Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          y6M035BCoKvbUShpJHUNrVlLE4TT2RtITxZzTovcNz4=
Subject key identifier:   DF:6D:3C:B8:52:BA:07:45:CD:D8:AD:C6:0D:F2:27:37:EB:33:3B:82
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       01984A0A4773CC3B04F5FFEB9C2F97088000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          05BA
Signing time:             Sun 27 Jul 2025 04:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:44 +0000
Files and hashes:         1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: YZPQi68aT10EoLATs7S2lMg4d1EE2HVaVDcOtkpIy7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:47:73:cc:3b:04:f5:ff:eb:9c:2f:97:08:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Jul 27 04:00:44 2025 GMT
            Not After : Jul 28 04:00:44 2025 GMT
        Subject: CN=df6d3cb852ba0745cdd8adc60df22737eb333b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:f2:b5:e2:9c:75:86:68:d1:f9:6c:57:bb:
                    79:86:d1:08:0a:eb:df:be:4f:b7:9c:7e:e8:20:24:
                    87:fb:ff:1a:23:76:0d:f7:42:df:b1:ff:dc:cf:32:
                    ff:4a:7e:5b:b8:10:e5:7e:a0:5d:13:4f:ba:1d:09:
                    20:ed:39:78:f3:25:78:c8:a4:4c:25:b1:ad:8c:bd:
                    be:5d:ae:34:58:d0:2e:e9:ef:3f:ce:75:3d:e8:18:
                    00:f1:02:b9:ef:18:53:fe:4d:c4:ad:2b:25:00:a1:
                    27:1f:e3:d8:37:54:e6:c4:c5:4d:c8:52:89:e1:59:
                    08:6a:2c:86:d5:b9:7e:6b:43:9f:67:aa:f1:68:d3:
                    03:50:29:9d:c0:c6:87:3b:fc:01:e6:c7:b2:d0:0b:
                    df:f8:c7:91:b7:2f:02:c3:fb:20:73:fc:a8:7b:1e:
                    1d:d5:3e:6a:a8:1b:d5:55:2b:20:c3:26:ae:f3:95:
                    c1:a6:04:47:f9:db:f5:b5:31:49:76:46:aa:78:f1:
                    f8:ad:07:bc:a7:c3:19:ad:23:d7:32:a8:c4:72:2f:
                    a8:d0:9b:a5:8a:93:ef:84:41:50:13:7c:57:e7:5a:
                    01:03:33:2f:4c:5c:a2:4e:be:ff:9d:a4:4c:34:45:
                    5e:02:87:bf:32:3f:46:67:0c:c6:8e:78:81:57:3e:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6D:3C:B8:52:BA:07:45:CD:D8:AD:C6:0D:F2:27:37:EB:33:3B:82
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e8:16:b8:95:42:84:5e:04:b5:93:a4:ba:83:f5:d5:57:1e:
         95:d4:c9:bb:c7:6d:37:d7:93:f4:1c:ed:28:1d:ee:97:ab:8e:
         0b:dd:52:02:07:b5:ca:a0:32:c4:78:bc:4d:27:47:d4:47:1b:
         a8:2a:09:65:39:3d:65:ec:59:d6:e6:50:66:96:3c:05:ea:63:
         bf:23:6e:f2:9e:90:e5:e3:9f:4c:ca:eb:ad:a1:19:8b:b9:bb:
         9f:14:3e:8f:cb:d0:a0:39:bf:68:4f:82:3a:84:ef:0f:7f:1a:
         fb:41:7f:cf:37:bb:ca:d6:53:f8:3e:d2:96:ad:55:54:ad:32:
         3f:2e:db:96:59:28:fd:ba:cd:7a:69:7c:8f:22:b1:9a:1a:28:
         53:57:c7:ae:e5:02:7a:14:ae:26:cc:66:ae:91:aa:96:48:8e:
         7a:33:a8:63:b2:3c:54:68:e0:52:e9:19:25:cd:41:51:1f:41:
         40:a0:6c:7f:23:59:e2:e9:ca:df:81:ef:4f:c9:5d:7d:8b:2a:
         b1:0b:f7:25:38:de:f8:73:6b:c6:f7:a5:63:96:e0:4e:d8:8d:
         c2:ab:ec:2f:37:5d:0b:07:30:63:57:e9:d9:86:26:66:7b:b9:
         e2:47:4d:32:38:e4:c6:76:6b:8c:c7:c7:d1:ee:f1:a9:69:8f:
         e4:12:3f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:47 2025 by rpki-client