Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
File:                     WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft (raw, json)
Hash identifier:          0225PJkAJdw/1NVKWKzQvf89iwTUKaRmWGzF84QOrd8=
Subject key identifier:   18:B5:D4:F4:58:C1:0C:CB:25:6F:F9:A2:3E:63:40:53:75:63:08:53
Authority key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
Certificate issuer:       /CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Certificate serial:       01988FC6C54F9F7F6967279ABE10CD8A9105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
Manifest number:          1627
Signing time:             Sat 09 Aug 2025 17:00:25 +0000
Manifest this update:     Sat 09 Aug 2025 17:00:25 +0000
Manifest next update:     Sun 10 Aug 2025 17:00:25 +0000
Files and hashes:         1: A1IHvzr80p19NJwiJMcDQphdaaM.roa (hash: 8TEFqh69arr6lwHcUIob0787g8rOpyOuebdTkdVTUag=)
                          2: WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl (hash: t5iYx5UNn1kF35z+ii9iH93/auyivYlzde2fcKhiyOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c6:c5:4f:9f:7f:69:67:27:9a:be:10:cd:8a:91:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
        Validity
            Not Before: Aug  9 17:00:25 2025 GMT
            Not After : Aug 10 17:00:25 2025 GMT
        Subject: CN=18b5d4f458c10ccb256ff9a23e63405375630853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a6:c9:3a:e6:35:e4:a0:b2:33:32:cd:a1:10:
                    84:e8:14:ed:cb:2c:0f:4f:28:15:55:b8:a9:fc:df:
                    a7:da:6c:69:c6:ae:f0:1e:89:1f:8b:dd:d3:a4:94:
                    57:ba:f4:38:f4:fd:ab:fa:85:cd:9c:c1:fa:a1:a2:
                    be:fc:ca:01:51:1e:f3:24:0c:5f:7a:9d:10:3b:0c:
                    23:c8:a2:93:62:4e:2e:9a:4a:5d:a4:9b:37:59:34:
                    1e:6f:b0:0d:25:e4:9b:e5:69:fb:0b:b6:f7:e3:04:
                    f6:94:24:86:ec:5a:7d:27:0b:49:a6:6e:f9:a3:0c:
                    b9:14:66:82:ab:2f:e4:44:9a:04:1c:46:4d:0b:58:
                    49:43:17:2c:dd:e5:2a:cd:86:02:55:fd:a5:97:0e:
                    75:49:60:2c:ff:66:2f:64:10:98:5f:a9:02:16:de:
                    30:94:8d:8e:b5:b0:2e:be:81:8d:bb:11:52:49:5e:
                    47:be:ab:4a:bb:79:f0:d0:0f:c7:ab:02:ee:13:df:
                    cc:17:83:e3:e3:c1:ad:60:bd:d3:c4:d4:d8:14:3b:
                    b6:19:ca:87:e0:5a:b5:30:2e:11:1b:ac:7e:31:9e:
                    41:8d:74:1c:d3:12:db:0c:42:09:f7:5d:49:3b:7d:
                    cb:5c:69:95:30:95:6f:c0:16:f9:af:76:3c:94:1c:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B5:D4:F4:58:C1:0C:CB:25:6F:F9:A2:3E:63:40:53:75:63:08:53
            X509v3 Authority Key Identifier:
                keyid:59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:9d:90:17:cb:87:c0:e0:33:f7:cb:d5:51:1b:33:c2:70:56:
         4b:d1:18:0e:ba:25:f8:e9:c1:f6:07:8c:4b:a5:e2:70:6f:e2:
         b4:4c:fe:e2:f2:fa:b7:c4:14:c9:21:ba:5a:a1:06:a5:bc:89:
         59:e4:b3:81:9b:4a:ed:a3:d1:fd:b2:00:f5:6c:93:34:24:0a:
         11:f6:be:4c:50:aa:14:2f:77:bf:8f:fc:4d:a7:e7:f7:c9:c4:
         1d:ba:9c:4a:48:86:47:ac:b0:6e:ee:a6:da:8c:76:4b:97:21:
         b1:8c:53:43:4c:90:55:db:02:26:81:8b:9a:64:1c:02:ec:e9:
         25:3b:20:4f:88:b8:3f:02:7e:40:25:2c:b3:67:90:fa:e8:ea:
         78:d6:9d:90:d3:c9:bd:42:43:fb:cd:ba:47:6d:84:9d:d2:3b:
         1d:5e:b9:7d:85:1c:20:32:d1:3d:af:37:9e:4b:1e:dd:58:ff:
         c4:8c:fc:08:f8:da:6a:1b:0d:6f:92:0f:1d:78:aa:8f:97:8f:
         42:8f:21:5b:2f:1c:9f:d3:8d:53:8c:09:6e:2a:6c:03:e3:89:
         7c:90:ac:d1:d9:38:dd:f9:72:7e:4b:81:96:5c:f7:76:27:6d:
         7f:92:f6:95:ac:e5:b0:09:67:63:b3:c5:64:62:37:aa:06:ce:
         29:6c:ed:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:05 2025 by rpki-client