Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File:                     WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier:          wPi60BsJOSJywsHTzFa1SVwEJqOL6PbOi49rY4MMn8M=
Subject key identifier:   E4:3B:7D:4C:D3:34:D9:DA:23:32:0D:57:26:71:D7:A8:24:84:EC:0C
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer:       /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial:       01988B0EE0979F26604E556E6239AE39D13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number:          02D0
Signing time:             Fri 08 Aug 2025 19:01:04 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:04 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:04 +0000
Files and hashes:         1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=)
                          2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: 9++WmoRONP3rYuUW4mEOPEmcpj0mepJJ7zD4JgXhRbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:e0:97:9f:26:60:4e:55:6e:62:39:ae:39:d1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
        Validity
            Not Before: Aug  8 19:01:04 2025 GMT
            Not After : Aug  9 19:01:04 2025 GMT
        Subject: CN=e43b7d4cd334d9da23320d572671d7a82484ec0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:13:86:35:e0:67:6d:a6:d9:60:18:f3:e1:
                    0e:da:8f:52:82:14:af:d8:97:1c:ce:a1:58:94:2a:
                    3b:fd:19:a3:09:01:7b:c6:4a:be:9e:bd:c0:8e:6c:
                    42:e5:30:58:bb:79:bb:74:85:64:85:3e:4a:95:d4:
                    f0:a8:ca:95:ed:0f:e8:5c:8f:35:42:37:e4:0b:36:
                    99:7a:1b:1f:e5:4b:a7:a5:84:a5:f6:04:6e:92:18:
                    83:89:a5:b7:74:b4:7d:21:3b:a9:d0:ab:d3:b0:fd:
                    04:01:cc:0e:67:62:c0:b3:af:44:b5:6f:10:94:b7:
                    19:4a:13:b1:ab:81:dc:b5:80:c6:73:31:97:3b:fe:
                    d7:f0:15:ca:2c:33:0b:f8:60:7b:dd:a9:44:6a:37:
                    96:5e:15:58:67:ac:ec:e0:6b:cf:f5:59:ab:52:10:
                    0d:47:47:97:cc:f1:fc:d3:1d:92:ac:51:04:59:85:
                    23:a1:33:53:2b:be:a4:d2:1d:36:a6:7d:a1:fc:2c:
                    7f:d5:44:06:0a:d6:cd:a4:f0:e3:9c:0f:57:c2:94:
                    a6:ab:69:bc:be:2e:89:76:c4:90:cb:36:81:c5:89:
                    2c:25:a5:48:e2:05:06:8c:3a:41:9a:75:86:57:97:
                    81:18:0e:27:83:2b:af:b8:3f:bb:db:7e:4b:fc:8a:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3B:7D:4C:D3:34:D9:DA:23:32:0D:57:26:71:D7:A8:24:84:EC:0C
            X509v3 Authority Key Identifier:
                keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:99:ea:75:a6:5c:4f:6b:45:d6:d3:9d:b3:32:ae:c2:7d:e3:
         3b:67:cc:1c:70:bf:da:8f:97:7c:38:40:f7:af:10:f7:84:fd:
         1d:80:86:1c:96:29:42:03:da:48:40:2a:c9:fe:4b:9d:11:f9:
         44:20:3d:ab:4f:a5:ea:f0:96:a3:6b:ee:5c:73:ec:02:29:29:
         ff:7c:fc:8b:33:ec:fe:86:82:ef:07:f4:80:67:40:d5:a0:b9:
         7e:08:99:08:69:2e:09:e9:42:ea:28:c3:bc:d5:e9:e5:75:d6:
         a0:a3:dc:77:b6:62:f3:c3:b1:41:d8:67:e8:36:54:75:e8:7a:
         0d:47:e6:ee:0a:56:2a:25:d2:28:7e:89:cd:36:4f:79:17:fb:
         aa:53:37:9d:59:ad:11:69:1b:42:28:00:9f:13:6b:fb:64:ef:
         5b:1b:11:fb:c9:c5:b7:92:c1:65:49:5a:ee:24:53:a6:8c:7c:
         15:d4:b0:62:ce:69:67:c5:c0:7a:78:fe:33:a2:9a:6d:0a:e4:
         32:ff:b2:d7:02:94:95:15:9d:00:12:f5:43:a1:05:aa:1d:97:
         8b:4b:ea:3e:d1:9e:79:38:a1:cb:03:da:d2:7f:c7:18:aa:f3:
         7a:a2:41:08:ec:08:a5:f4:4d:b7:39:da:f2:85:52:e6:e2:89:
         6d:f6:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:21 2025 by rpki-client