Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File:                     WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier:          g3Iu9Roy6emG85XR4dQjWvfNQJCq2VcPuTsDWNkbOH0=
Subject key identifier:   75:6F:01:E6:1E:50:72:68:D9:A3:3B:45:5D:C4:66:70:0C:2B:46:29
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer:       /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial:       019921B04C3A85D765AAE3DFE88BAF9FC2A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number:          031E
Signing time:             Sun 07 Sep 2025 01:00:25 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:25 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:25 +0000
Files and hashes:         1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=)
                          2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: dtTtpURuo6lx+e3i5mHsBLveykobycJ+i+C2hu79Lws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:4c:3a:85:d7:65:aa:e3:df:e8:8b:af:9f:c2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
        Validity
            Not Before: Sep  7 01:00:25 2025 GMT
            Not After : Sep  8 01:00:25 2025 GMT
        Subject: CN=756f01e61e507268d9a33b455dc466700c2b4629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:fc:b2:bf:09:97:cc:85:60:2e:05:9d:58:
                    30:35:83:04:29:7c:85:1b:3c:1a:77:66:cf:a5:83:
                    4a:98:a3:40:29:bf:6d:8f:4f:4f:e8:34:1a:02:66:
                    2a:ef:f6:ac:04:9e:f0:67:51:8d:70:dc:af:f3:37:
                    46:ab:84:58:02:bb:6c:8a:c7:05:0a:3c:52:f3:b7:
                    4b:35:52:ed:93:3e:eb:23:6b:66:07:a0:23:ee:90:
                    54:12:c8:72:81:89:e7:51:f2:0b:a3:7f:1b:60:55:
                    8b:80:86:4d:9f:e0:03:ce:ef:70:87:c5:a1:52:b4:
                    27:d4:8f:43:cf:9f:79:5f:42:5f:86:b5:4c:9d:f2:
                    0f:21:88:72:09:fe:14:23:75:e2:a0:02:3f:ba:c3:
                    5b:22:10:08:e9:2f:20:4d:42:87:72:bb:18:1c:32:
                    07:26:41:9e:13:70:ec:aa:0e:57:42:99:c9:63:40:
                    1d:a5:d7:52:cf:55:dd:33:b7:f3:ec:19:82:a0:14:
                    e6:a1:48:f6:c0:46:c3:82:d5:fb:2b:bd:5b:d5:23:
                    7d:9d:9a:ef:05:5e:ff:87:67:fa:f5:31:b0:8d:31:
                    e1:8a:57:f2:d5:11:61:79:e3:0c:dc:83:52:19:e5:
                    dc:7b:19:42:46:62:28:40:cf:33:29:50:c0:50:03:
                    4f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6F:01:E6:1E:50:72:68:D9:A3:3B:45:5D:C4:66:70:0C:2B:46:29
            X509v3 Authority Key Identifier:
                keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:a2:5e:92:d8:c0:91:be:25:fa:cd:23:5e:fb:92:7d:3f:
         a0:fb:df:81:16:8c:05:a3:b1:f7:ce:be:e5:92:35:f7:f0:57:
         0d:5c:f7:23:44:04:af:4b:0d:d3:f5:be:a8:ed:6a:bf:de:a5:
         44:27:cc:17:3d:4d:48:15:7f:8d:55:5f:bd:4b:16:7b:b5:17:
         d1:94:ab:b2:61:cf:89:37:a3:a7:81:2c:20:75:21:b6:74:49:
         2a:a4:7c:00:16:0a:15:42:d2:bf:d8:eb:43:3b:6b:60:99:78:
         b8:12:58:4a:6f:97:68:0d:35:2f:0b:74:b1:ee:a2:28:f2:0d:
         5d:d7:a5:e3:66:f5:3d:eb:0e:a5:84:1b:45:de:c6:7c:15:25:
         f7:4c:06:80:03:c9:ed:e5:c8:71:06:34:c0:3d:18:ab:5c:58:
         ec:ee:19:ee:5c:d4:53:c6:14:78:28:37:bf:15:90:f1:2c:cc:
         af:8f:f4:16:07:eb:a7:c5:cb:5f:18:cd:24:f8:63:d0:3f:d7:
         8e:29:09:02:00:3a:ce:bf:55:a7:e4:5a:e2:93:13:7c:0f:1a:
         98:b6:fe:d1:a3:9c:ee:23:6b:1f:53:0e:db:78:28:81:3f:cb:
         fe:62:e6:7b:40:a3:7e:b0:5a:3b:02:b5:a1:31:b2:bf:d5:3a:
         a9:33:e5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:38 2025 by rpki-client