Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          y5GhD8SL69bgm45O7kD2dO2qsRls0Lpxdz1qvEuWTPw=
Subject key identifier:   4B:56:F0:9F:6A:FF:C1:12:E5:09:EB:45:E4:FD:4F:90:70:DE:71:DC
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       01993501FB62460ABF110028C5F00CEFA3C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          167D
Signing time:             Wed 10 Sep 2025 19:02:26 +0000
Manifest this update:     Wed 10 Sep 2025 19:02:26 +0000
Manifest next update:     Thu 11 Sep 2025 19:02:26 +0000
Files and hashes:         1: CWjWI1KElycGegFoxqel6BzyPu8.roa (hash: x51MkWgMWV9H4yeCpFeKV1piMOfEzcOof7b5UghQrtY=)
                          2: TIXlkFRgn5qDeTU5GPtZw50sFgg.roa (hash: StUjGKW5A9Vqz9JKMfVvVB0iqJDXj37ZwmT9ma7BuAQ=)
                          3: Udak3yr2UP3kErzFOUD6ejk40jQ.roa (hash: 0WEzkUde+4+TTVujXlHKRM8FF/Cn6zrziqOLiHqb9kc=)
                          4: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: pgJaI9bQvVrhZAuRPA3zuiZQOntrNvV9vG1ez9Y0wlQ=)
                          5: j3Johs7tWdOjWP-RSLyuZS9QCYA.roa (hash: 73D0mNtTe5ysnKB7nrHua4L+6aN6MBQCZz1gs+mdS6U=)
                          6: nCwgDurwC06Anta3aqc5wbxK3GY.roa (hash: 6I1/PwDUPqtalY+y7tNas0+iP9HsSsWLUFXwql/UFbs=)
                          7: wW0am_Aqxc8qtKWqJuBRkTx7-vg.roa (hash: 3MA88INLD4dCx0oFXNeXIYeavG1gLlOTW77Nx0t2APU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:01:fb:62:46:0a:bf:11:00:28:c5:f0:0c:ef:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Sep 10 19:02:26 2025 GMT
            Not After : Sep 11 19:02:26 2025 GMT
        Subject: CN=4b56f09f6affc112e509eb45e4fd4f9070de71dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:79:46:3a:5c:21:f9:36:41:c5:64:9f:ba:
                    2c:83:c4:c1:b5:db:f1:c5:a2:15:d6:6d:b2:2f:74:
                    32:9e:be:e1:ec:c1:3a:73:f4:2a:b1:90:ec:be:71:
                    f0:19:23:1b:d1:68:5c:66:fc:9a:9e:ed:06:40:1b:
                    9f:c3:37:19:6b:98:dd:18:1f:ac:da:92:a8:d2:7f:
                    d0:71:5e:05:4e:37:fa:50:b4:9a:25:2e:90:bf:2a:
                    76:78:72:b9:bf:7e:28:80:0d:9c:c4:2d:c7:95:09:
                    d3:d6:69:f9:88:62:02:2a:35:ea:83:4a:b9:8e:8a:
                    e9:04:4c:bf:c9:ac:1a:5d:31:40:39:71:29:a7:49:
                    17:67:c2:4f:e8:1f:78:ca:d4:a1:8e:94:39:44:5b:
                    c1:10:8f:24:74:c2:34:02:84:04:a5:cc:fb:b9:56:
                    ee:e9:0b:86:85:f8:9b:f6:f1:d8:a4:01:3c:ec:56:
                    1c:da:94:7a:a7:f2:db:5b:64:0f:e8:c0:30:2d:9f:
                    0e:5b:82:f4:de:38:cf:0d:f6:81:f7:c4:3f:ad:0e:
                    fa:b1:f8:2d:bf:a2:c7:fd:e4:86:9f:5a:9c:6c:2f:
                    e4:30:1f:2b:df:31:80:05:51:9e:79:7c:e9:03:5e:
                    ce:56:c6:27:53:54:23:80:6f:2e:b4:5c:52:2c:5d:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:56:F0:9F:6A:FF:C1:12:E5:09:EB:45:E4:FD:4F:90:70:DE:71:DC
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:44:0a:82:21:73:2a:0f:53:23:c6:ec:5c:1b:62:6d:e2:2e:
         52:f2:00:e0:10:d2:36:cb:03:48:c4:77:ad:b0:f4:86:99:d6:
         39:48:06:1d:48:84:8c:57:64:ca:50:9e:38:02:d6:51:1a:4e:
         ad:c6:f5:cb:58:1a:a5:90:f7:3a:9d:c7:36:df:3d:6d:d7:07:
         b2:03:43:7e:62:e4:65:02:bd:cc:67:9a:36:8b:26:f5:5a:fe:
         10:ea:26:02:58:5b:53:f4:b5:8d:3a:6e:e3:a2:dd:d5:14:fe:
         61:ad:4b:cb:a5:dc:ba:58:e8:42:98:6b:ad:26:58:46:6c:9b:
         16:99:80:10:8b:fd:5b:c0:ae:72:a6:74:77:6f:7e:12:04:5e:
         fb:97:ae:0d:7a:a3:df:9a:41:20:cd:e4:8b:c0:17:39:41:bc:
         89:11:f8:c9:40:67:d9:56:83:9b:e9:fd:43:91:bc:b1:92:8d:
         18:7e:ad:65:de:13:52:fc:7a:9f:67:89:38:ea:eb:eb:b2:ca:
         48:ea:05:ef:95:da:bb:40:20:4a:aa:76:f4:de:14:12:7e:37:
         48:d4:1b:0d:b9:b8:66:e7:64:ae:13:e7:b7:e7:af:a1:a1:df:
         b2:40:e1:af:e9:76:8b:4b:a5:74:cc:72:82:04:bb:e1:b7:26:
         e5:26:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:45:04 2025 by rpki-client