Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          RVEjrbBittpyt+dDek87ePNeZN/oZ6XnYVuce5+9VKs=
Subject key identifier:   07:D3:11:4F:E6:C9:F0:D6:71:13:E8:03:F3:CF:01:E4:8D:30:2B:9D
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       01991CF83F18839FD5868840DFD14A34722B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          0839
Signing time:             Sat 06 Sep 2025 03:00:54 +0000
Manifest this update:     Sat 06 Sep 2025 03:00:54 +0000
Manifest next update:     Sun 07 Sep 2025 03:00:54 +0000
Files and hashes:         1: 4ZArBLnLocPpGHsaVFtOWy1GsWA.roa (hash: pqXDsHt86t8zsxtaFtGXKbg4QUfmimTh3EtiWAKZzkQ=)
                          2: 9i-xHF3Tpk-LvSL2lSXbWX3TAPE.roa (hash: GhnJ6RKe7wEuZR796fCpS4DNXR1C/VooXMXrXuKzk28=)
                          3: AosAQto_z9OqcwqeC_SZWECJeJM.roa (hash: yf8rKxe7cxV+hvRaeqOv00ssVciIq9eecdLxMG0bKBI=)
                          4: ERe51qclsX1vtlIYSnp9k4CtxTU.roa (hash: kRCA0E3LofkB2UCr2ORCJ295mGOQpRVa8ZmBK6mCChQ=)
                          5: Me2_Prx_OH84___bzQH13Qqoab0.roa (hash: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=)
                          6: O42IhVRYzRJUYlgjX8HIHW_KVnU.roa (hash: SZagXazHBTlLIxNcbYMSb4ckHjuLGZi27M1fUfK9rEk=)
                          7: P3r8oITRtebSeW0p5g8ljrH9RWE.roa (hash: q/U3845DVzpfmos9VO8HLLXFHPxn17BOa+RRG773ocI=)
                          8: SrEfDrHMkGEpdeA2ZUisx7ubFNA.roa (hash: RKPLlrEgQ53ytDlI3r+HGIuuyex97rpEUzMwWq38+9s=)
                          9: U-Ph48laIxEbF24jH6nOMT3OpLA.roa (hash: h/z1tS8nUsqG42P90V9Offm2msIM9SciPTSWhkVK3yE=)
                          10: W5pOqAkgjpYDOeHPc58PpPg4eC8.roa (hash: yL5+pJ+Yw2Ubc1IA7l2rXuOrE0qVTT2bXY3YTNagTw0=)
                          11: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: nIHzc+KFP7h7UXulTysiog3iFtsNF9tt5J80AUw/Taw=)
                          12: YhUiBt6aWDxfUxxlX_f5An_H3Vw.roa (hash: UUlZjHLoXxN7b5MRYoyNUfcSFhA/gMCkcrXZjW9BfPs=)
                          13: ZgSB3hvbqamtPuaTPpD7w1FDs5Q.roa (hash: jHjSzZUDGV2Tn0cFtWpJiySCbc4D9KXn4b20Sb0HAUA=)
                          14: iHplqt4DUNKw6ZOchFUdjPI3y9w.roa (hash: mQhvd0Sd0kmDl4SEDJMNNOJzjx+Zauw/1H6yRaPtWco=)
                          15: jnLGWKb8iggQl-Vb0CzNnJG3Cy4.roa (hash: sUjFFwQVQZt9Fjo+3Lho911bfG5hBRxCh635GQzd9TA=)
                          16: kPsDUSBkqswfaMzVi1Cye0vM8ks.roa (hash: w+xp6HNKwTbsH2m8GWhBFiGbaO4PIv65OfaGPcmfyUs=)
                          17: lKN4UVZtN90tPiHbxWVbAiES2eo.roa (hash: z/Q5abY5hFpeI2vwI0AV9WzD16kLOgpzqlnEO3K5QQg=)
                          18: lUfZhOt-wvUulei1P4O40ILh6W4.roa (hash: KvgRSxa7IHlLzvxb6tBzeiNZVGLjogvJrOdyYd+Hhtw=)
                          19: nMNUMFD0D6QsYK_jnD6pqYmeXsk.roa (hash: cEJMwKIA2yxBnNxWn1mu5jHlICkXHOt6q6vHqbiLucg=)
                          20: om7cnxirwY1mF6WG8GSa3rsaVqw.roa (hash: +3vNfJz4iobOk77Hgvoshz1u99toaeiukQN3KQqch5c=)
                          21: pSPQssN5kDIUCVU97gVJ5sRDFrA.roa (hash: 2T2Pj/Lur1RrWbVnX6sEjqE6EYLVtljOc+B0vUZ0Otg=)
                          22: qgaVtMG-ojykgXMOKJGYVZtJ6Mw.roa (hash: XEyZ6wW+iDEC/a8wABAnaZQWU4pTCM3lBtDUlv+Gfbc=)
