Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
File:                     WRoP7x77ru2z0o1Dnz1cz639iHM.mft (raw, json)
Hash identifier:          GldekFEb4ZAcXGu4ZKbW+z04w3cT/19c3tLqeaPHHlU=
Subject key identifier:   CD:9B:33:AD:09:C4:E7:A7:9F:EE:A3:32:5B:CF:1A:B7:D3:E8:46:AB
Authority key identifier: 59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
Certificate issuer:       /CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Certificate serial:       01984B535C90E2D5123FBA7A6A85E5CE2648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 10:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:10 +0000
Files and hashes:         1: LUyjz5khkwF0up_SKtv4Oh6tO7Q.roa (hash: rBnLOroG+8zcnjSq90aHGH7YJtrPhERWyt49grALMsE=)
                          2: WRoP7x77ru2z0o1Dnz1cz639iHM.crl (hash: IsyC9w+YAi/vsOEuaUO+N0mA0lDvEKNAY/eLi0SxfMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:53:5c:90:e2:d5:12:3f:ba:7a:6a:85:e5:ce:26:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
        Validity
            Not Before: Jul 27 10:00:10 2025 GMT
            Not After : Jul 28 10:00:10 2025 GMT
        Subject: CN=cd9b33ad09c4e7a79feea3325bcf1ab7d3e846ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:15:73:6f:fb:0a:0a:9d:65:b0:37:57:8a:
                    b3:56:4f:92:01:36:7e:e2:8c:6f:04:e1:0b:8a:5d:
                    4e:b0:46:cd:ae:f3:2b:cb:70:ba:3c:5b:81:8d:f6:
                    ca:d7:54:b2:3f:05:1a:31:f6:89:b2:9c:5a:b7:61:
                    2a:b2:d4:76:10:5f:d1:5b:e8:60:23:d0:4f:c2:69:
                    14:92:65:2d:c3:eb:e9:43:99:bb:f5:f4:74:eb:96:
                    54:0d:86:2b:eb:da:c1:fc:4d:32:56:d5:6e:69:7e:
                    80:1f:03:45:f8:a1:34:02:cc:ea:39:02:9c:f2:f7:
                    56:70:b2:ac:f7:5d:6e:90:66:6a:38:a8:86:d1:c3:
                    d6:ee:9b:91:d2:e8:d8:5b:81:7e:8b:ef:77:22:6f:
                    c5:d6:e9:0f:60:54:e2:4b:b3:93:ff:37:ba:d3:01:
                    39:78:4a:5d:c1:91:0d:fc:c7:06:6e:7b:e8:f5:7d:
                    d8:ea:ba:dd:dd:0a:19:15:91:41:1e:44:09:ec:c0:
                    cd:24:e8:07:71:95:e6:52:bb:fc:d9:81:97:a8:07:
                    c4:ef:bc:d9:07:46:dc:e2:86:1e:15:30:16:8f:b3:
                    8c:4a:ca:91:1b:ab:d9:8a:b5:1f:b8:f2:ec:40:f7:
                    24:a0:9a:af:5c:f1:b3:36:2f:8b:7f:26:4d:92:68:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9B:33:AD:09:C4:E7:A7:9F:EE:A3:32:5B:CF:1A:B7:D3:E8:46:AB
            X509v3 Authority Key Identifier:
                keyid:59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8c:c4:53:9a:ab:06:dc:21:1e:89:69:b5:7c:11:cb:50:09:
         72:c6:eb:4e:bf:ac:67:52:0d:25:f4:dd:7b:53:a9:e8:b6:fd:
         57:63:e7:47:9f:c6:c9:9e:6e:81:a9:a5:62:6d:1c:f1:ec:bb:
         f8:38:83:1b:d7:c3:06:6e:f4:62:3a:e9:f3:92:63:9d:42:1c:
         6f:17:dc:3b:dc:15:00:fa:7e:43:a0:9a:44:bf:5e:4f:0c:2c:
         e2:47:aa:e5:75:ba:fa:c6:e9:8a:fb:6c:d5:d4:c2:66:c3:84:
         88:68:7c:76:be:f7:02:ab:5e:29:31:ad:ef:0f:91:27:af:85:
         bf:63:65:eb:a5:12:f2:99:b3:26:05:00:af:53:dd:3a:75:b0:
         eb:3c:7d:f4:f0:4a:7f:9b:57:94:ac:11:25:23:c8:92:0b:d8:
         18:84:e5:8a:7a:cc:06:79:b2:98:e9:c4:8e:4e:95:50:29:10:
         77:f0:ba:b6:dc:f7:c7:fd:81:07:fe:53:55:eb:1d:a3:0b:93:
         52:56:18:b4:59:4e:9d:1f:2f:1c:7e:62:9b:d1:b2:ef:f6:88:
         07:c0:f0:eb:a8:a2:fb:d2:e7:e6:c5:34:68:68:e1:d7:54:ef:
         4f:92:83:c0:17:ad:93:5a:bd:a3:69:d1:13:40:90:ba:97:bd:
         06:d9:0e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:16 2025 by rpki-client