Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
File:                     WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft (raw, json)
Hash identifier:          P+SpRg76M1iKFwINrfBeKypCuyy0Gg9PWltXXKhZIuw=
Subject key identifier:   01:84:34:FC:50:47:B4:59:53:6C:19:0A:E7:C2:CF:01:C2:E8:8F:44
Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
Certificate issuer:       /CN=5ad9c45020072b3369c2b810fef4527244c5b741
Certificate serial:       0198936C9ABF66FC4D2C9554EB1B0A0524E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
Manifest number:          1628
Signing time:             Sun 10 Aug 2025 10:00:24 +0000
Manifest this update:     Sun 10 Aug 2025 10:00:24 +0000
Manifest next update:     Mon 11 Aug 2025 10:00:24 +0000
Files and hashes:         1: 7wPReiiZCkAbhtBTvjj1V5aksnE.roa (hash: rquPP/JOGLNyEJui2m/8V+t5G02of5Esav2aIUndmQc=)
                          2: WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl (hash: Z+NrXdSkYVNNVG5W5obBUft57z12uMXqZXZWSFa01mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:6c:9a:bf:66:fc:4d:2c:95:54:eb:1b:0a:05:24:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741
        Validity
            Not Before: Aug 10 10:00:24 2025 GMT
            Not After : Aug 11 10:00:24 2025 GMT
        Subject: CN=018434fc5047b459536c190ae7c2cf01c2e88f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:32:ca:dd:f2:34:ae:73:61:ce:8f:14:61:
                    47:bc:ce:4b:76:e4:89:1e:03:5d:5b:c2:00:d3:0e:
                    5d:45:f4:3d:26:d2:e0:f4:79:f3:28:55:41:47:ce:
                    ff:a3:4a:59:f3:88:1b:ab:df:94:d5:95:3b:60:0a:
                    df:75:a8:ac:16:a8:a4:10:05:25:5f:67:e5:b2:9f:
                    06:c4:6a:2c:76:ee:6d:a1:61:73:ce:86:a5:42:8d:
                    17:59:1e:99:f1:09:2d:6f:32:84:dc:1d:b1:e5:2d:
                    fc:4f:cb:9c:29:15:03:a5:69:2d:b7:d6:6d:1a:fa:
                    5f:46:d0:ec:4b:ff:bc:df:b7:8a:9c:9c:42:6f:fe:
                    aa:aa:86:de:56:70:5b:7c:c0:b4:b4:66:df:ba:cb:
                    cf:5f:e3:08:87:82:52:e7:04:26:87:cd:c7:7a:61:
                    63:b6:a2:2f:ea:35:08:1d:97:e3:fb:4f:c2:11:16:
                    95:e6:5f:f1:bd:71:7f:47:b7:e6:37:c4:3b:5f:d4:
                    e5:e4:79:89:f8:55:ad:a8:98:22:b1:67:95:95:df:
                    15:5b:0f:b0:54:0a:4a:c3:78:e2:21:bc:46:ac:35:
                    cd:ff:3d:bd:91:3c:e6:1c:30:ff:2c:3f:37:38:a4:
                    3a:49:82:38:34:db:52:1e:28:f4:7a:7c:4f:f8:42:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:84:34:FC:50:47:B4:59:53:6C:19:0A:E7:C2:CF:01:C2:E8:8F:44
            X509v3 Authority Key Identifier:
                keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6b:d6:ab:08:23:f7:14:0c:c2:0e:6a:64:92:f6:bf:a2:11:
         4c:83:bc:03:24:f8:6a:e8:7e:04:d8:e1:75:07:73:c5:7d:cc:
         50:5f:01:91:bf:15:11:f5:51:f0:3e:63:d7:82:dc:c8:39:95:
         71:d1:e5:60:99:b5:bc:ab:4a:14:34:91:97:dc:50:54:dc:43:
         64:00:25:49:2f:ac:f1:a0:a4:6e:bc:d3:1f:02:ed:c9:be:4d:
         3a:62:1b:fb:5a:6a:06:ef:3d:21:5b:96:16:8e:bf:01:5a:d9:
         4b:4f:f7:8f:6c:bb:b0:81:3a:9a:28:2a:7c:6d:60:99:d4:ea:
         2d:97:ca:55:e3:ba:36:06:0c:27:3a:ec:db:10:9d:ea:9b:5f:
         1a:4b:96:23:2a:4d:58:52:73:ed:5c:20:fd:dd:96:f3:12:59:
         92:5b:90:4f:cc:38:d5:4c:06:ab:d5:92:6c:53:f0:3f:1c:04:
         a1:46:ff:6a:5c:81:6b:ea:25:db:2e:6e:83:86:61:7c:e0:a5:
         48:be:73:14:72:3d:dc:60:73:58:84:d9:f6:32:1b:46:05:87:
         4e:82:8c:b0:42:5c:2a:b0:ba:22:b3:f3:3b:18:fd:53:86:62:
         38:fa:d2:18:9c:c5:38:f8:86:61:5c:d7:33:4f:cf:b9:bb:8b:
         b1:80:21:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTbJq/ZvxNLJVU6xsKBSThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDljNDUwMjAwNzJiMzM2OWMyYjgxMGZlZjQ1MjcyNDRj
NWI3NDEwHhcNMjUwODEwMTAwMDI0WhcNMjUwODExMTAwMDI0WjAzMTEwLwYDVQQD
EygwMTg0MzRmYzUwNDdiNDU5NTM2YzE5MGFlN2MyY2YwMWMyZTg4ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCwyyt3yNK5zYc6PFGFHvM5LduSJ
HgNdW8IA0w5dRfQ9JtLg9HnzKFVBR87/o0pZ84gbq9+U1ZU7YArfdaisFqikEAUl
X2flsp8GxGosdu5toWFzzoalQo0XWR6Z8QktbzKE3B2x5S38T8ucKRUDpWktt9Zt
GvpfRtDsS/+837eKnJxCb/6qqobeVnBbfMC0tGbfusvPX+MIh4JS5wQmh83HemFj
tqIv6jUIHZfj+0/CERaV5l/xvXF/R7fmN8Q7X9Tl5HmJ+FWtqJgisWeVld8VWw+w
VApKw3jiIbxGrDXN/z29kTzmHDD/LD83OKQ6SYI4NNtSHij0enxP+EI3jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGENPxQR7RZU2wZCufCzwHC6I9EMB8GA1UdIwQY
MBaAFFrZxFAgByszacK4EP70UnJExbdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RuRVVDQUhLek5wd3JnUV92UlNja1RGdDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jZjM2NDEtNWMzMC00ZGVhLWIwMDQt
YzhlN2ZkODA5ZjkwLzEvV3RuRVVDQUhLek5wd3JnUV92UlNja1RGdDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jZjM2NDEtNWMzMC00ZGVhLWIwMDQtYzhlN2ZkODA5Zjkw
LzEvV3RuRVVDQUhLek5wd3JnUV92UlNja1RGdDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmvWqwgj
9xQMwg5qZJL2v6IRTIO8AyT4auh+BNjhdQdzxX3MUF8Bkb8VEfVR8D5j14LcyDmV
cdHlYJm1vKtKFDSRl9xQVNxDZAAlSS+s8aCkbrzTHwLtyb5NOmIb+1pqBu89IVuW
Fo6/AVrZS0/3j2y7sIE6migqfG1gmdTqLZfKVeO6NgYMJzrs2xCd6ptfGkuWIypN
WFJz7Vwg/d2W8xJZkluQT8w41UwGq9WSbFPwPxwEoUb/alyBa+ol2y5ug4ZhfOCl
SL5zFHI93GBzWITZ9jIbRgWHToKMsEJcKrC6IrPzOxj9U4ZiOPrSGJzFOPiGYVzX
M0/PubuLsYAh5Q==
-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:22 2025 by rpki-client