Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File:                     WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier:          SsPlsOBd2nMOt1Q+FtjlQyiYok9dAbVWVAJGv4tcews=
Subject key identifier:   14:CC:30:BF:7C:BD:C3:D7:D2:20:A4:FF:B8:5B:B0:39:39:E3:B2:C5
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer:       /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial:       01984B8A89E9491423E7B3340F3B3B0C6F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number:          04AD
Signing time:             Sun 27 Jul 2025 11:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 11:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 11:00:27 +0000
Files and hashes:         1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: wOnmjGAoFAydwCCNwMSyMuc9MiBV1OLpmT/qUkYyi9k=)
                          2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:8a:89:e9:49:14:23:e7:b3:34:0f:3b:3b:0c:6f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
        Validity
            Not Before: Jul 27 11:00:27 2025 GMT
            Not After : Jul 28 11:00:27 2025 GMT
        Subject: CN=14cc30bf7cbdc3d7d220a4ffb85bb03939e3b2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:63:f2:5d:fb:70:e8:ba:36:f5:0c:18:fe:
                    e3:45:de:05:98:f0:9c:0b:6b:96:fb:3f:01:f8:9f:
                    59:c7:45:12:d2:fe:d0:b0:4e:e1:90:0d:86:e3:15:
                    3a:a6:93:6f:52:78:67:e5:23:67:96:6c:dc:06:45:
                    8a:2f:6e:d6:f1:ba:c2:fc:dd:6f:1a:70:4a:a5:c5:
                    97:5e:a9:d2:41:af:4c:54:fc:62:bc:ca:54:54:da:
                    01:f8:2d:17:5b:27:f9:31:40:60:a2:6b:f7:2a:a1:
                    fb:d3:cc:37:ac:a2:2a:9c:14:85:7b:4a:cf:5b:6b:
                    e1:7f:f4:4a:55:74:47:21:dd:aa:ad:01:ee:84:8d:
                    74:34:6d:f3:b5:8b:45:f4:12:f7:b4:1b:95:9a:e4:
                    53:bd:30:db:6e:6e:8e:bf:0c:0f:13:e4:48:48:e1:
                    bb:aa:d5:66:0f:05:15:4a:61:5a:1d:c1:cc:0d:e2:
                    b0:15:e6:11:f9:fc:de:cf:1e:7d:a0:33:e4:97:39:
                    4e:bb:b3:3a:ca:ac:29:dc:fa:a1:1f:62:4a:12:12:
                    ac:e8:d6:cc:18:89:21:d8:7a:49:c8:ca:85:75:7b:
                    a8:a4:01:9a:42:09:0c:b5:79:3a:57:bd:4f:55:36:
                    c5:c6:e7:2a:d6:8f:0c:69:97:75:42:8c:42:c8:b8:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:30:BF:7C:BD:C3:D7:D2:20:A4:FF:B8:5B:B0:39:39:E3:B2:C5
            X509v3 Authority Key Identifier:
                keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:46:6c:d8:ab:27:78:29:85:ea:51:fa:c2:1a:f6:1a:5b:1e:
         b6:14:46:80:6c:f7:53:94:9f:58:54:56:e2:a8:01:b5:70:70:
         f3:7b:48:a1:da:64:1b:7d:05:db:43:05:1b:1f:3e:54:a0:84:
         20:a1:0e:a6:ad:d3:47:02:76:c0:66:42:bb:85:e0:ce:73:78:
         97:f0:4b:64:35:2a:71:9a:7a:59:f5:7e:78:43:9c:ed:63:c7:
         4b:a0:43:c9:de:90:12:25:ff:3d:ba:51:78:e4:e2:fd:d8:43:
         5b:7d:a1:ea:7c:9d:51:ad:f8:9c:8f:24:34:8f:e9:b5:6a:4b:
         dd:e7:4f:db:86:05:49:5b:58:2e:48:12:53:c8:a0:36:89:2a:
         cf:3e:36:d9:f6:41:b2:71:23:25:c6:ac:40:d0:fd:d5:15:1a:
         8e:15:06:6b:1c:20:ee:72:d3:2c:ce:50:10:e6:44:ec:96:4f:
         a8:39:33:19:08:6d:54:c3:84:3f:49:6a:03:36:6f:54:99:45:
         00:d5:7b:76:62:ec:9b:57:dd:b1:a2:d0:65:f5:5d:a8:a6:56:
         c2:a7:0c:20:04:7c:a0:e9:d8:0d:ee:a5:6c:8d:bd:e7:43:21:
         00:b8:77:32:69:3d:16:fe:fd:e6:fd:c0:fc:ed:10:2b:87:14:
         35:0a:6f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLionpSRQj57M0Dzs7DG9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NmE1ZmVlOTM0NWZjZDQ4MDEwMzQ4ODc3Yjc4NTNhZmNj
YzY0NzQwHhcNMjUwNzI3MTEwMDI3WhcNMjUwNzI4MTEwMDI3WjAzMTEwLwYDVQQD
EygxNGNjMzBiZjdjYmRjM2Q3ZDIyMGE0ZmZiODViYjAzOTM5ZTNiMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRxj8l37cOi6NvUMGP7jRd4FmPCc
C2uW+z8B+J9Zx0US0v7QsE7hkA2G4xU6ppNvUnhn5SNnlmzcBkWKL27W8brC/N1v
GnBKpcWXXqnSQa9MVPxivMpUVNoB+C0XWyf5MUBgomv3KqH708w3rKIqnBSFe0rP
W2vhf/RKVXRHId2qrQHuhI10NG3ztYtF9BL3tBuVmuRTvTDbbm6OvwwPE+RISOG7
qtVmDwUVSmFaHcHMDeKwFeYR+fzezx59oDPklzlOu7M6yqwp3PqhH2JKEhKs6NbM
GIkh2HpJyMqFdXuopAGaQgkMtXk6V71PVTbFxucq1o8MaZd1QoxCyLjsRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTMML98vcPX0iCk/7hbsDk547LFMB8GA1UdIwQY
MBaAFFlqX+6TRfzUgBA0iHe3hTr8zGR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZjZiN2MtYzBhOS00OTUzLTk4NjUt
ZGU0YmRhYTM3MjAzLzEvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi82ZjZiN2MtYzBhOS00OTUzLTk4NjUtZGU0YmRhYTM3MjAz
LzEvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkZs2Ksn
eCmF6lH6whr2GlsethRGgGz3U5SfWFRW4qgBtXBw83tIodpkG30F20MFGx8+VKCE
IKEOpq3TRwJ2wGZCu4XgznN4l/BLZDUqcZp6WfV+eEOc7WPHS6BDyd6QEiX/PbpR
eOTi/dhDW32h6nydUa34nI8kNI/ptWpL3edP24YFSVtYLkgSU8igNokqzz422fZB
snEjJcasQND91RUajhUGaxwg7nLTLM5QEOZE7JZPqDkzGQhtVMOEP0lqAzZvVJlF
ANV7dmLsm1fdsaLQZfVdqKZWwqcMIAR8oOnYDe6lbI2950MhALh3Mmk9Fv795v3A
/O0QK4cUNQpvAg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:07:21 2025 by rpki-client