Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
File:                     WDMpShzcE1ivxDnApyczsGWob4s.mft (raw, json)
Hash identifier:          DxDJl+FBsTlsz2jLdXPW8Ndoiz31NeI2o7OVM2p8WG0=
Subject key identifier:   B6:37:AA:3E:94:F8:A7:16:81:FF:3E:51:F7:32:89:E3:0C:2D:5C:4B
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Certificate issuer:       /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial:       019959B175047FEC805B31B9F3190585253F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
Manifest number:          13F1
Signing time:             Wed 17 Sep 2025 22:00:25 +0000
Manifest this update:     Wed 17 Sep 2025 22:00:25 +0000
Manifest next update:     Thu 18 Sep 2025 22:00:25 +0000
Files and hashes:         1: FEhWjmoWc9cum53HxeyUT2Qa6mw.roa (hash: kSh8B6Zq+kic4h5PjLJKx7l3r3KTkN44epk5FRWmu2U=)
                          2: K0HsWHysHMZq685uifFe67OOB8U.roa (hash: mIF7jMe84gl1h6EoDmzjdFHUQ2hvrkI5zhJWqQMrx4w=)
                          3: WDMpShzcE1ivxDnApyczsGWob4s.crl (hash: olF4yAuRZRKamXPu3Ftr1DCcNtDm8/hIPzt0yWOW6ZA=)
                          4: hMmGvyz2W2EPSFxojtcmtvFemfI.roa (hash: Zkzb4yaO0yFYxaiPMOmQN6F3WGq60dEdcds/Vk7pzrc=)
                          5: kFJhvw8c8pO7-ui_KmaA5RNc_z4.roa (hash: YGEP4CjqmM4E2cc+zdPbvwB4J8vm3ddL4Eiaa6+UYhA=)
                          6: rVAMPxQEajIzgBDq_QlH1UB_rOs.roa (hash: i7dAzsdGsRXLSIsa/8df9dB0gK3gqAkFNHzOpoaptoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Sep 2025 21:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:59:b1:75:04:7f:ec:80:5b:31:b9:f3:19:05:85:25:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
        Validity
            Not Before: Sep 17 22:00:25 2025 GMT
            Not After : Sep 18 22:00:25 2025 GMT
        Subject: CN=b637aa3e94f8a71681ff3e51f73289e30c2d5c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:80:6e:09:64:30:04:ba:84:1f:39:20:50:64:
                    b6:9e:bf:4d:82:36:09:62:10:94:10:61:7d:c4:7a:
                    74:79:e7:94:25:8d:65:55:5b:ea:db:dc:0e:1d:98:
                    ad:76:d8:cf:57:ef:f2:5f:62:00:b8:e5:d2:89:15:
                    d1:c4:52:a0:51:92:8c:73:62:48:ad:af:b7:3b:41:
                    33:69:5d:d1:06:c3:b4:7a:a2:48:a2:93:10:8c:d2:
                    78:41:91:62:54:6f:3d:0f:b3:2c:ff:ef:4e:22:11:
                    98:6e:8c:91:9e:36:43:3f:05:7b:6d:ef:27:7a:7c:
                    eb:d2:25:a0:cd:a1:4a:dc:53:93:2c:0d:e8:88:13:
                    69:7f:d4:21:cb:79:73:5f:b9:22:f3:ca:85:0f:f6:
                    1b:6e:15:77:d3:19:de:bc:2e:38:e6:e3:00:d4:e1:
                    53:0d:dc:2f:d8:eb:e4:78:e6:99:b7:64:81:7c:57:
                    82:91:ba:ad:83:75:2e:6c:b4:10:75:9c:f4:96:38:
                    be:9b:e8:7b:df:e1:c1:4e:b4:12:59:95:7f:56:16:
                    fb:6c:fb:22:5c:3f:71:58:72:c7:ea:b7:a0:8e:d3:
                    d1:36:37:16:c3:2e:32:d9:74:4a:5f:a4:3c:46:bf:
                    c8:cf:f3:d5:9a:88:81:4c:16:52:de:df:f6:59:87:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:37:AA:3E:94:F8:A7:16:81:FF:3E:51:F7:32:89:E3:0C:2D:5C:4B
            X509v3 Authority Key Identifier:
                keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:55:80:56:ad:41:bd:aa:08:b5:ab:c1:82:b8:67:64:b6:
         16:2c:37:63:a0:5f:bc:20:77:52:a9:c8:e3:10:e3:5d:b6:ce:
         30:6d:2c:c7:35:93:4a:7f:41:93:06:72:b2:b6:6e:02:db:db:
         f7:4c:19:d6:fc:5f:93:27:7e:2d:bc:eb:21:13:db:45:d9:2b:
         fa:a1:9a:bd:a3:5c:5d:c5:9b:6a:9e:f2:89:91:cd:59:dd:1a:
         2d:03:3c:86:ec:34:ce:73:14:3e:20:48:7a:e1:89:80:b7:8d:
         72:9b:c9:5c:e3:ff:86:da:0f:35:5f:24:da:c7:20:20:c2:e8:
         98:03:0d:06:b2:f1:89:4c:16:ad:4b:49:69:2f:87:32:58:69:
         11:5e:1f:61:8d:23:8f:8b:47:8c:6a:cc:b7:a7:51:7a:63:f3:
         37:34:12:2a:1f:26:db:83:04:cc:4b:88:2e:0b:b7:21:75:fe:
         57:d3:ad:6d:9c:1c:b2:a1:8f:eb:28:f1:ae:b2:09:c2:9f:87:
         4c:46:ed:6d:2c:9d:8d:d0:48:f3:0a:a3:e3:a9:e3:81:ab:81:
         83:92:ba:3d:23:70:68:11:d5:c4:76:a2:77:cc:46:92:9d:53:
         7b:8a:20:c1:d2:89:c2:93:9f:2e:5f:dc:32:bc:cb:db:2d:e4:
         ce:e2:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 04:44:42 2025 by rpki-client