Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          VwyTt50E8w5uBnmVoXO39dqJRA/bxWV272Rl4wINF+g=
Subject key identifier:   4B:B3:32:33:5A:2C:EA:12:90:DC:18:42:98:DC:7A:56:E8:F2:9B:DC
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       0198729842000AA335478FAEB0424D83D1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          04DE
Signing time:             Mon 04 Aug 2025 01:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:37 +0000
Files and hashes:         1: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: heXGp1U2p/HyCHFWHoPYnWiuJT4xHB9BvKxkXiLK3TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:42:00:0a:a3:35:47:8f:ae:b0:42:4d:83:d1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Aug  4 01:00:37 2025 GMT
            Not After : Aug  5 01:00:37 2025 GMT
        Subject: CN=4bb332335a2cea1290dc184298dc7a56e8f29bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:e9:eb:d9:7f:dc:68:40:4d:2c:52:60:ad:
                    78:e4:d7:41:42:d1:b0:aa:55:52:7a:b7:1c:f6:9a:
                    a1:5c:af:af:96:2b:87:cf:49:f9:c7:19:e5:41:72:
                    7f:d4:d3:9e:98:08:c5:5a:f2:94:58:dd:41:1e:98:
                    86:6f:44:f9:22:b1:cb:0c:c8:81:9f:5c:05:9c:3b:
                    fd:0b:64:ef:b0:31:27:39:32:d2:1a:96:b4:d4:c4:
                    2d:cc:4e:de:b9:36:df:20:33:47:7d:d2:96:9d:f2:
                    cb:9e:10:6b:de:bf:7c:03:b2:de:40:a3:24:d7:d3:
                    80:6e:e1:a7:3f:6d:63:15:63:ff:61:ec:dd:f7:bc:
                    6f:1b:53:41:e1:64:6d:a5:5a:54:7c:60:f9:0e:04:
                    42:30:dc:95:e6:05:53:d4:ba:91:f7:49:49:79:97:
                    f2:8c:b3:0d:ba:de:61:86:55:91:d6:49:bf:3c:0d:
                    3c:73:86:b1:ba:26:04:27:1a:b1:4f:01:b1:ef:9f:
                    86:62:a0:37:f1:18:28:96:0d:b7:c7:a3:70:55:0c:
                    4f:5d:26:e3:ff:66:a6:33:2b:23:0f:e5:4a:de:b4:
                    f2:8e:e1:1d:ac:75:cb:de:a5:b1:15:00:10:08:19:
                    5b:be:08:12:75:c4:f6:f0:95:d1:8e:95:fd:52:0c:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B3:32:33:5A:2C:EA:12:90:DC:18:42:98:DC:7A:56:E8:F2:9B:DC
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a6:a4:cd:ee:b9:49:2a:36:7f:1e:9b:b2:5d:42:f1:a4:6a:
         44:a2:90:cb:9d:aa:c2:37:ac:e0:c0:49:23:c2:9f:2e:d9:f4:
         4e:98:d4:92:6d:14:3f:2c:cd:d3:59:83:82:a8:42:2f:3b:3c:
         56:e7:77:4a:0e:9f:b4:30:ce:5c:53:1e:57:c6:08:2a:77:2a:
         6d:5e:c8:33:63:1c:76:67:5b:d0:b0:57:9b:9f:21:26:5c:09:
         89:0b:c2:d9:c6:65:c2:c0:13:64:61:6f:98:f5:98:43:23:39:
         2e:54:b1:fb:a8:f0:b2:d5:7a:e4:1b:b7:48:f0:66:7e:2f:7b:
         1c:dc:4b:be:a5:bf:93:fc:8e:c0:4c:c7:f6:4a:28:3d:ad:c7:
         dd:11:ff:68:96:a3:a1:e2:a1:db:30:b2:d1:c3:7b:5d:9f:6f:
         3d:7a:2d:e3:ce:3d:8b:b4:21:15:b2:49:8b:18:f8:72:28:7b:
         65:ef:07:0d:fd:00:f0:57:d4:c7:a4:c4:92:03:a7:ba:1c:66:
         c9:c4:54:fe:4e:a5:84:c1:1d:63:91:d5:d9:f1:29:e6:4b:fe:
         d7:ce:00:1a:1f:8e:db:9e:ec:56:3f:0a:f7:84:d2:b6:26:e8:
         8e:ca:ee:e5:e4:73:af:d5:45:e7:d5:71:f3:0d:bc:10:16:92:
         18:21:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:02 2025 by rpki-client