Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File:                     W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier:          cw1oALs66tTJnepwayeGev3bX0YAE9yTDDrRKKKkHdQ=
Subject key identifier:   76:05:C9:EA:4E:FA:51:7F:B2:F6:29:81:43:11:49:24:3E:82:2F:4E
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer:       /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial:       0198443F1E9D1ECE58077B87E072CC79406C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number:          B1
Signing time:             Sat 26 Jul 2025 01:00:43 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:43 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:43 +0000
Files and hashes:         1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=)
                          2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: ccM0KmY4XxfRwmuHBmwtlYKnujngzJ6C1XtC6SsPw68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3f:1e:9d:1e:ce:58:07:7b:87:e0:72:cc:79:40:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
        Validity
            Not Before: Jul 26 01:00:43 2025 GMT
            Not After : Jul 27 01:00:43 2025 GMT
        Subject: CN=7605c9ea4efa517fb2f62981431149243e822f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0b:06:11:a7:f2:20:d9:fb:ae:ff:5d:e1:e1:
                    f6:91:26:4e:ca:37:af:74:66:59:65:45:ac:ae:12:
                    27:f4:37:f7:cc:84:6b:83:5b:fb:16:c1:f5:9e:2e:
                    2d:ba:06:48:72:a4:d5:50:22:8a:af:33:3f:4a:57:
                    a6:ea:50:93:e4:ea:ed:fc:b0:80:d1:72:39:67:2a:
                    75:c0:3b:b2:45:f9:3e:2b:69:63:bb:4f:b4:c6:57:
                    dc:4c:90:18:9d:0f:cb:2c:15:dd:ff:eb:5f:28:8e:
                    6c:6b:a3:52:08:4f:59:8e:dc:c1:01:f3:e4:95:4b:
                    de:34:ab:06:5d:45:04:a8:02:ad:ee:d8:ff:ab:20:
                    e8:eb:3f:b2:32:52:06:3b:55:c6:7e:73:82:fa:53:
                    24:ea:73:20:86:5f:ce:8d:d7:4f:51:57:4d:23:80:
                    2c:40:52:c0:ec:1e:14:bc:f3:a0:3a:59:db:b1:78:
                    79:a4:11:d5:15:55:49:ba:cc:ed:52:e1:93:83:8d:
                    74:18:5b:6d:8c:1b:5b:ae:6a:20:92:66:4f:07:88:
                    40:ab:6b:14:41:0a:fc:9e:cf:d6:3c:02:b0:b3:51:
                    9d:25:39:25:cb:79:84:f9:2d:2d:a7:8e:24:fd:d6:
                    62:2f:49:48:60:40:c3:11:c9:2d:b5:36:2d:2b:89:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:05:C9:EA:4E:FA:51:7F:B2:F6:29:81:43:11:49:24:3E:82:2F:4E
            X509v3 Authority Key Identifier:
                keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d7:42:0e:b0:c1:b6:a4:88:ee:29:9c:31:67:94:5f:87:29:
         56:05:6d:b5:58:b1:93:4e:f1:6d:8b:74:6b:36:65:f3:b6:8a:
         ac:e9:6a:fa:4a:8c:ab:17:f5:04:6e:4a:8c:df:78:16:1b:30:
         3d:02:10:45:c3:0c:f2:cd:38:f6:bd:3d:96:c8:b1:3f:41:98:
         92:52:fd:ea:b6:d1:bb:f9:4a:74:0e:90:c9:24:22:b1:c3:ec:
         92:b7:6a:70:cc:10:19:71:df:7c:98:c7:b4:5e:4e:58:9a:48:
         a1:86:e3:01:44:04:4b:8e:62:6c:60:69:72:3b:7d:a3:52:f2:
         f1:44:49:94:9c:05:5e:8a:e4:2f:27:30:b2:fc:0c:09:fa:96:
         0f:7e:45:89:59:e8:43:fb:c8:6e:2b:b5:fb:f5:c0:9b:b3:26:
         c3:0a:f9:92:46:a6:ca:79:1b:0d:df:6b:8e:8d:97:ab:d5:a8:
         79:6b:97:ba:2a:20:46:c5:93:23:cd:c7:71:ea:08:88:c2:9e:
         b5:30:60:ae:92:47:2f:d4:c3:94:a4:67:b4:65:31:96:41:c6:
         27:eb:28:c8:7f:b4:39:34:e4:7f:c3:d1:9f:41:71:8a:6b:b8:
         db:f8:80:17:f4:1d:41:84:e4:84:bc:bf:f3:67:36:8b:f8:ff:
         ea:40:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:43:40 2025 by rpki-client