Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
File:                     WVS2GD5Fl0jInuVDG48x3mkq47c.mft (raw, json)
Hash identifier:          MqjWvkcXsGPLbO+KeWHQm8Rw+/etE3xcxOFQqjIOeuQ=
Subject key identifier:   8D:B2:D6:85:C7:A2:0B:B8:4B:C9:0B:2D:CB:80:17:59:A9:07:D6:AA
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Certificate issuer:       /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial:       019827B50C15495E9E9B67637731489093B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
Manifest number:          AF
Signing time:             Sun 20 Jul 2025 12:00:33 +0000
Manifest this update:     Sun 20 Jul 2025 12:00:33 +0000
Manifest next update:     Mon 21 Jul 2025 12:00:33 +0000
Files and hashes:         1: 1exkXGhFHNJ9tcyl3SkJfyGxIXg.roa (hash: o4OfNG7n5rChsJtEz+UbLSkhVMs+TJ8lVmSHAxMrGHA=)
                          2: AdqpF3Dwu6a54afRlnWWC-VT63I.roa (hash: 5ld1yLPBnowEovELcVB+TGEAaAwsFcKRwk5yylxVIHQ=)
                          3: F-vKFwnquIw9vHj26sT4MOF8_aE.roa (hash: RG/y0uuCqJ1Cb/1Lt0VGILeEY9raFqhpVLmiGAGYlcY=)
                          4: WVS2GD5Fl0jInuVDG48x3mkq47c.crl (hash: kFZnWqsq0iMgA+mzb9//zPK+zl6DxPVSL7p8UnAC8mc=)
                          5: gAxY9Ai19tPf64T_-1A45_M9JAg.roa (hash: F3XDSdZIZGfT9wqUqiwTGUU5laJ9L91bgQ43nfMk4G4=)
                          6: gMn5pV_lkahxIskbP9PiDtgekRI.roa (hash: 9ABPtV0XEY4pEHWa+phoQxq/60F3p0mEABFrR+J0eZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 06:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:b5:0c:15:49:5e:9e:9b:67:63:77:31:48:90:93:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
        Validity
            Not Before: Jul 20 12:00:33 2025 GMT
            Not After : Jul 21 12:00:33 2025 GMT
        Subject: CN=8db2d685c7a20bb84bc90b2dcb801759a907d6aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:7f:af:3d:28:37:2e:d2:74:23:84:4b:8a:
                    53:1d:60:8c:b4:27:b1:79:1c:35:c6:1f:5c:8c:05:
                    4a:a0:34:5b:2b:ad:bc:e5:5f:f7:b7:cc:64:00:49:
                    66:e2:8b:ca:e3:2e:94:73:99:3a:45:32:33:f0:2b:
                    43:08:26:fd:8b:d7:63:c7:1c:bd:ba:1e:72:46:b4:
                    79:6b:88:17:0c:5e:db:61:2b:b2:78:fe:f0:fd:5c:
                    31:4c:f9:07:2b:2d:80:d7:cf:70:80:50:04:1e:1f:
                    ff:61:23:22:c8:eb:60:76:2e:c1:08:92:ef:9c:48:
                    61:82:c2:3e:90:dd:35:fb:76:a8:02:bd:10:08:9a:
                    63:20:12:76:55:c2:38:7a:a4:49:7f:9c:e3:0f:cb:
                    a0:87:82:2e:56:d4:7b:59:23:8c:6f:17:86:bf:ef:
                    83:a4:18:43:78:39:11:5b:1e:48:7f:ab:3f:17:51:
                    c5:9b:ca:20:a3:da:c1:22:a4:db:22:3c:ef:dc:cc:
                    f6:96:53:2a:47:41:eb:aa:64:ea:c8:5f:eb:7f:1c:
                    5c:1a:c4:a6:20:f5:c1:e4:65:59:91:4f:fb:d4:fa:
                    0e:dd:03:3e:69:e1:3e:56:63:ac:e3:4d:56:00:1b:
                    81:da:fa:72:d4:06:05:0e:75:3c:7c:6b:f7:b3:80:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B2:D6:85:C7:A2:0B:B8:4B:C9:0B:2D:CB:80:17:59:A9:07:D6:AA
            X509v3 Authority Key Identifier:
                keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9e:e4:45:4c:0f:f8:e8:60:1f:57:82:71:ce:34:e9:35:ea:
         00:b6:ac:6c:74:2c:ad:06:c5:17:81:ac:ca:65:9c:5d:52:e1:
         29:e9:ae:b4:6e:2b:5e:98:6f:2a:ff:df:69:ab:82:b3:70:28:
         f8:56:da:a4:5f:5c:34:39:d6:d1:49:01:de:a3:52:07:06:01:
         78:f1:7c:e1:47:11:59:30:c6:24:8e:ff:f5:dc:0d:18:c0:89:
         3b:09:c7:fd:5a:8c:d1:d2:3c:f7:ea:f5:c4:d3:f1:4e:64:fe:
         7f:36:1c:f9:ea:76:a2:92:8f:84:cd:71:5d:31:b0:a7:6d:fb:
         ed:e1:29:c9:c0:59:7a:09:d2:ef:35:b7:4c:d1:c5:3f:9f:4e:
         12:3e:41:48:40:a4:0e:a3:78:9b:6c:30:c2:c2:fc:35:b3:d0:
         29:28:89:31:b6:10:b5:d4:14:e1:2b:76:5d:da:31:59:0a:cd:
         9f:0c:dc:51:cd:59:87:31:a7:25:a9:a3:b6:54:bf:d3:97:18:
         1e:83:07:46:87:45:da:ce:71:09:f9:16:95:53:a9:48:05:31:
         ab:57:5d:99:3d:c4:5d:1e:58:69:b3:c6:7c:6a:54:81:eb:7f:
         a9:99:41:34:5e:8c:12:fa:5e:0c:d9:e2:d1:7a:0a:f4:e4:13:
         52:0a:7d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:11:59 2025 by rpki-client