Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          uU9ha4Bm+CtDoualvTHxvaMxdFK2DXRrhaloXvnWAzM=
Subject key identifier:   51:63:2B:92:E7:F8:47:CB:90:7C:B6:9A:5B:EF:CA:4D:84:C7:B5:C1
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       019A4F61EA5E838950D26E88F52370F8C85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          1718
Signing time:             Tue 04 Nov 2025 15:00:08 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:08 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:08 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (hash: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: qGXxzjjJZQCme7wUTN3noA0CCYlJ317icEqOlxuGeRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:61:ea:5e:83:89:50:d2:6e:88:f5:23:70:f8:c8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Nov  4 15:00:08 2025 GMT
            Not After : Nov  5 15:00:08 2025 GMT
        Subject: CN=51632b92e7f847cb907cb69a5befca4d84c7b5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:3f:c5:a8:1f:a3:a6:8b:e4:99:56:f6:83:
                    ee:08:9e:e8:5b:d8:4a:be:21:0e:62:b3:66:f8:fb:
                    bd:4e:95:9a:a8:55:57:d9:23:8e:bf:9b:a2:a5:da:
                    7c:3e:84:a0:64:33:2b:79:88:bd:89:3f:bf:59:74:
                    a4:d9:55:8f:3b:23:e7:9c:8b:d0:ef:4a:96:70:d4:
                    89:11:ce:9c:88:72:16:72:95:27:84:ba:ab:19:3d:
                    ee:d9:c7:c7:aa:39:a1:23:f8:ed:22:9b:63:c0:4b:
                    9e:5a:4f:63:f5:a8:4b:a2:31:dd:a0:4f:19:b3:f1:
                    c2:c9:5e:ac:36:32:77:cb:08:86:c4:9e:ad:47:03:
                    30:07:4a:78:ae:b6:2d:56:b7:99:7a:bf:25:17:bf:
                    e7:00:c5:7d:79:03:41:75:bb:43:df:7a:7c:2a:d6:
                    1e:f1:4b:f1:6e:24:ff:dd:ff:ab:4c:fc:07:1c:45:
                    98:59:1e:c3:f5:14:e7:6d:79:a6:44:fb:f8:a7:5e:
                    19:24:47:b4:60:2e:d7:51:e2:92:85:fd:e6:09:ea:
                    8b:fe:c3:d8:c7:09:07:59:c6:47:20:64:20:dd:0a:
                    6c:91:7f:24:6e:80:69:e1:41:bd:13:be:7d:76:c3:
                    57:bc:24:58:14:a0:d8:0d:17:0e:ef:1c:d5:0b:be:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:63:2B:92:E7:F8:47:CB:90:7C:B6:9A:5B:EF:CA:4D:84:C7:B5:C1
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:a1:a7:1d:97:a2:98:21:2e:30:de:d5:99:bf:dd:90:2a:
         ae:9b:61:54:12:57:0e:f0:1e:ae:f8:54:cb:40:6f:6d:6c:6b:
         cc:b9:2d:a9:4b:ce:d9:63:ed:fa:8b:06:e5:86:9d:25:36:1d:
         a7:50:39:71:3c:b7:f0:d1:8c:4b:22:3e:e3:f8:5f:47:46:2a:
         13:ae:ce:bf:80:1a:61:c0:16:7e:1f:ed:21:f7:88:57:1e:57:
         91:4c:e4:f1:b6:38:43:35:62:b9:5b:7d:aa:c9:99:5e:8c:b9:
         40:3d:a4:eb:5b:50:03:82:ed:89:d3:4f:3c:71:2a:f7:03:8c:
         ec:cb:9b:f0:7b:6d:cb:6e:2a:21:ed:87:af:d1:dd:2e:57:4c:
         e8:b1:45:e6:3b:56:ce:49:f2:cb:df:af:84:d4:3a:83:3b:2f:
         c8:0f:43:82:3d:85:2a:0b:3e:ba:f8:b4:2b:11:80:93:44:3c:
         46:8e:3d:35:62:f5:c7:d5:f4:c0:bb:da:1f:eb:4e:fd:47:b9:
         b1:22:b4:9b:2c:e3:b7:fb:4a:8d:6d:9b:29:4f:06:2a:d5:32:
         a2:15:9e:0e:36:40:ff:57:a6:84:98:c5:2b:28:8e:b0:c7:4e:
         01:c1:88:3a:9d:4a:25:6d:08:c2:82:b0:4b:7b:b4:13:2f:b9:
         49:b2:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:48 2025 by rpki-client