Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File:                     WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier:          SlUOkUIoIb4eTE9Hy7QCcR3PY3ZPkTLVWoat/698tac=
Subject key identifier:   A4:4B:73:27:77:96:C5:87:07:AF:E4:C2:78:CD:BE:D7:B4:B4:9A:04
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer:       /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial:       01985AC8ADEE6270E0BACA57A042EA259EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number:          160D
Signing time:             Wed 30 Jul 2025 10:02:37 +0000
Manifest this update:     Wed 30 Jul 2025 10:02:37 +0000
Manifest next update:     Thu 31 Jul 2025 10:02:37 +0000
Files and hashes:         1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
                          2: R-1q52axanYiR_uRw04t04Z8LDo.roa (hash: v5CC/At/0UFJJZBjnOeP3jsuRpec8w6C2aXVgu/IhIo=)
                          3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: lhEqYcXHuYYZbz/thvfsvC15RMhFgrx3kstHiUtfXe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 10:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5a:c8:ad:ee:62:70:e0:ba:ca:57:a0:42:ea:25:9e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
        Validity
            Not Before: Jul 30 10:02:37 2025 GMT
            Not After : Jul 31 10:02:37 2025 GMT
        Subject: CN=a44b73277796c58707afe4c278cdbed7b4b49a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:c3:bb:ac:4d:08:5c:5c:f9:fa:9e:48:33:
                    21:a5:db:f5:97:81:d7:37:87:72:8d:a3:45:3a:2f:
                    70:c1:8a:31:1c:8a:dd:4b:42:b8:3f:47:6e:a3:08:
                    fe:ee:47:c7:f4:ae:bd:6a:1b:74:89:43:da:34:68:
                    ec:81:d2:8b:7a:43:66:af:d8:24:7a:10:1b:08:02:
                    f4:de:6e:dd:f4:5f:28:e7:48:a6:07:5e:76:00:94:
                    a0:52:26:01:51:38:da:20:21:a2:d3:22:1a:98:29:
                    3e:82:68:9b:0c:7f:38:81:4f:65:7d:13:5d:ae:be:
                    0c:f0:30:f5:19:b2:2c:83:07:b8:68:71:41:03:b3:
                    78:29:bf:e2:11:0f:f6:04:8f:bb:cc:1a:fe:c0:24:
                    8b:46:67:f6:b9:39:bd:45:ba:1a:52:52:0c:4e:cc:
                    4e:c1:fd:33:0c:28:33:77:77:1c:9d:9b:fb:ba:75:
                    d3:59:8d:70:23:35:0f:3f:28:c7:e3:e1:c7:8a:18:
                    f1:ca:97:be:16:3f:bb:41:69:09:4e:a9:bb:7e:09:
                    5d:5b:83:94:f1:48:86:3b:5e:23:7f:b9:f3:28:47:
                    58:ab:cd:59:e7:a4:ff:59:ad:0d:88:ef:23:f4:b0:
                    b4:11:e4:b3:82:c9:1e:70:79:00:cd:92:d3:d8:15:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4B:73:27:77:96:C5:87:07:AF:E4:C2:78:CD:BE:D7:B4:B4:9A:04
            X509v3 Authority Key Identifier:
                keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6c:ce:28:87:45:72:42:27:14:8f:27:49:81:a7:c4:ef:0b:
         f4:82:f4:b4:1b:82:24:c4:ff:29:4b:a9:a7:5b:e1:ce:85:0d:
         27:91:d8:34:e3:a7:1b:49:a6:0a:46:0b:ad:9d:98:88:a2:d8:
         d8:33:47:30:5d:40:67:62:4f:3b:49:e0:da:09:a2:0b:a3:3a:
         e5:cf:e6:4f:a4:f2:0e:7b:1c:fe:2c:d8:0a:02:db:78:c4:96:
         6d:2e:8f:7a:c2:51:b7:df:7f:8d:0d:bb:a5:c8:34:2a:a1:a3:
         45:ec:e2:ab:96:15:99:ab:4a:cb:ce:d7:99:4c:3e:a4:ca:c7:
         af:7e:5c:0f:1a:45:ef:df:ff:73:d5:cf:fe:87:56:c6:be:6f:
         47:09:c6:c9:13:a3:b4:48:17:d4:10:03:32:a6:83:ff:5c:10:
         84:7d:a7:e7:3c:82:8d:cf:3e:69:c6:d2:8a:0e:fd:4b:3d:4b:
         77:94:ec:82:ec:21:8b:c2:67:62:fc:5f:b3:77:71:84:80:82:
         45:bf:d7:28:ae:7c:fb:6b:55:c1:9f:8a:a2:81:9a:c5:24:4d:
         59:f0:e2:1c:5c:4d:1a:cf:c9:b0:19:82:11:88:14:d1:69:c6:
         e6:51:77:02:f4:3e:ba:9d:62:d0:35:f3:e2:61:27:28:8a:c0:
         2c:90:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 18:08:41 2025 by rpki-client