Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
File:                     WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json)
Hash identifier:          dvfY5f8wj8HpCNW+3S82XU1tADp/F8OB2OCTtbGf5VE=
Subject key identifier:   83:CB:C0:44:5F:C9:20:6F:54:2A:F2:33:65:3E:26:E0:0C:C8:4B:A3
Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6
Certificate issuer:       /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
Certificate serial:       01988D346D371FD875239F65F556E4FA1A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
Manifest number:          0D8B
Signing time:             Sat 09 Aug 2025 05:01:19 +0000
Manifest this update:     Sat 09 Aug 2025 05:01:19 +0000
Manifest next update:     Sun 10 Aug 2025 05:01:19 +0000
Files and hashes:         1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: sQ8UhbLfegiorGwl4pmB0GDGzOZpF1f9+qAyNxWG/TI=)
                          2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:34:6d:37:1f:d8:75:23:9f:65:f5:56:e4:fa:1a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6
        Validity
            Not Before: Aug  9 05:01:19 2025 GMT
            Not After : Aug 10 05:01:19 2025 GMT
        Subject: CN=83cbc0445fc9206f542af233653e26e00cc84ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:5d:97:52:1c:d5:cc:17:06:47:78:1f:f4:
                    a8:22:f0:a6:48:ab:d1:cc:3e:49:23:61:22:f9:a4:
                    55:bf:83:34:a7:48:0b:4a:34:14:75:cd:a4:7d:7a:
                    4d:3d:62:ed:49:60:2c:61:e5:b0:94:db:0d:d2:0e:
                    35:d1:3e:da:90:f5:5d:e1:99:b2:8d:2d:70:50:0a:
                    21:49:ae:20:a9:3c:bc:f6:7b:a7:ec:db:6b:f7:64:
                    08:fe:5d:f3:0d:94:15:15:63:f8:79:fa:b5:77:8d:
                    b9:30:d1:62:b5:a0:3c:44:89:b7:d4:19:51:71:5f:
                    9f:e9:df:35:b3:82:73:13:17:b1:0d:26:b1:d4:90:
                    08:4e:dd:b6:20:0c:52:f1:7e:9b:f2:6d:ce:90:2a:
                    a8:90:f8:85:86:b1:af:ab:a8:8b:b7:76:7e:ca:46:
                    f8:35:70:6b:95:4d:89:56:10:df:a4:2e:16:eb:1e:
                    b2:e8:ce:65:9f:7a:d6:e4:33:b8:51:32:fd:02:b2:
                    08:4a:44:4e:99:74:7b:70:84:a9:57:53:49:6f:3c:
                    54:90:67:a1:b4:ef:69:c8:bd:7d:77:5e:3d:92:5a:
                    05:56:1e:3a:dd:de:59:73:5f:7f:13:61:07:36:ae:
                    22:f9:24:3c:81:82:77:ac:27:4d:92:58:66:f7:34:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CB:C0:44:5F:C9:20:6F:54:2A:F2:33:65:3E:26:E0:0C:C8:4B:A3
            X509v3 Authority Key Identifier:
                keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:5e:f7:a8:68:0b:cc:ec:05:9c:6f:dc:cd:aa:51:01:cb:9b:
         76:cf:ae:e6:ca:cf:65:60:9c:56:10:74:34:7a:cb:a8:92:14:
         72:20:99:d1:06:a5:88:a2:d5:49:cb:40:99:a7:7c:df:27:eb:
         24:2a:76:db:1c:b5:40:fa:8a:43:f3:8d:5a:78:25:5f:ac:91:
         40:59:ea:78:95:a6:93:08:72:98:c7:52:bf:74:d3:f0:fc:3b:
         9f:42:e7:4c:30:87:e9:2f:30:04:e1:68:b4:08:41:17:82:0a:
         6a:d0:9a:f8:b8:9a:38:77:49:a6:ea:87:62:3e:7b:09:c3:cf:
         05:d2:36:ed:b6:ec:1d:c8:41:72:49:83:4a:83:87:f6:5b:5a:
         df:fe:38:43:99:63:5b:09:24:a3:e7:2d:ed:b0:07:cf:93:51:
         dd:6a:ff:f6:2e:51:bd:a4:01:31:4e:09:6d:4d:bd:15:0b:ab:
         97:a2:4e:87:9f:47:cd:f6:2a:92:f0:50:d2:09:db:16:61:d4:
         7e:15:86:7c:d2:74:e6:1c:f0:b9:cc:fa:40:fc:f9:a2:6f:2f:
         c5:30:2d:1f:56:2f:0f:d0:00:40:b7:5d:6e:c9:a5:26:f5:d7:
         29:ba:9f:54:54:b7:0d:a9:41:c3:fe:7c:0b:90:de:4a:dc:18:
         4d:59:bf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:44 2025 by rpki-client