Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          7gAXxYncO/75hO8tvdioPTL2P48WhMr6zA+615uh2XY=
Subject key identifier:   26:76:15:32:AD:6E:C2:CE:C9:0D:CF:76:FB:DD:7A:CE:06:AF:12:6D
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       01984A778C02992037A69FB702AF085BF8BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 06:00:05 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:05 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:05 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: y+Hdt5kFy5lng7l1KBPsxDuaVOyUBlKaLzCSTOaMp5k=)
                          2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:8c:02:99:20:37:a6:9f:b7:02:af:08:5b:f8:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Jul 27 06:00:05 2025 GMT
            Not After : Jul 28 06:00:05 2025 GMT
        Subject: CN=26761532ad6ec2cec90dcf76fbdd7ace06af126d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:55:fb:1a:66:cd:98:aa:da:b6:f2:33:8e:
                    d9:3a:3e:ea:1a:c4:0c:70:16:5d:03:c6:ba:dd:bd:
                    be:aa:88:d0:0f:15:82:9a:e1:5b:2d:04:e7:a8:94:
                    20:f1:da:b6:28:40:17:be:7c:f3:33:bf:09:57:cb:
                    c1:d5:cf:83:00:94:e6:46:e1:76:e6:98:3a:ce:be:
                    b5:9b:83:04:c8:3d:80:f0:3a:97:11:17:65:82:fe:
                    13:70:d7:eb:bf:2a:8c:d1:9e:fa:2e:90:ec:2f:88:
                    c9:d3:bc:83:d1:d8:46:5a:42:ce:bd:99:a1:f3:e0:
                    a2:5f:c8:16:12:53:e8:59:13:28:cb:6a:3b:16:44:
                    1d:8b:0d:29:f0:cf:87:ae:77:c9:ea:ef:9a:08:f5:
                    e6:8c:a1:4d:5d:27:8f:f7:43:65:17:9f:d6:13:11:
                    83:2a:07:05:ab:c5:cc:b6:ed:9f:66:86:c0:5d:37:
                    a5:93:b7:52:cc:60:af:eb:5d:a9:d3:60:41:f6:b1:
                    e1:30:8e:58:71:41:83:36:c7:ed:a9:42:49:eb:49:
                    64:69:9d:e8:91:2d:22:fa:1a:a5:70:90:f4:cf:51:
                    e0:58:39:5f:6f:a0:f9:5b:6b:bf:f7:a4:7a:25:09:
                    ff:1e:e9:05:28:ff:fc:1c:b8:07:9b:02:2e:c1:47:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:15:32:AD:6E:C2:CE:C9:0D:CF:76:FB:DD:7A:CE:06:AF:12:6D
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:28:05:44:72:e7:fc:cb:a1:9d:e1:ce:c3:77:94:8b:8f:dc:
         87:1e:7f:7c:07:9d:e0:95:9a:3d:c3:04:50:a4:42:4a:51:45:
         5d:c7:93:74:b4:8f:f0:e4:e7:e9:9b:fe:d1:eb:e4:b7:8c:ff:
         9f:c4:3f:35:5c:cf:e2:77:f2:84:d2:ed:11:32:ad:8e:02:d1:
         de:a7:c3:bf:4e:f4:de:13:be:3d:6d:ff:7d:91:51:43:81:a6:
         5e:1e:23:84:96:8e:58:7f:bd:5a:72:18:30:82:fb:72:58:9f:
         6d:42:77:fe:6c:85:22:32:7d:ae:44:bb:69:2d:34:75:0a:65:
         74:29:30:26:e8:d0:0e:ac:61:3b:72:f0:2b:bd:fa:fa:1b:5f:
         ee:63:13:4a:33:5f:85:29:53:e1:85:d9:a4:a8:df:e7:77:37:
         eb:47:5d:7e:60:f4:f2:b8:94:ad:12:fd:c6:35:2d:43:66:17:
         34:2e:a4:47:96:71:a6:97:52:36:44:2e:8d:c7:24:8f:73:a3:
         75:e7:0b:5e:27:e8:ef:02:6a:79:37:8a:3e:2a:e0:6c:63:02:
         ce:84:3a:4f:e9:41:36:a0:f2:21:e4:20:8b:f1:3a:4f:4b:f1:
         ee:98:11:5f:b3:00:05:7f:49:b7:79:b5:36:51:d6:59:64:5f:
         1e:cc:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:30:54 2025 by rpki-client