Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
File:                     WBTburY-kRfQsCy6tWY55v0NQNk.mft (raw, json)
Hash identifier:          cAL7wd3vZ/JASWdUAgrGsReTT+nh+MlEHVQS5ojVax4=
Subject key identifier:   71:A8:89:3C:01:0F:72:40:A3:49:40:AA:DD:AB:91:FA:09:89:C5:48
Authority key identifier: 58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9
Certificate issuer:       /CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
Certificate serial:       019A4EF45346B9330754CE1B8D09BAE96729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
Manifest number:          1712
Signing time:             Tue 04 Nov 2025 13:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:26 +0000
Files and hashes:         1: 9aWfFrVV6kNcSEVMyjUiJGRV2Hk.roa (hash: 2ggTFeYxBPxRF6Rq6dR3nlXwESWxYB6llxCNOaUOXlk=)
                          2: WBTburY-kRfQsCy6tWY55v0NQNk.crl (hash: ENlXTOEgNyyEYbjxYMEXLkSb7mrmD3SWljzJQNc6uww=)
                          3: vCIsJFXMW5fIme07NsNA6g87pdQ.roa (hash: L57Yb+wStbiyBbdvvlmBkGgeQ91E4S6blQZLWIVdGHc=)
                          4: xu0lNnNgpgRxpTDG1h2JpwspWBg.roa (hash: CT74Gr1ktpZ4XprpILCL5l7k9j2cryovp9gU1z+Gj84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:53:46:b9:33:07:54:ce:1b:8d:09:ba:e9:67:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814dbbab63e9117d0b02cbab56639e6fd0d40d9
        Validity
            Not Before: Nov  4 13:00:26 2025 GMT
            Not After : Nov  5 13:00:26 2025 GMT
        Subject: CN=71a8893c010f7240a34940aaddab91fa0989c548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ce:e0:37:db:ca:42:86:1b:38:70:95:89:9d:
                    2d:4f:e4:23:53:f5:6f:de:7b:a0:e8:11:23:35:85:
                    54:4f:b2:fb:84:00:02:9a:fd:4d:7c:df:15:9d:67:
                    6f:87:dc:10:d4:33:c7:71:78:b6:0c:ba:27:cc:9a:
                    bf:43:cd:ec:93:ea:3e:f4:e4:d6:c2:5e:9d:ae:b2:
                    f4:64:7b:12:b7:9f:cc:36:88:ce:7b:d9:18:3a:bc:
                    ee:90:60:57:09:b3:d5:14:67:9b:ae:d3:57:82:12:
                    fa:18:8e:8d:9f:82:a8:ec:d8:bf:f0:56:6c:a5:c4:
                    f6:00:7c:0e:4e:d4:f9:0d:a4:65:dc:b6:c2:2b:3f:
                    57:fd:54:2b:ba:0a:52:30:3c:d0:ce:f7:ee:0b:a4:
                    fd:29:f5:69:23:d6:da:ab:b7:c9:a7:b0:ef:19:80:
                    e5:4f:d2:ff:55:c6:de:46:ee:43:bb:c0:23:73:50:
                    b1:28:5a:cb:16:54:fb:ea:05:38:81:6e:0e:9c:4e:
                    b6:fa:dd:df:f7:0d:f7:91:d2:f8:7f:d1:11:7b:06:
                    ae:6e:fc:2d:3d:b3:bd:0e:ff:45:52:ee:49:ab:98:
                    d2:d2:f6:9d:09:a0:be:05:48:c9:bf:18:98:aa:2a:
                    f4:1b:72:ff:15:a0:69:1e:9f:10:48:2c:b2:da:4a:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A8:89:3C:01:0F:72:40:A3:49:40:AA:DD:AB:91:FA:09:89:C5:48
            X509v3 Authority Key Identifier:
                keyid:58:14:DB:BA:B6:3E:91:17:D0:B0:2C:BA:B5:66:39:E6:FD:0D:40:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTburY-kRfQsCy6tWY55v0NQNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c22c3f-91e6-45fb-af76-68a8089701f4/1/WBTburY-kRfQsCy6tWY55v0NQNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:ee:4d:73:52:c9:c8:b5:a9:59:88:65:16:a6:cb:f6:04:
         80:0e:6a:b8:51:f1:9b:19:80:5c:da:a7:d5:d9:6f:bf:4a:68:
         a8:df:ee:ae:dc:7c:a2:7f:52:2e:c1:32:4a:73:47:96:8d:07:
         95:81:f6:cb:d5:a0:ac:a4:96:3a:4e:9e:4c:7a:2e:b2:7c:57:
         fb:07:9b:c4:02:4f:10:9a:0f:46:85:51:46:bc:d3:2b:4d:83:
         1a:b8:85:c0:8c:d8:48:48:71:28:e0:57:29:97:29:ce:69:5c:
         e4:90:be:2f:53:3c:96:32:42:50:ad:16:74:bd:f6:99:27:aa:
         d5:23:e5:46:fd:65:ee:ee:9f:dc:37:19:b5:ff:db:d5:10:1d:
         25:da:e7:6d:05:43:4e:67:49:2a:58:8b:d7:af:da:0a:af:3a:
         cc:bd:93:46:44:46:f7:80:ea:ea:9c:a7:75:59:d4:6e:13:5b:
         24:4b:30:e2:c8:8d:94:50:c4:df:a4:5b:a6:08:77:1c:ad:91:
         2d:62:62:0f:ba:cb:a6:6c:ca:60:87:6f:d7:b0:0b:57:5a:ac:
         ea:62:08:cc:71:d1:3b:4f:86:f5:b6:9d:4b:bf:f1:5d:72:30:
         e1:53:df:10:39:59:62:26:0b:b3:df:35:be:cc:76:8d:a3:13:
         bd:fe:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:34 2025 by rpki-client