Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
File:                     WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft (raw, json)
Hash identifier:          tKUuFKYoijZhx730egmuBQ/vE39nzaRVdvefIZtZWxw=
Subject key identifier:   C6:A7:97:CD:04:7A:6E:CE:2A:EA:87:B7:42:AB:30:D7:1C:0A:71:B8
Authority key identifier: 5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05
Certificate issuer:       /CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
Certificate serial:       01984965BD0FC6A3F374A3151C41D7034CC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
Manifest number:          0949
Signing time:             Sun 27 Jul 2025 01:01:00 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:00 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:00 +0000
Files and hashes:         1: 1-u2sU3DDBTp7tslVtZM2YXONawE.roa (hash: hY4Vnqp2FHEqA3NhSl3nyi2JgSEr1mIebkZ+fS2Quh0=)
                          2: WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl (hash: dquYK+QHTdXIOJc0DTK9UV3L8gAK8y4lNSrqLCaoas8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:bd:0f:c6:a3:f3:74:a3:15:1c:41:d7:03:4c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
        Validity
            Not Before: Jul 27 01:01:00 2025 GMT
            Not After : Jul 28 01:01:00 2025 GMT
        Subject: CN=c6a797cd047a6ece2aea87b742ab30d71c0a71b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:c6:fb:7c:5d:6a:47:e3:65:ec:99:05:39:
                    e6:a9:ee:76:2e:bc:31:79:fe:13:5b:ff:4c:79:b6:
                    6d:d3:f3:ad:f1:9e:cf:60:78:99:80:cd:99:d9:34:
                    73:21:2d:f1:00:52:7e:a3:7c:6d:c1:a9:92:40:3e:
                    47:d1:b1:22:0f:f1:50:8f:5e:46:66:6f:e6:ef:2a:
                    a5:f5:dd:42:12:90:72:b5:74:fe:99:08:64:88:1f:
                    9c:a3:61:a5:62:8b:a9:78:02:9c:d0:2a:ba:4b:fe:
                    53:ef:d4:55:f9:3c:f7:4e:df:76:37:47:e1:64:80:
                    bc:b0:ec:d1:53:13:b8:a9:6a:fd:1c:1a:64:aa:e7:
                    5c:2b:d8:aa:59:94:ea:ca:8a:c4:ac:b0:4b:d2:33:
                    c9:86:96:3d:d4:19:36:a2:fb:49:28:61:bc:2a:6c:
                    b1:bd:06:7d:c6:a5:52:11:ba:d2:ab:04:1e:0a:b8:
                    9b:e3:c5:ea:cb:a0:dd:97:66:f6:38:95:99:1a:93:
                    52:d1:85:32:a3:38:9c:d1:5e:a0:36:19:aa:0c:13:
                    c6:f9:95:12:a7:f6:69:c5:5a:07:83:d6:e0:93:c6:
                    f5:4c:39:67:7a:b5:3f:e1:4b:7a:95:eb:df:78:44:
                    14:fe:46:18:71:47:b6:82:de:9e:f4:21:bb:89:8c:
                    3f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A7:97:CD:04:7A:6E:CE:2A:EA:87:B7:42:AB:30:D7:1C:0A:71:B8
            X509v3 Authority Key Identifier:
                keyid:5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:cd:ab:31:45:75:6e:fd:ad:84:6d:8e:c6:42:9a:7f:b0:95:
         6b:67:84:35:30:47:c7:71:9e:f1:92:a5:0a:ea:26:c5:75:00:
         bf:1d:05:78:f6:5d:4c:5f:aa:7e:08:a1:0a:8c:47:0c:68:6b:
         2f:f0:4b:e6:17:7f:10:04:dc:e7:3d:4b:34:69:b4:ae:40:42:
         fc:c6:0a:9f:e4:09:96:58:9d:17:a5:4d:6a:07:42:2c:49:0a:
         78:cc:8a:01:04:75:21:23:4c:ff:fd:61:81:89:0f:25:1f:a6:
         22:91:ca:18:87:7b:e4:27:5f:2b:e8:d8:dc:b3:f1:15:80:0c:
         2f:ab:3a:dd:2e:0c:dd:e7:28:34:87:ac:4c:84:31:34:b9:e8:
         c5:96:3d:54:54:49:3a:5c:81:64:49:c3:69:9e:ed:41:80:05:
         bc:1d:81:92:a9:5c:66:8b:ed:71:20:bc:bf:9b:94:94:59:64:
         af:f5:80:8d:3b:80:f9:fe:bb:47:9b:53:bd:40:9d:24:19:58:
         5b:52:d0:14:6c:86:aa:50:69:4c:56:44:25:fd:3a:43:89:06:
         e4:5b:77:08:79:59:fc:2e:76:c1:39:6d:89:0b:d1:f6:81:10:
         57:0b:c6:51:2f:2e:dd:b6:a2:90:89:be:e5:36:93:4d:88:d4:
         0b:07:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:54:48 2025 by rpki-client