:d6:94:08:19:6f:cf:af:18:3f:23:
         1d:12:95:71:27:ef:c7:5a:e0:17:13:ff:26:a5:61:91:2b:74:
         0b:49:0c:a5:95:67:a0:a5:c0:e2:6b:55:f2:ad:16:dd:dd:ea:
         39:37:6a:3f:20:8b:c7:11:c1:01:dc:df:1a:ab:a0:18:8a:f2:
         d3:9f:9f:1e:29:d6:ce:1a:35:5d:01:23:6b:32:76:4d:6e:b6:
         d3:2c:82:e0:40:ae:e3:97:96:7f:28:be:b2:9e:31:13:7a:a8:
         3f:ed:9c:0d:0f:3f:b3:d0:71:a1:04:e0:53:68:ae:4c:09:73:
         8a:de:71:85:ce:90:bf:1a:4f:d4:75:c7:87:c3:5f:86:d1:ba:
         ae:09:c4:7b:bc:d8:4c:d3:d4:ad:18:31:20:ad:cb:ea:b1:14:
         cd:15:42:ea:de:3d:16:90:3b:37:be:0b:8c:af:e3:6a:8d:02:
         32:83:93:d4:32:a4:c9:34:86:3e:b0:77:8b:2f:e5:39:ef:e1:
         4e:b7:f8:d4:bb:6c:fe:d4:6c:d8:d1:a3:c6:57:11:14:f9:c6:
         ef:d1:e4:15:57:d2:76:f3:de:f2:00:aa:a9:ab:26:09:44:a3:
         05:6f:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:09 2025 by rpki-client