Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File:                     WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier:          +NF/8cc8tNtq1oPkigNrk7TTOoB4oYbFswxJ1uGnPms=
Subject key identifier:   A5:32:60:20:7E:3F:AF:86:3E:9D:CB:1E:3A:80:E7:5E:DD:3C:21:96
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer:       /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial:       01987486BCE59CE9CE44E75DA9F64258CD4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number:          0539
Signing time:             Mon 04 Aug 2025 10:00:43 +0000
Manifest this update:     Mon 04 Aug 2025 10:00:43 +0000
Manifest next update:     Tue 05 Aug 2025 10:00:43 +0000
Files and hashes:         1: 0se6oPOZ9FSI_6qzearxcjxlYSY.roa (hash: g6cZT2b3ImLhGYVmMKzVx9c34caYKC+s1u35aPIl42k=)
                          2: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: t9Cl6KRdf325wfLyEIFohCwK9jFV3DLRfU2iHE8XsKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:86:bc:e5:9c:e9:ce:44:e7:5d:a9:f6:42:58:cd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
        Validity
            Not Before: Aug  4 10:00:43 2025 GMT
            Not After : Aug  5 10:00:43 2025 GMT
        Subject: CN=a53260207e3faf863e9dcb1e3a80e75edd3c2196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:88:53:66:0a:1d:18:54:ce:92:7e:87:ea:
                    c6:bc:e4:fd:78:01:84:81:4b:da:e4:5c:3f:91:52:
                    79:08:0f:34:ee:f1:7e:fb:59:c3:dd:1b:8a:0a:c4:
                    0e:37:d0:70:e5:cd:1f:a2:54:f0:ce:10:92:6c:f4:
                    1e:f5:77:93:5e:e6:e5:33:11:6c:14:29:9a:17:87:
                    ff:4b:40:2e:5e:cc:f2:70:a3:d9:15:69:5d:4b:95:
                    7b:8f:f4:56:60:2a:7b:dd:5f:0f:57:46:2f:11:10:
                    5d:e5:f1:99:e5:0b:99:a6:47:23:5f:24:ec:44:c0:
                    cc:ef:7d:9c:68:3c:3c:35:97:e1:09:4f:2c:d8:a5:
                    83:d9:f4:e9:7d:a8:76:db:75:1f:9f:ab:c7:45:af:
                    1d:21:15:9d:24:52:f3:e3:d1:56:a7:24:d9:60:cb:
                    98:91:cb:ab:ab:26:a4:23:e1:b5:61:61:5a:43:5b:
                    93:da:37:6c:c8:89:3d:93:99:db:c7:06:29:0c:70:
                    a9:0c:20:54:91:39:6e:90:94:6a:8f:65:ff:8f:a3:
                    43:03:64:95:58:9a:51:85:08:62:46:9b:bc:8c:e2:
                    3f:35:a0:19:dd:76:0f:a9:1d:21:4d:73:54:4c:45:
                    96:4c:b7:11:39:01:87:32:85:d1:f6:94:b8:3f:08:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:32:60:20:7E:3F:AF:86:3E:9D:CB:1E:3A:80:E7:5E:DD:3C:21:96
            X509v3 Authority Key Identifier:
                keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3f:b9:08:06:97:7b:61:05:b0:89:ed:3a:04:77:c6:13:b9:
         a8:92:9d:2a:9b:d0:44:e5:00:3b:8d:18:3b:ea:05:7e:3f:88:
         4f:a9:83:85:e3:41:6c:d7:a0:22:bc:b7:74:b6:d4:73:46:a4:
         c8:71:18:1c:03:4e:ac:39:f1:f1:b5:ff:9a:a3:47:f1:9f:3a:
         7a:32:ce:91:8d:d3:5d:17:e7:a4:1f:43:31:cc:d1:1a:ff:61:
         06:76:5b:a5:36:8d:7a:47:8e:93:d6:e3:78:c2:c1:55:94:d1:
         c5:97:3f:43:5e:6a:34:fa:d0:a6:7d:cd:e2:a4:11:f4:23:ef:
         9d:ae:cb:3f:27:fc:be:b4:a4:b2:7f:50:5f:49:b0:ed:18:4d:
         21:51:27:d3:fa:f5:13:18:e0:fc:10:2c:35:b3:b3:e1:73:6b:
         a3:9d:66:fe:4f:6a:38:2b:dc:48:f0:fd:eb:ab:1d:77:79:54:
         17:de:88:58:eb:b2:75:eb:0d:07:fd:77:14:94:1b:11:75:3e:
         b5:09:b9:70:eb:e1:fb:9a:16:57:57:55:6e:f0:5f:1d:12:94:
         cb:35:50:cd:0d:68:7d:97:a6:db:d2:1e:0d:cc:75:c7:a0:19:
         41:19:45:9a:2c:37:86:a8:8d:7f:b2:7a:87:be:52:0f:77:16:
         8f:f9:e0:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hrzlnOnOROddqfZCWM1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YmM1MmIxNTA2OWMxYzQ3YjU0ZTk3YjlmNTY5NGI3NTVi
NWNlYjEwHhcNMjUwODA0MTAwMDQzWhcNMjUwODA1MTAwMDQzWjAzMTEwLwYDVQQD
EyhhNTMyNjAyMDdlM2ZhZjg2M2U5ZGNiMWUzYTgwZTc1ZWRkM2MyMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppeIU2YKHRhUzpJ+h+rGvOT9eAGE
gUva5Fw/kVJ5CA807vF++1nD3RuKCsQON9Bw5c0folTwzhCSbPQe9XeTXublMxFs
FCmaF4f/S0AuXszycKPZFWldS5V7j/RWYCp73V8PV0YvERBd5fGZ5QuZpkcjXyTs
RMDM732caDw8NZfhCU8s2KWD2fTpfah223Ufn6vHRa8dIRWdJFLz49FWpyTZYMuY
kcurqyakI+G1YWFaQ1uT2jdsyIk9k5nbxwYpDHCpDCBUkTlukJRqj2X/j6NDA2SV
WJpRhQhiRpu8jOI/NaAZ3XYPqR0hTXNUTEWWTLcROQGHMoXR9pS4PwhxtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUyYCB+P6+GPp3LHjqA517dPCGWMB8GA1UdIwQY
MBaAFFm8UrFQacHEe1Tpe59WlLdVtc6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEt
MmMxMGIxOWQ0YzJhLzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEtMmMxMGIxOWQ0YzJh
LzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqD+5CAaX
e2EFsIntOgR3xhO5qJKdKpvQROUAO40YO+oFfj+IT6mDheNBbNegIry3dLbUc0ak
yHEYHANOrDnx8bX/mqNH8Z86ejLOkY3TXRfnpB9DMczRGv9hBnZbpTaNekeOk9bj
eMLBVZTRxZc/Q15qNPrQpn3N4qQR9CPvna7LPyf8vrSksn9QX0mw7RhNIVEn0/r1
Exjg/BAsNbOz4XNro51m/k9qOCvcSPD966sdd3lUF96IWOuydesNB/13FJQbEXU+
tQm5cOvh+5oWV1dVbvBfHRKUyzVQzQ1ofZem29IeDcx1x6AZQRlFmiw3hqiNf7J6
h75SD3cWj/ngcA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:25 2025 by rpki-client