Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
File:                     wb_RnDPps9MzU8_rZBee9z0yMys.mft (raw, json)
Hash identifier:          3aufOGpolCxZJUmirwUZIioEpCWA3jb31u05NqslArQ=
Subject key identifier:   18:04:2B:5C:C1:69:8A:77:45:05:E5:8E:4B:AA:A4:B9:C3:4A:A9:D9
Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Certificate issuer:       /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Certificate serial:       0198499C2B226BD8A2D5038873F27CDC47B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 02:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:28 +0000
Files and hashes:         1: DBFDlK5pJ_In8yUaHfIwunse1tE.roa (hash: hBkF1wd780ez4BIZdoVbu1TdvJ7vKBgxWpbafISeX7E=)
                          2: wb_RnDPps9MzU8_rZBee9z0yMys.crl (hash: Ct5EP3Gc7cyQovyBkg6BGJGQYFGZGd7URAdXg9bmeMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:2b:22:6b:d8:a2:d5:03:88:73:f2:7c:dc:47:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
        Validity
            Not Before: Jul 27 02:00:28 2025 GMT
            Not After : Jul 28 02:00:28 2025 GMT
        Subject: CN=18042b5cc1698a774505e58e4baaa4b9c34aa9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:04:75:86:24:13:19:16:2b:4f:4d:95:42:
                    bc:b6:b9:4b:42:7b:7a:cf:2f:a7:89:9e:5a:e3:06:
                    51:5e:a1:99:8c:4c:31:d5:8d:c7:af:48:b7:0b:f4:
                    eb:27:c0:92:42:7b:66:33:93:bd:32:17:bf:69:2c:
                    28:1c:d2:65:55:2e:5c:59:bc:15:07:6f:ba:cc:cc:
                    3c:f6:9f:32:12:ae:87:f8:5d:00:e3:f5:3f:bd:dc:
                    c3:90:ed:0a:82:a8:98:bc:3e:ca:4d:45:73:9e:9d:
                    f5:6a:2d:c3:62:aa:9b:2b:c9:ba:62:16:44:5e:ba:
                    dc:00:00:58:a9:00:da:b5:c9:c0:bc:c7:ed:58:49:
                    a6:58:f9:0f:aa:21:99:75:de:c0:c8:3f:66:34:1d:
                    89:84:2c:48:2f:e6:c1:d9:a5:5d:f7:41:97:dc:35:
                    eb:0f:74:f4:30:88:5e:3d:35:56:ef:6f:2d:bc:87:
                    e1:43:85:80:af:87:8f:56:53:dd:ff:8c:3a:dc:35:
                    51:92:7e:c0:b0:48:7a:9d:dc:71:60:0c:f5:48:f6:
                    26:bc:f0:4f:a5:f7:72:89:f4:7e:a0:e6:98:ef:d2:
                    13:d4:79:5d:79:c2:1d:ba:8e:1b:4b:f7:3f:af:44:
                    eb:e4:49:9a:10:a3:19:7e:15:b3:0b:67:53:06:e3:
                    6a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:04:2B:5C:C1:69:8A:77:45:05:E5:8E:4B:AA:A4:B9:C3:4A:A9:D9
            X509v3 Authority Key Identifier:
                keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:72:4b:43:0c:97:71:f0:b7:8e:d6:e6:4b:72:92:e7:7b:0b:
         be:a3:17:6e:2c:8a:11:17:57:76:4c:ea:75:34:fd:f1:91:8a:
         8b:f4:4b:c9:e6:38:2c:aa:49:b3:24:82:9e:6c:68:22:7a:02:
         2c:0e:6c:34:28:39:62:5a:d4:a8:0f:8d:36:e6:be:10:ad:b3:
         04:ae:27:b0:83:1c:ae:23:01:9d:23:37:5b:31:d8:32:73:48:
         bf:77:94:94:d5:49:b8:b0:1e:4e:e7:da:5a:0d:87:92:a6:a7:
         e6:80:58:bf:6b:b4:15:9c:eb:71:1d:dd:70:e6:c1:c3:73:ef:
         19:1b:15:91:20:b6:2a:a0:3c:eb:25:34:b4:2c:0c:79:11:8b:
         4e:8d:2e:91:ed:c3:43:b4:18:96:cd:a2:5a:8e:c2:cf:e9:a3:
         a8:10:b0:99:75:0c:53:58:94:8d:34:41:f0:37:b2:ae:85:02:
         83:d6:2c:d9:36:fe:9f:60:3a:a6:b5:1e:1b:e8:96:fe:cf:55:
         73:52:36:54:17:e8:92:cf:64:bd:74:25:9b:a6:67:d5:99:6d:
         08:8d:6c:f3:7c:5c:2c:0b:23:eb:e2:09:48:f6:98:f3:65:e9:
         18:c7:47:f1:37:33:3e:ee:35:44:17:69:df:dc:e2:08:37:2d:
         78:5d:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:51:23 2025 by rpki-client