Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
File:                     WOAvLKgauAKTlTAVbpYxsY9RWEA.mft (raw, json)
Hash identifier:          2U7oAMSmOKMju76uE6hREhHfmLq0mujCh87BkvBnGdE=
Subject key identifier:   F7:B9:19:5A:84:96:91:B6:54:19:7F:88:FA:AF:A9:A5:9A:E9:C7:D9
Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40
Certificate issuer:       /CN=58e02f2ca81ab802939530156e9631b18f515840
Certificate serial:       01984A09EBC2AA7C698D5F64442A4A22FE46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
Manifest number:          0132
Signing time:             Sun 27 Jul 2025 04:00:20 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:20 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:20 +0000
Files and hashes:         1: WOAvLKgauAKTlTAVbpYxsY9RWEA.crl (hash: ihmNNvPrcvAz5pkvkPEA62If5zZ1OO9DiJRNxIkyxO0=)
                          2: wKFImUWqJAZ63I73CUY6kU8vkUQ.roa (hash: 6TgnMHnPVKyV4LoYC0bcNEIls6efji/PtDzWQK1yR8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:eb:c2:aa:7c:69:8d:5f:64:44:2a:4a:22:fe:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840
        Validity
            Not Before: Jul 27 04:00:20 2025 GMT
            Not After : Jul 28 04:00:20 2025 GMT
        Subject: CN=f7b9195a849691b654197f88faafa9a59ae9c7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:07:b5:6b:f4:82:fe:79:a5:b4:4a:9a:50:
                    0e:30:94:cb:7a:6e:9d:e1:7f:81:8f:48:2b:cb:92:
                    c3:34:2c:c2:51:e2:8e:a3:82:79:5c:cd:8b:7f:60:
                    72:62:2f:b5:db:bc:d8:a4:d2:fc:83:9f:76:26:69:
                    e7:3a:ed:f9:22:8f:85:c2:4f:8f:96:e6:6f:1d:4e:
                    3d:75:ae:c5:15:c5:61:3f:a4:b7:7b:01:06:17:ac:
                    4b:a1:56:21:35:08:aa:9e:a5:1a:e2:55:31:60:fb:
                    4e:49:f9:5c:46:ce:c9:d6:13:f6:3f:a3:fa:01:3b:
                    33:3c:7f:02:5f:40:59:4b:26:15:42:4b:dc:f6:a9:
                    02:5b:0b:6b:39:2e:ad:1f:cb:b9:3d:7e:3e:29:07:
                    a9:92:1d:79:30:02:8f:a7:fa:88:08:21:60:f1:0f:
                    85:8f:8b:e5:7f:b3:99:34:b8:af:40:d1:7f:fd:64:
                    e4:0f:24:77:31:b3:d0:cf:3b:57:7f:84:9c:ba:8c:
                    30:de:f8:51:62:06:b5:20:59:25:9d:8d:89:48:b7:
                    49:30:d5:95:83:b1:58:69:43:c5:12:3d:4f:62:06:
                    d3:eb:1a:a4:e5:9b:54:2c:b3:df:c9:88:0b:6e:be:
                    52:30:83:4a:10:e3:89:05:1f:9d:64:eb:dd:c0:40:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:19:5A:84:96:91:B6:54:19:7F:88:FA:AF:A9:A5:9A:E9:C7:D9
            X509v3 Authority Key Identifier:
                keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:34:92:89:95:f5:6c:d9:f2:61:1c:13:4a:3a:9e:e3:20:
         53:ff:83:3a:d1:57:e8:ad:70:77:2d:32:ce:bf:bf:48:d8:f7:
         79:a0:74:cb:21:56:4e:84:c3:82:4e:a0:e8:47:cf:83:7a:35:
         ac:20:84:7a:c3:5a:38:a5:8c:d2:7b:bd:ec:31:36:53:9d:41:
         a7:e0:73:7b:d3:d6:6a:88:68:b3:a5:d4:8e:e8:eb:aa:97:e0:
         56:24:ea:0f:c1:d1:1a:65:4d:9d:c6:e6:11:95:0f:4b:f6:53:
         4c:90:eb:16:40:ec:76:15:7a:57:a6:73:41:3a:97:aa:ea:fa:
         a4:a6:47:67:a7:f7:be:74:07:79:f1:f7:4a:c4:06:45:0f:eb:
         cb:fb:ad:de:27:f6:ef:06:ae:58:38:c2:0c:84:8b:77:5c:9d:
         e8:0d:73:9d:62:6f:9a:ac:c6:b8:50:4b:a2:2a:36:b4:2c:32:
         5e:73:7e:a0:a7:cf:42:8f:5c:26:da:89:f3:26:27:78:76:74:
         1f:6a:ee:33:c8:54:d2:2f:87:6e:be:78:8a:b6:eb:35:06:ea:
         1f:79:c7:98:6c:c3:6a:da:72:d2:a4:1c:af:c5:f1:51:14:fc:
         80:73:7e:c9:a0:72:d5:c7:7d:70:d4:bd:05:f3:22:82:f7:f5:
         b4:9a:46:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:10:01 2025 by rpki-client