Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File:                     WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier:          GWMLLa8bHD0HOKI40a/ypiYmd7QKYGuIZZpWFU//lik=
Subject key identifier:   00:9F:90:F4:1D:FA:ED:A8:74:09:7E:05:A3:DA:4D:19:E1:A0:FD:2D
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer:       /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial:       0198D5BBB496D26877BBB2176804F5935F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number:          0587
Signing time:             Sat 23 Aug 2025 07:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:45 +0000
Files and hashes:         1: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: 9uBK3gkQP3qMith1/z2Mg7I9xEn3FCFlog+MXQPNrMA=)
                          2: a6Ca0db6IRWqpeQUf-mkPOP5Y6E.roa (hash: +wI+O0cNbhPu/Y/iWm666e3mQkbcXkl04FBEwBpeXro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b4:96:d2:68:77:bb:b2:17:68:04:f5:93:5f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
        Validity
            Not Before: Aug 23 07:01:45 2025 GMT
            Not After : Aug 24 07:01:45 2025 GMT
        Subject: CN=009f90f41dfaeda874097e05a3da4d19e1a0fd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:28:ed:a4:0e:6c:78:05:a8:24:d0:21:93:22:
                    f9:6b:ba:b4:28:4c:47:68:bf:08:d1:c8:5e:92:68:
                    0e:84:c8:da:ac:13:3c:b6:42:1c:39:a0:ac:c4:81:
                    4a:d2:be:d0:f7:8b:27:c7:bd:2f:38:54:9a:22:3d:
                    ab:7d:49:ab:f5:dd:52:27:b7:eb:54:93:c7:d0:05:
                    21:0c:f0:c0:26:cb:77:fb:c1:b4:15:42:a7:3a:b0:
                    64:88:6a:1e:ab:22:a8:58:77:65:10:bb:62:77:77:
                    5f:d9:90:8f:83:0f:31:8d:70:6b:c6:7a:1a:8e:f5:
                    49:31:0c:f4:ea:1a:73:f3:71:55:82:2d:da:eb:a5:
                    e8:d5:d3:af:e3:6e:7e:bc:38:53:3b:d7:f5:95:04:
                    ac:c6:c4:0a:0f:12:07:6e:e4:ff:b5:80:34:b8:0d:
                    53:9b:5e:85:46:26:22:22:61:08:71:a3:4b:61:01:
                    13:6f:bb:97:45:5c:4d:c8:89:2f:17:ef:02:38:2c:
                    d2:fc:7f:3e:cf:42:8a:da:0c:7b:11:aa:76:6b:dc:
                    4c:32:4e:d3:7b:f6:8c:6a:7f:ec:92:16:e8:e1:c6:
                    bf:c5:14:b3:fc:e9:96:9f:a6:54:c8:73:2d:13:a7:
                    fb:76:cf:b0:e0:2a:d8:50:b9:6c:95:e9:04:cf:d1:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9F:90:F4:1D:FA:ED:A8:74:09:7E:05:A3:DA:4D:19:E1:A0:FD:2D
            X509v3 Authority Key Identifier:
                keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:10:60:a8:18:41:32:9a:af:c1:d2:ac:81:b7:9f:14:f7:
         51:7b:5d:6b:2d:64:06:2b:3a:23:1d:df:bb:ac:ba:bd:34:ad:
         62:ce:4e:a7:59:ed:25:1d:7a:24:1b:45:ba:cf:d5:d1:c3:d2:
         d9:f7:15:4f:51:7e:6e:22:8d:87:a3:d4:5a:23:01:46:48:46:
         de:00:bc:b1:56:29:6e:c7:45:27:78:36:8e:c4:64:9d:f6:e8:
         70:46:97:9e:47:35:d2:02:06:fd:4a:01:48:9b:80:3b:38:c1:
         2b:0c:a2:1e:0d:f5:6e:44:04:80:e1:f0:aa:59:37:fd:3f:eb:
         84:52:5d:e3:84:a3:53:1e:d5:c8:b4:51:1b:b2:dd:69:35:bd:
         81:54:13:41:da:8a:58:7b:b2:7a:20:74:3f:f9:43:45:3b:d3:
         0d:f7:dc:bf:e0:f0:02:cb:da:b3:33:b0:7c:9a:81:c6:c8:b0:
         67:6f:1e:83:79:9d:89:20:eb:5e:9b:b6:de:e6:15:92:c8:7d:
         ec:6f:05:c9:76:2a:e7:f6:d4:18:1c:d5:22:b9:7b:a7:bf:c0:
         64:47:79:29:27:15:aa:28:3f:0c:5e:34:4f:5e:14:95:c3:40:
         ed:0f:26:10:33:a4:b7:c9:28:37:81:60:df:d2:17:b3:4b:39:
         a7:30:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:19 2025 by rpki-client