Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          NPXI2ajMNDyKw/eEqPPT7hOBSbNcp4FyUH9ydu5pELc=
Subject key identifier:   97:71:A5:CC:13:C3:68:39:A0:5F:45:C8:23:16:95:49:01:24:50:1A
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       01988FC79E692736C75036B7DF06F06B4C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          0185
Signing time:             Sat 09 Aug 2025 17:01:20 +0000
Manifest this update:     Sat 09 Aug 2025 17:01:20 +0000
Manifest next update:     Sun 10 Aug 2025 17:01:20 +0000
Files and hashes:         1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: NmQS5Nsxhv+GGDUvsUiT0z5WlDbbc/wytFj3MG981wo=)
                          2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:9e:69:27:36:c7:50:36:b7:df:06:f0:6b:4c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Aug  9 17:01:20 2025 GMT
            Not After : Aug 10 17:01:20 2025 GMT
        Subject: CN=9771a5cc13c36839a05f45c8231695490124501a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:fb:72:4b:3a:31:0a:78:9d:cb:77:5b:8b:
                    0a:7c:66:b6:ef:45:fd:25:37:a5:cb:59:68:1f:60:
                    55:d4:95:24:f6:00:3d:9e:15:7c:04:b4:76:c2:68:
                    15:43:6a:9d:7c:cb:04:a0:00:65:5b:6b:f9:16:6a:
                    70:2e:c8:77:d1:c2:c3:aa:00:eb:c4:63:65:d6:77:
                    34:4c:a1:5f:53:b8:2e:ae:e3:93:9d:2f:9e:30:bc:
                    0f:7b:3b:d2:1d:97:43:c1:45:f4:35:fa:49:0b:6c:
                    69:07:ef:dd:1a:f2:61:5d:8a:76:24:5c:ff:91:f6:
                    6f:0b:f6:d8:4b:93:54:71:1d:c0:2e:47:75:d3:12:
                    5a:df:a2:6d:fa:68:19:d4:46:8d:d0:22:b3:34:8d:
                    aa:f7:9e:5e:4e:c2:3a:63:6c:e9:25:3b:90:77:d4:
                    94:ec:1a:87:58:ba:bc:61:aa:86:b8:e3:dc:5f:56:
                    b1:b9:9d:ac:de:3f:40:0c:ca:55:5c:bb:42:d9:d8:
                    55:52:44:de:4a:a9:ad:6a:81:81:b2:8b:e9:17:bf:
                    86:44:02:66:86:7d:cd:d0:1c:c1:5d:c1:d2:cb:2d:
                    78:f0:88:15:8c:c5:db:db:9b:be:e2:49:8f:a2:20:
                    06:5f:27:20:05:4a:c0:eb:62:1a:58:03:35:96:e4:
                    ec:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:71:A5:CC:13:C3:68:39:A0:5F:45:C8:23:16:95:49:01:24:50:1A
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:37:d9:63:97:89:61:fe:39:8c:c3:c5:69:0d:cf:7c:c8:d6:
         5f:17:ee:d3:8c:a8:cd:a5:37:56:28:fa:22:30:45:dd:94:5e:
         94:cc:47:fd:97:35:13:93:3a:49:bc:b3:ab:e7:9d:53:a3:f5:
         8e:e2:11:e4:3a:3d:e2:8f:c6:81:a2:41:29:ed:34:23:f9:bb:
         c8:c6:7a:9d:31:95:93:a7:e0:34:dc:53:c8:06:9b:47:10:38:
         22:c0:fb:95:14:d8:23:ba:dc:a2:51:55:50:8a:44:83:cf:aa:
         ff:7e:95:72:03:dd:71:a1:81:80:bc:32:a9:96:db:1d:86:ac:
         09:06:ff:b0:f5:f2:a1:fa:40:3a:e1:7c:f0:2b:dc:fe:b4:f7:
         b9:0c:e6:3b:91:55:f2:ba:37:d7:f8:9c:08:41:62:13:4c:4c:
         e5:cf:6a:4d:3e:59:ab:a9:d3:4b:a9:0c:6d:c9:d7:6a:11:e1:
         98:01:c0:77:d5:e8:14:48:3e:61:59:1c:29:c3:cd:bc:2e:1a:
         e3:71:e5:5e:13:b3:61:cc:69:81:45:a5:1c:da:23:94:31:d6:
         a5:d2:e4:03:f5:c3:06:43:ce:a5:5a:dd:35:cc:3f:ac:3d:0a:
         65:53:4e:66:d3:84:4c:cd:1b:cd:3e:53:39:74:a8:79:24:56:
         53:07:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:32:37 2025 by rpki-client