Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File:                     WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier:          KcumA8SApRfmTzzRYrNIEC91yTDvvIuS9hUKreExIUk=
Subject key identifier:   F1:81:29:2A:A3:E5:FE:5D:55:B7:90:4C:90:7D:78:CE:82:A1:60:91
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer:       /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial:       01988054F9AF2F03A9786ACA72C50864DAFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number:          08EE
Signing time:             Wed 06 Aug 2025 17:01:49 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:49 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:49 +0000
Files and hashes:         1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: UiqHavUTHDajx+iChHiwOld6V0wMoPCmSSUiSyGhwU4=)
                          2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:f9:af:2f:03:a9:78:6a:ca:72:c5:08:64:da:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
        Validity
            Not Before: Aug  6 17:01:49 2025 GMT
            Not After : Aug  7 17:01:49 2025 GMT
        Subject: CN=f181292aa3e5fe5d55b7904c907d78ce82a16091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:e1:1f:31:88:0e:7d:c5:e6:3d:08:39:11:
                    43:03:a4:34:31:30:0e:a3:89:8e:97:6d:a9:cb:ca:
                    45:67:ba:78:30:e7:ab:e3:3a:27:0f:22:a7:58:a3:
                    42:00:4f:da:05:5e:92:e0:16:0c:f0:52:69:2f:1b:
                    88:cf:50:71:07:d5:99:a0:bf:f0:1a:2c:5b:2a:5d:
                    af:e4:8e:f5:79:6b:94:c6:41:d6:e1:1e:f7:7f:24:
                    95:76:18:2f:c7:4c:8f:39:49:b0:9c:b7:2b:b7:05:
                    f1:6a:c9:d8:f2:68:31:b5:49:ac:72:e9:92:62:80:
                    5c:e8:5a:a6:a6:67:ef:38:d8:1d:2b:d6:d6:81:4f:
                    76:2d:7a:b6:f1:24:60:3b:8d:92:04:9a:94:dd:48:
                    77:13:ac:7b:43:40:1d:a0:56:03:b0:d9:e5:01:ca:
                    48:bd:e3:ce:63:bb:87:79:61:fe:a6:2d:3c:50:ac:
                    09:2d:09:06:d5:21:33:ae:31:49:46:bb:eb:a8:1f:
                    03:55:37:51:5e:b2:56:db:88:b5:71:26:3c:2a:9f:
                    89:ec:70:a9:cc:20:23:50:17:3d:e4:3a:c7:1c:20:
                    67:87:86:ef:0f:92:bd:a6:b7:73:ec:7c:3d:dc:07:
                    51:b1:57:a4:b7:50:89:e1:f7:e8:3a:55:da:d6:9d:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:81:29:2A:A3:E5:FE:5D:55:B7:90:4C:90:7D:78:CE:82:A1:60:91
            X509v3 Authority Key Identifier:
                keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:37:38:c9:60:2e:10:9a:4b:85:93:c6:db:e4:01:42:83:
         5b:25:33:06:cf:d3:dd:25:af:5b:33:8b:8e:6c:ad:4f:00:03:
         9d:2c:c9:f0:bc:d4:66:b7:d7:30:4b:10:91:ff:d9:16:57:04:
         a1:eb:9a:f1:82:ba:c1:7c:30:76:3e:86:1c:20:48:e2:5e:88:
         42:a6:71:5e:58:c4:00:74:86:ce:9d:29:dc:c4:2f:05:29:db:
         60:bf:93:91:c6:fb:43:fb:18:9b:62:af:c4:cc:6f:56:95:6f:
         73:74:f7:a3:f5:f6:0e:45:a6:1c:1f:c9:04:d2:4a:7e:3f:4b:
         1f:66:4e:31:ea:cb:23:ff:1f:f8:c1:aa:c5:11:25:d2:9b:5f:
         ae:c2:a0:82:7e:00:b2:53:27:fd:5b:48:4b:1c:bc:84:1a:b7:
         5a:ad:80:cb:6a:58:22:af:c1:e3:37:33:18:e8:9c:13:35:6f:
         bb:b6:e3:5d:2a:2a:2c:7c:3e:b2:ea:52:2b:05:2b:59:5d:9c:
         58:b6:5f:d7:bd:30:50:87:45:6b:fa:a7:6f:17:14:55:65:90:
         d5:15:1f:9b:57:2d:96:3a:32:1b:ab:9c:ae:05:9a:0e:13:22:
         7e:59:74:2a:9f:07:4e:00:81:c4:b5:3c:2c:5e:54:34:c6:04:
         36:d5:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:32:19 2025 by rpki-client