Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
File:                     WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json)
Hash identifier:          hPKr3334pUw+Y9YjsLtirm6FojEcj0YbtVTFXhIsfcI=
Subject key identifier:   EA:5F:52:C3:07:71:1C:D6:E4:AF:29:D3:FE:45:82:63:5A:7F:E5:E8
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Certificate issuer:       /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial:       019922FA3355DDF00C4BFDB4DE7D4AAFE499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
Manifest number:          1673
Signing time:             Sun 07 Sep 2025 07:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:46 +0000
Files and hashes:         1: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: jaKLeBHw/5OVUwzeY6TPYcWw4kBVnZxjWfbTrcJmodA=)
                          2: xrn9wGcZNgBUBClFEOmA1ETirQc.roa (hash: pd4BjALDo2lB/niA3gPglIgN5zsXIWGcWxmGYdPS/DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:33:55:dd:f0:0c:4b:fd:b4:de:7d:4a:af:e4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
        Validity
            Not Before: Sep  7 07:00:46 2025 GMT
            Not After : Sep  8 07:00:46 2025 GMT
        Subject: CN=ea5f52c307711cd6e4af29d3fe4582635a7fe5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:9e:97:02:3d:22:83:2b:1e:7c:e6:03:fc:
                    1c:8b:53:4d:ad:f7:eb:a7:13:4b:1e:ad:20:a3:81:
                    ba:7b:7e:51:8c:ee:44:8d:e2:69:df:60:39:91:70:
                    d5:f8:69:f8:d0:5f:50:72:6d:ac:77:5c:ad:d6:f5:
                    44:b7:7b:2a:09:c4:00:a2:7a:07:8b:27:57:90:9d:
                    7f:06:17:c9:df:62:c3:f1:3a:24:4b:6b:8b:aa:66:
                    6b:99:5e:18:b4:9e:99:79:db:55:19:06:a3:8a:39:
                    d8:f8:71:02:22:1c:5b:ec:20:db:33:bd:62:c0:f9:
                    11:0d:fb:ee:06:52:aa:c1:39:ff:0b:8b:f8:f4:71:
                    dd:8a:ec:8b:a4:d9:d6:2a:23:c6:c1:33:c1:0a:c0:
                    21:8c:18:28:34:5f:2d:25:83:9f:a5:2c:45:9f:78:
                    a3:46:ca:8d:5d:7f:47:6f:02:22:79:cd:06:8e:1f:
                    75:d0:bc:f4:d5:7a:ae:88:89:93:a6:6c:d8:66:c9:
                    6e:8b:77:82:bf:70:bd:f5:4d:be:fc:8a:41:db:61:
                    48:b3:a0:f8:d4:93:bd:46:c9:26:bd:e3:76:11:40:
                    37:40:ae:2c:03:e9:46:c0:0b:0e:ae:50:95:d3:61:
                    9e:75:64:59:44:ee:27:17:fd:c4:44:5d:1b:6c:5d:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5F:52:C3:07:71:1C:D6:E4:AF:29:D3:FE:45:82:63:5A:7F:E5:E8
            X509v3 Authority Key Identifier:
                keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:e0:57:b1:38:58:21:55:fc:19:74:af:00:fc:bf:1f:f7:
         8c:ae:db:c4:ca:45:d8:4f:92:99:31:5a:2e:37:0b:4d:83:75:
         62:1d:ce:3f:e7:e7:c2:d3:78:9b:8d:18:8b:2c:55:70:85:0d:
         e7:fc:a7:12:45:f2:b5:5f:77:39:ea:39:f6:7b:fe:e6:6f:6c:
         33:d2:03:71:40:27:24:ee:7c:b3:a8:e1:70:0e:4a:66:ea:15:
         c1:f6:89:85:c6:9e:2e:13:d0:b0:bc:b2:6e:66:31:17:4d:c4:
         65:39:4b:6f:71:6a:db:95:eb:e6:2f:1b:08:bd:f9:a2:65:07:
         7d:ea:55:2a:94:04:01:40:b4:8a:4f:ad:86:5c:c9:68:2d:ae:
         6c:54:b4:95:00:8c:87:8d:96:29:c3:dd:23:6b:ed:32:b6:99:
         3e:fe:b5:72:04:23:b5:b4:0f:7a:e3:a8:6e:14:61:ac:84:97:
         d9:75:ad:20:27:66:b2:4d:d2:c7:7d:4c:14:86:c2:24:45:6f:
         2f:be:45:df:4c:c9:f5:08:a0:2c:50:5f:f4:0b:b3:d7:71:a4:
         e4:48:f2:d6:ab:34:db:98:34:23:37:3f:48:a4:c7:5c:16:dc:
         ea:fa:07:ca:66:5e:3f:af:63:a3:ba:34:5a:ed:64:c0:be:71:
         63:05:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:02 2025 by rpki-client