Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          MLLPMqSAbnMQx+YGHmx4OyiCsffMSt587V9X3J9lraM=
Subject key identifier:   B1:1A:2D:74:3D:1F:2B:53:DC:B2:6B:BA:45:2F:9A:AD:39:88:45:FD
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       01984A09CC90AFC6411C45E18824CF339444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          04C9
Signing time:             Sun 27 Jul 2025 04:00:12 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:12 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:12 +0000
Files and hashes:         1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: xwUbZXylQx2Gb6XOzhjwQIm4Qcy8IA2ieJZ6/sZ5LjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:cc:90:af:c6:41:1c:45:e1:88:24:cf:33:94:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Jul 27 04:00:12 2025 GMT
            Not After : Jul 28 04:00:12 2025 GMT
        Subject: CN=b11a2d743d1f2b53dcb26bba452f9aad398845fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:b0:32:75:12:2d:7b:a5:26:74:52:e5:0a:
                    64:80:de:a7:12:a0:67:cd:4e:99:01:dc:05:97:78:
                    52:90:9d:fc:d1:d8:a0:c0:eb:97:31:20:56:26:8a:
                    d5:82:41:f9:24:16:b8:d7:08:46:bc:4a:66:0c:12:
                    7e:cd:a5:c1:b3:88:9d:c9:06:4f:bf:c9:ba:1c:5a:
                    23:64:b7:a9:5f:eb:26:40:72:ad:f0:9b:61:49:13:
                    8f:75:76:d7:d8:26:51:b7:d7:b8:74:8e:dd:05:61:
                    2f:2c:3c:f4:92:1e:8d:b5:1f:6b:81:85:25:4c:49:
                    ca:67:75:18:22:f6:0c:33:66:59:08:b2:88:7a:93:
                    c7:16:8f:66:f4:e1:3f:3f:34:f1:15:73:e8:f3:ca:
                    82:a9:c0:53:1b:0f:d3:c8:cd:63:3a:52:90:e3:3b:
                    2f:02:93:8e:df:44:03:57:d8:f8:02:49:a9:5e:18:
                    12:7b:1e:95:ba:db:b9:b0:d4:f3:29:17:02:d9:da:
                    a3:3d:58:95:9f:01:f0:08:3b:ec:cb:71:cf:c5:88:
                    4b:06:3c:85:ff:a7:3e:10:a4:8a:9b:b8:e7:1f:47:
                    f9:30:95:21:cb:ee:5d:e6:64:42:e0:23:e8:1a:20:
                    a2:9d:00:d7:21:1b:d1:64:97:e1:f1:5e:00:7c:51:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:2D:74:3D:1F:2B:53:DC:B2:6B:BA:45:2F:9A:AD:39:88:45:FD
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:ea:49:cb:9b:e7:ef:ad:e0:75:b0:8e:79:3e:fa:bb:b2:
         7f:f2:74:95:0e:59:93:f3:0a:5c:38:4f:81:28:df:e0:5a:0b:
         8b:9a:81:9c:80:7f:c5:83:1d:45:c0:95:bb:c9:cd:f5:27:b5:
         9c:b5:36:2a:16:f7:fa:e9:58:ce:f0:f6:c9:7d:bf:26:df:11:
         35:69:1d:69:ae:51:65:a0:98:7b:fa:32:30:67:4d:2e:cb:fa:
         86:7c:a6:66:4a:02:09:fb:eb:4c:f2:de:ce:89:46:35:4c:66:
         07:0a:de:35:f3:97:b2:9c:7f:96:91:0f:6b:44:37:d9:dd:e2:
         db:1e:59:2c:a4:d3:06:08:d0:8f:ac:0d:10:7d:4d:3e:67:af:
         7c:4a:cc:d9:de:c4:6f:2a:ce:fd:af:6b:19:76:ce:d0:b1:78:
         9a:99:f6:1f:8a:e4:8e:2b:b0:74:29:4e:d0:3a:8d:26:bc:d4:
         49:fd:b8:97:78:c8:7d:0b:3c:78:dd:7c:5e:3d:45:fa:d7:45:
         d7:03:f4:ef:cb:a7:88:a5:83:8f:64:7c:b4:5a:d2:7c:ba:68:
         85:e9:af:71:5e:58:58:da:1a:bf:f6:75:81:ac:f2:df:25:bd:
         6f:35:b9:f9:79:d5:da:9b:b5:e0:47:ef:16:ae:e9:7e:2a:55:
         b7:4c:52:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:13 2025 by rpki-client