                          23: ra3KqgTuCiwRC0PZJRve-Bdxvjg.roa (hash: mcABOKGSXtu9A2WM6jvcZmDeS/Ld950DxdjwmVB9gHU=)
                          24: sUXFPW0NRpJM4hG7LzPDan-v-Ek.roa (hash: p4O9sfEQ+qJe5DEqRIHGkARxsLT8DQyNzXhwr7CF1/w=)
                          25: vU2HddgRMZd-n9GXfaubZsaeTag.roa (hash: fORgxQlTLiLIEJTKyJ2i2MnWHaJ55TGjD8VWzhhqp5Q=)
                          26: wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa (hash: hApFysPixMC2EBljVd1zm9U6jkNX4gLFQUXs9uZSHu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:f8:3f:18:83:9f:d5:86:88:40:df:d1:4a:34:72:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Sep  6 03:00:54 2025 GMT
            Not After : Sep  7 03:00:54 2025 GMT
        Subject: CN=07d3114fe6c9f0d67113e803f3cf01e48d302b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:d0:a9:23:34:80:fe:7a:21:75:23:3c:23:
                    fe:31:98:2f:bf:99:37:09:4a:8a:53:56:d3:b0:79:
                    e0:ec:b1:e1:00:7e:6f:e7:11:ed:ad:46:45:86:89:
                    54:c1:f6:f6:99:ba:1e:06:ab:19:af:e8:e8:f8:19:
                    2c:42:d8:29:30:33:b8:00:5e:3c:b7:00:02:63:ef:
                    52:01:db:5f:eb:3a:24:16:79:9d:9e:fd:7e:8d:cc:
                    81:d3:f9:45:cc:5e:27:d6:de:fe:5a:b2:cd:de:37:
                    b6:a9:04:2a:73:92:b9:0b:3a:6d:13:6b:90:e9:35:
                    c0:3b:b9:c6:fe:d6:d5:1e:c9:6e:b8:59:06:b9:04:
                    50:c2:41:99:65:fd:80:fa:12:d9:6a:51:fd:24:ce:
                    f3:50:e2:f1:08:88:aa:cc:f4:ad:5a:c2:8f:60:69:
                    ad:08:50:a3:4a:9c:d7:73:c0:bd:71:c0:e9:11:57:
                    24:f0:40:de:5f:f8:6c:04:82:b3:0b:be:5d:7a:db:
                    a6:fb:d6:ab:ea:d7:bc:58:48:9d:6b:3a:0f:19:d0:
                    51:62:9c:59:79:b5:06:3f:44:16:97:ad:c8:48:bd:
                    42:31:de:eb:d7:97:4b:67:e3:0c:b0:cd:cb:86:50:
                    b5:5c:60:3c:23:b2:50:bf:05:79:ac:df:be:a2:6f:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:11:4F:E6:C9:F0:D6:71:13:E8:03:F3:CF:01:E4:8D:30:2B:9D
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:23:48:c0:66:e8:8a:a7:d5:1a:b2:70:63:61:b7:ad:1f:
         0f:73:34:8c:50:94:5e:0c:d6:fd:0b:42:89:ea:6f:cd:63:a1:
         f9:2d:1b:55:17:54:a0:c2:70:b3:9f:f8:bb:90:42:0c:d7:a4:
         8c:d2:19:d2:f5:a2:45:f7:03:f4:34:11:12:ea:b2:f1:e3:57:
         3a:71:4a:4d:21:f9:31:49:fc:bf:5c:af:e3:e2:47:91:67:6d:
         d3:07:81:7f:57:95:29:1a:84:f6:0f:be:f3:b7:57:d0:8a:bb:
         fc:d4:a0:0c:7e:d6:5c:bc:2f:04:e9:c3:c7:eb:b1:25:79:2b:
         5b:38:19:a1:27:64:f0:9e:5d:a2:c8:32:50:55:6e:bf:a9:39:
         72:a0:dc:a8:30:54:6e:47:f3:1e:99:86:69:64:c4:35:89:42:
         86:40:af:e2:0a:f1:f4:b6:9d:65:45:75:c8:8a:d4:88:12:e5:
         1c:dd:97:dd:a9:6b:0c:b9:ae:df:bf:21:5e:10:ea:0c:c9:c9:
         81:d6:38:58:64:7c:ff:77:75:12:ad:59:f4:86:b0:54:bc:68:
         59:60:23:39:b9:53:18:14:70:1c:ca:0e:a4:bd:f1:49:91:db:
         6f:03:eb:6e:9a:30:a5:56:40:4b:ab:bd:f8:35:e0:fb:b9:83:
         5b:68:b0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:15:48 2025 by rpki-client