Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          ex70L7gxUOdwRGiVmr4D0hhKq1t/B1/0/1Qr8iFqio8=
Subject key identifier:   3A:6E:26:CA:A6:6D:0E:C3:E6:AA:E2:E0:6B:08:1E:6D:0D:3D:95:21
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       019841E2DC2BD0858BD186C94F6C0141EDDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          15FD
Signing time:             Fri 25 Jul 2025 14:00:43 +0000
Manifest this update:     Fri 25 Jul 2025 14:00:43 +0000
Manifest next update:     Sat 26 Jul 2025 14:00:43 +0000
Files and hashes:         1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: uL5kS4OOZjrUGhOG9Sge9nA/sUmfmbPGx/M1tcLJowE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:e2:dc:2b:d0:85:8b:d1:86:c9:4f:6c:01:41:ed:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Jul 25 14:00:43 2025 GMT
            Not After : Jul 26 14:00:43 2025 GMT
        Subject: CN=3a6e26caa66d0ec3e6aae2e06b081e6d0d3d9521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c9:a4:2f:c0:84:b1:3d:58:85:d0:26:18:1d:
                    69:93:32:49:85:9c:a5:ac:c5:1b:31:e0:29:98:27:
                    49:f9:31:28:b1:2c:60:bf:19:17:c9:f1:6e:a4:b4:
                    16:4c:c7:d9:4d:74:b9:5e:36:8a:6b:9d:01:9d:e1:
                    5c:3d:cd:04:e4:99:53:46:9f:d1:65:0c:28:1e:b6:
                    6c:d1:cd:76:4d:1a:94:87:ac:56:47:2d:6d:95:27:
                    06:79:48:42:1d:f0:d7:5f:15:3f:cb:f5:7e:5f:92:
                    b8:43:42:7f:b6:b1:a0:1d:59:7b:f0:b1:38:df:b3:
                    74:a4:44:c9:bf:91:dc:b9:85:b8:ef:92:46:fe:6e:
                    79:2d:e4:42:b7:98:6e:a9:36:ca:58:e7:20:b5:52:
                    d2:19:7a:6c:11:8f:19:df:20:0d:6d:fd:67:c0:e3:
                    ac:a4:53:4b:68:ed:e0:31:5d:7c:cb:72:ea:ff:7a:
                    4a:6a:10:9a:f1:93:c7:0d:aa:b3:b5:1e:35:68:fa:
                    4a:e4:66:cb:f0:b3:a3:9f:46:75:14:70:fb:41:7c:
                    d7:54:e9:f2:c2:34:93:d9:98:96:50:61:45:e9:99:
                    78:59:2e:ea:6a:97:77:4a:99:94:e4:07:0d:ab:c7:
                    5d:63:a6:f5:7e:72:07:1c:a7:cf:a4:bb:9a:d8:7a:
                    c0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6E:26:CA:A6:6D:0E:C3:E6:AA:E2:E0:6B:08:1E:6D:0D:3D:95:21
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:01:b4:dd:4e:3c:4e:c4:58:d5:34:f4:18:b4:8e:76:27:
         29:1b:d9:a9:d9:d0:ec:8b:c2:04:5d:b0:a6:6d:37:92:66:88:
         1c:6e:8e:d7:8e:7c:e4:ec:e5:f2:d3:81:35:3a:81:f6:86:7e:
         56:b8:db:70:ee:71:22:ba:bf:ce:50:01:b6:2e:0e:c9:e3:81:
         c7:11:54:d8:39:ea:6a:bf:25:34:9f:29:a3:0d:88:6e:d7:bd:
         45:f2:5b:0e:1c:ff:99:e6:29:95:5f:54:f4:a0:27:a4:59:49:
         aa:12:4d:e0:60:12:a7:09:57:74:9f:93:d5:27:50:83:02:d6:
         99:42:5c:a9:81:35:32:aa:7c:c7:9e:50:29:fa:af:71:71:f5:
         89:d0:79:93:57:3b:62:d3:79:bb:27:ed:cd:03:bd:96:d7:ba:
         e6:74:f7:50:de:84:25:28:13:11:a0:c7:cc:12:ae:1c:33:4f:
         e3:38:3c:29:7b:5e:7f:28:6d:23:02:e6:ef:95:b7:e0:70:85:
         89:57:16:69:d8:52:57:6d:d1:74:c3:11:fe:ea:8c:f4:53:35:
         7f:59:0b:1a:a1:76:36:58:b4:ec:21:40:29:24:69:db:30:d1:
         9f:40:da:71:38:5f:7c:2f:f9:3f:2a:7e:4e:63:52:43:71:6d:
         ef:20:d4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:23 2025 by rpki-client