Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
File:                     WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json)
Hash identifier:          g9Gagf27n008Fn4Gey+hjoflOaXpMozHMo+Y8rsTiDQ=
Subject key identifier:   93:5A:D0:A0:2E:59:23:DA:3D:DB:8B:E3:2D:18:1F:C2:88:E3:37:B5
Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0
Certificate issuer:       /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
Certificate serial:       01988A6A20376BC87ADF1DA0DD2A68B48463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
Manifest number:          0D57
Signing time:             Fri 08 Aug 2025 16:01:07 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:07 +0000
Manifest next update:     Sat 09 Aug 2025 16:01:07 +0000
Files and hashes:         1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: UisjUpxkb3fUrAa4lRTnm4fh/mKCbB4zMP/FaNd+SJ8=)
                          2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:6a:20:37:6b:c8:7a:df:1d:a0:dd:2a:68:b4:84:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0
        Validity
            Not Before: Aug  8 16:01:07 2025 GMT
            Not After : Aug  9 16:01:07 2025 GMT
        Subject: CN=935ad0a02e5923da3ddb8be32d181fc288e337b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:25:80:de:5b:bc:48:24:be:1c:6c:09:b3:b9:
                    5e:11:b1:3b:93:5d:5c:6e:7d:d6:84:1f:80:a9:01:
                    e5:7c:00:13:5e:94:25:c8:79:bf:16:95:2e:7d:e7:
                    43:2f:b6:6a:7a:4a:be:54:8b:aa:75:fc:5a:b6:b1:
                    a6:4e:0b:48:af:78:dc:b6:cd:8e:19:0a:50:77:59:
                    a6:77:af:c8:be:dd:89:96:76:84:d0:1a:a0:d1:4e:
                    2d:9e:3a:c8:9e:42:57:5b:14:cb:e4:1e:57:df:41:
                    a1:05:b5:14:ce:dc:14:5c:cb:7a:73:c5:fb:c5:d2:
                    15:4d:cc:db:c2:67:d6:23:0a:d7:89:b7:17:28:d9:
                    4d:6b:e3:5b:b1:d3:97:a0:ba:5c:7e:1d:bd:06:4c:
                    f6:1f:9d:f8:04:c4:de:4e:e0:ca:92:a9:2b:9d:bb:
                    ea:ad:c5:86:01:a8:f6:85:77:f5:da:ae:ba:1e:09:
                    c9:8e:52:e9:0c:2a:3e:e8:c3:2e:ac:2f:62:9c:62:
                    4f:a1:4b:ec:53:a2:87:1d:0f:d8:92:ce:c4:3d:2d:
                    4c:c3:79:cb:d3:22:7d:99:a1:1c:6d:92:b9:47:9f:
                    cb:a9:c0:43:01:4f:b3:a5:85:56:d7:67:0d:f6:0c:
                    2d:38:f4:be:3c:b0:08:59:d4:1f:c6:e2:8d:08:29:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5A:D0:A0:2E:59:23:DA:3D:DB:8B:E3:2D:18:1F:C2:88:E3:37:B5
            X509v3 Authority Key Identifier:
                keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:58:1e:eb:b7:e6:60:e2:7d:e5:b2:e4:5a:f3:ee:15:0c:
         a3:ea:38:21:4b:f0:58:6a:6d:2d:61:e6:47:f4:2d:13:96:0a:
         b1:98:04:4f:92:b3:07:b4:17:29:42:e7:3a:f6:af:1b:4e:0c:
         80:79:f1:b8:ff:75:dc:47:8f:80:db:9f:9c:ad:cd:e2:33:f5:
         9c:0b:8b:15:d4:9f:00:f5:09:07:ea:7f:7b:e2:5d:8b:6d:c0:
         1e:a3:e7:29:06:87:39:85:7d:ab:1b:2a:fd:3c:c6:1c:29:4c:
         78:c2:b0:96:b9:b2:77:fa:f7:a1:5d:f1:95:d9:19:98:24:ef:
         5f:aa:21:2a:4f:df:83:02:3a:4b:a4:e0:29:08:30:61:14:6e:
         d9:c6:e1:c3:ae:82:c2:ca:7b:a5:a5:60:79:f2:ec:46:07:91:
         81:1c:a2:75:35:09:07:a2:e2:a0:aa:c8:f3:21:a5:cb:77:2e:
         c0:a1:b6:bf:10:d6:95:f5:77:ab:bd:69:ea:47:75:94:0a:35:
         5f:3a:7a:2a:30:f3:b5:a4:fb:11:23:c9:22:78:9a:d1:7e:e6:
         df:85:8f:97:c2:72:e2:34:06:28:9d:b4:95:62:db:fb:87:f9:
         c5:e4:b8:9e:18:c9:e8:54:4d:4a:8f:ec:88:6b:6d:d7:1f:f8:
         a0:20:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:00 2025 by rpki-client