Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          n4zGrrOBUDMqQmFe6D5/S5vOV0BrmxJ8EeZmSaojsaQ=
Subject key identifier:   BD:3B:FF:68:9D:A0:14:8E:8C:28:F8:08:35:34:11:72:CB:D2:D6:CF
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       0198752C0544D812C76184E0AA83B3BF03AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          161E
Signing time:             Mon 04 Aug 2025 13:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:15 +0000
Files and hashes:         1: 21Z7HmrOxiobds8TxVCgw76jX2Q.roa (hash: Skfph10GmJAF2gm8sQyaNWU8Upk0+888zHd0gic3TYc=)
                          2: 6BYQ4By2tJL3cWm4L-BQSWyvJS0.roa (hash: 3sAvJeopcRq49xZNtMv2qbQCEldVQVML4/pl6Sm3s88=)
                          3: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: pVE48iOXnERVUM9tOQEG5krdZvfSFKcRDIZe3gsmdl8=)
                          4: k97CrjwrQPT8_y6vdIb8L8R85BY.roa (hash: +DDKSroEDnHlqdOq/UjhA3pHL4D5bJ4vsDTADTBgxwE=)
                          5: n6_io3-KaLYhuJtZiy1MeoUuNbk.roa (hash: nSbtIazJ2SXxi9u2NxxSLPcqXno/gu6gZmKKyNsxgLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:05:44:d8:12:c7:61:84:e0:aa:83:b3:bf:03:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Aug  4 13:01:15 2025 GMT
            Not After : Aug  5 13:01:15 2025 GMT
        Subject: CN=bd3bff689da0148e8c28f80835341172cbd2d6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:df:a7:ad:68:46:03:40:9c:f7:ad:9f:ac:
                    ba:d3:1d:1d:4a:2b:ee:bb:0f:ee:97:88:b5:9d:5a:
                    b5:50:3b:ea:71:f4:6b:ea:b0:9c:ef:0b:86:d2:6f:
                    6a:5c:80:4c:60:ec:46:0d:de:14:a5:64:3d:a3:b0:
                    df:e3:c8:45:c2:61:55:71:2c:e9:76:ff:c9:12:a2:
                    da:f1:a2:95:25:df:8f:69:3a:79:05:44:61:6e:e8:
                    2b:e7:bb:40:15:42:e3:8d:46:2c:9a:ef:94:92:4b:
                    a5:6e:66:68:a9:e2:13:e0:0f:22:9b:42:cf:bd:68:
                    97:77:26:8d:e5:db:63:4e:09:9b:32:0a:39:b9:c6:
                    d6:f5:0b:95:1c:81:5a:46:3d:27:70:e4:5f:3b:a1:
                    59:67:84:5a:29:e2:11:4a:a8:a7:85:6f:e6:b7:f3:
                    8f:0d:af:c6:dd:eb:51:5d:d6:ed:12:9c:77:8e:95:
                    7f:4b:b8:3d:37:2f:f5:ef:2d:e3:9f:3c:e1:17:cb:
                    23:ab:61:50:28:e9:80:ba:8f:c3:08:8c:14:cc:6f:
                    f7:42:96:d0:b5:d0:34:53:7c:32:d4:80:ba:35:ba:
                    ff:fa:70:b9:b3:c8:20:ad:e2:75:2a:08:a4:0c:0a:
                    e2:a3:3d:6d:8e:02:6f:62:f2:a4:05:1e:9c:bf:54:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3B:FF:68:9D:A0:14:8E:8C:28:F8:08:35:34:11:72:CB:D2:D6:CF
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:37:54:67:1f:94:31:75:3e:d6:d2:da:e5:b7:66:6c:53:46:
         a0:27:03:24:d0:40:a3:f4:99:a9:7b:70:14:0a:bc:87:6c:c4:
         2e:cb:f3:88:f1:9b:7e:f4:17:30:b3:b5:bf:9f:09:e0:c3:1f:
         3b:2a:41:ac:d5:62:8f:46:d3:c9:ef:e5:b3:8e:75:24:c9:30:
         78:39:51:46:a2:3d:3b:c0:b1:01:ff:40:4e:03:99:87:a2:47:
         07:99:3d:65:ec:16:03:00:56:17:15:03:91:43:73:2d:d1:5f:
         03:e7:56:bf:f6:f7:17:37:33:0a:20:0f:69:84:57:28:79:13:
         eb:18:08:86:45:b2:d5:c7:ca:9d:7b:29:1a:b1:25:65:de:67:
         4e:48:a6:b0:43:b2:cf:89:e6:3f:73:6c:fb:df:d8:0c:78:55:
         00:9c:e6:57:b0:5a:57:f8:95:9c:a8:d6:cc:3d:9e:b0:ea:83:
         6c:06:b7:97:2a:ab:40:cb:32:41:bd:de:4e:11:0c:1c:a5:11:
         19:f8:fa:ed:f9:a0:c0:54:f6:92:b1:f7:a7:67:db:58:47:49:
         b5:64:09:43:46:49:0d:d5:57:cc:8d:e7:68:13:32:24:4a:2c:
         d7:22:64:c6:be:38:f2:78:e2:51:a1:b7:50:aa:a4:12:4d:d9:
         5d:81:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:11 2025 by rpki-client