Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File:                     WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier:          S7sFx0LN3Q+DKhM25FGGIxkWNTPUZUY1yl5g5FTK4SI=
Subject key identifier:   CB:FF:94:48:89:21:39:E0:AA:46:18:1B:66:B0:EE:91:23:0D:7E:91
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer:       /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial:       019845891B3EB1F726268B65BCA58A16F4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 07:01:09 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:09 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:09 +0000
Files and hashes:         1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=)
                          2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: IOo6FWnTUrqQKMHNZ/jMRrZv5wv4PSspBugsQhKFwvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:1b:3e:b1:f7:26:26:8b:65:bc:a5:8a:16:f4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
        Validity
            Not Before: Jul 26 07:01:09 2025 GMT
            Not After : Jul 27 07:01:09 2025 GMT
        Subject: CN=cbff9448892139e0aa46181b66b0ee91230d7e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ad:37:66:97:dc:1c:41:dc:ec:f6:03:76:28:
                    00:5b:57:2c:4f:70:fe:5c:de:d3:ea:aa:85:a4:ed:
                    e2:37:de:8e:8c:8c:a2:14:27:c0:a0:6c:ec:70:59:
                    38:90:cd:9f:fc:60:59:6a:6c:8d:6f:4b:8c:8b:48:
                    86:76:df:a1:f5:81:aa:12:04:28:57:53:51:57:a6:
                    a1:87:3b:56:0e:2c:7c:ad:17:c5:00:15:68:e3:fa:
                    63:ac:b2:6b:d9:13:7e:5c:3b:18:8f:6f:73:ec:ef:
                    9f:4d:0d:0a:ee:d0:a3:df:da:ee:9c:1c:ed:65:f2:
                    53:1f:6f:43:51:a8:c7:3b:51:42:fa:dd:72:bf:8d:
                    31:72:10:78:92:87:3e:1a:0d:41:36:d0:ac:06:4c:
                    62:6d:85:3f:7d:d9:a8:6e:a1:03:eb:54:9f:d6:8b:
                    fd:24:dc:a6:03:a8:82:75:82:0e:dd:37:f4:01:d5:
                    71:91:86:df:da:6d:b9:e6:8c:50:c9:43:18:82:9d:
                    1f:fb:ed:84:8f:97:a9:c1:78:f7:6c:21:27:8b:14:
                    5b:30:0d:15:d6:a3:a6:b8:ee:d7:8f:74:7b:6b:28:
                    91:fe:10:8b:93:59:9e:d8:95:b2:50:ef:57:21:ee:
                    ac:cb:4f:46:f0:91:24:fd:3f:a3:6f:c1:ab:c8:e5:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:94:48:89:21:39:E0:AA:46:18:1B:66:B0:EE:91:23:0D:7E:91
            X509v3 Authority Key Identifier:
                keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1f:c9:83:d0:f2:77:a5:13:aa:ff:53:19:bc:83:5c:4b:43:
         79:1d:a1:25:b3:db:a6:aa:4f:2c:f4:63:5d:2f:17:62:bb:66:
         29:c3:23:c4:e1:5f:21:da:23:f4:ca:37:fd:4f:9b:6e:7e:93:
         68:a3:42:ef:59:de:64:b1:b8:29:f6:5a:4d:21:f9:c4:3b:ff:
         bf:2e:d1:81:0c:02:a8:e9:2f:5b:ce:04:4c:30:92:8f:93:77:
         f4:ba:0b:3f:37:6a:43:61:09:e9:13:74:f5:2a:33:be:26:1b:
         00:72:d9:05:6c:b0:6e:b7:3d:16:81:23:c9:38:73:1f:f7:09:
         80:4f:90:7f:eb:ef:51:de:7c:74:c5:93:30:da:42:fc:50:c4:
         cc:7c:36:fb:68:af:9d:05:95:6c:b0:29:70:60:80:2d:2b:ac:
         f0:6b:99:d8:b6:27:8b:1d:b7:f7:fe:12:e5:79:0b:6f:9d:a2:
         5a:11:86:44:12:48:2e:16:99:79:cf:1f:f6:51:f7:1c:c8:60:
         19:06:cb:49:dc:9a:b2:42:df:84:3f:4d:89:b8:c5:3e:fc:96:
         2e:cd:61:17:7e:2a:4a:34:2f:44:a1:53:f8:57:2e:e0:64:a4:
         24:33:23:19:b3:fb:bf:02:b4:bf:de:37:72:8b:e0:1a:bf:de:
         bb:41:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:51:15 2025 by rpki-client