Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File:                     WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier:          pWYUT3QCnjNJBv82gTmGghRts1QxoJJutXxIIRLk2Eo=
Subject key identifier:   07:0D:17:24:16:FD:1C:B7:32:FB:D6:EF:77:03:E1:1E:2D:13:DB:63
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer:       /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial:       01987A51C9AE3D94BFF5767270342158C3BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number:          161D
Signing time:             Tue 05 Aug 2025 13:00:36 +0000
Manifest this update:     Tue 05 Aug 2025 13:00:36 +0000
Manifest next update:     Wed 06 Aug 2025 13:00:36 +0000
Files and hashes:         1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
                          2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: Av5aL8HL2UHGu3mgL+fQKg8qSwAuzfiy/VHnQY6dO1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:51:c9:ae:3d:94:bf:f5:76:72:70:34:21:58:c3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
        Validity
            Not Before: Aug  5 13:00:36 2025 GMT
            Not After : Aug  6 13:00:36 2025 GMT
        Subject: CN=070d172416fd1cb732fbd6ef7703e11e2d13db63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:c7:10:d4:ff:68:0e:9a:62:51:ca:67:48:
                    99:20:1c:3d:94:eb:95:e3:ad:6e:2d:25:a8:2e:91:
                    db:ab:a4:41:b3:5d:01:bd:56:ad:4f:cc:36:b6:65:
                    f9:92:48:50:2b:d4:ce:f1:2b:f8:2b:fd:b0:6f:ab:
                    15:bc:91:60:07:19:64:a0:3f:be:5f:5c:07:d2:0a:
                    ee:1d:82:b2:35:3a:8c:97:3d:f3:ef:eb:e7:41:6a:
                    28:54:e5:e2:7f:54:bb:80:44:15:7c:6d:bf:a1:14:
                    d1:ea:94:d5:57:0c:5a:9f:39:55:20:09:5f:0a:4b:
                    75:fc:eb:88:1c:55:4e:e3:eb:1e:84:b6:2d:a8:e3:
                    c4:85:b4:cf:96:67:23:d0:8b:e3:93:c9:fb:1e:79:
                    ef:ba:66:de:6c:28:f4:0b:55:3d:57:d7:88:94:0b:
                    2e:d3:4c:56:af:04:0f:e8:84:24:db:b3:e7:22:3a:
                    df:d2:60:1f:05:d9:32:ed:81:04:00:b5:18:ff:9e:
                    78:2d:1f:0c:32:63:bf:93:fb:cf:c1:57:ba:e4:27:
                    63:9f:79:02:a2:22:47:93:62:0c:cb:cb:29:df:36:
                    55:ff:ba:c0:4e:e6:4f:26:10:fe:11:71:b3:0a:51:
                    c7:24:b9:19:dc:84:09:8c:89:e2:7d:72:f4:6e:5a:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:17:24:16:FD:1C:B7:32:FB:D6:EF:77:03:E1:1E:2D:13:DB:63
            X509v3 Authority Key Identifier:
                keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:45:d4:c6:96:0d:1c:53:11:01:73:53:05:d7:5f:c3:23:0d:
         77:61:d3:11:f5:a5:59:ee:18:e2:e1:b3:74:48:84:a2:e0:50:
         6b:f4:b9:49:ed:ae:c8:1a:0b:96:66:1d:15:eb:b0:a3:29:fd:
         c7:74:7f:bd:03:45:78:4e:ca:27:04:03:a2:fe:a1:bd:32:a4:
         b7:38:c1:83:86:79:7a:39:2c:53:d9:05:62:7d:c9:ef:39:d9:
         7b:a8:c9:e6:d4:2d:21:3e:da:4d:92:25:e8:59:c7:5c:d2:61:
         c8:b5:29:b2:1e:f8:63:af:9a:d8:61:59:77:ff:ce:59:07:d4:
         a9:a7:26:1e:6f:e2:22:b0:81:5e:26:36:d3:bc:92:dc:b7:fa:
         6c:0b:4e:cd:dd:ee:4a:4b:5c:66:68:c8:0b:99:2b:2e:b8:93:
         21:a7:9f:7f:c0:b6:72:7f:ae:dc:94:2c:dc:bf:79:e2:b8:02:
         92:00:07:17:32:3e:6f:33:9b:ac:98:36:73:a8:ff:77:29:79:
         79:31:0a:8e:58:ee:c4:d8:7c:8b:e6:2e:a1:d8:86:fc:41:69:
         4b:44:6f:d7:48:8b:cc:72:51:e3:f7:fc:75:87:14:de:72:af:
         c2:42:ea:6d:2d:85:8b:8a:bd:a3:48:69:41:87:49:82:32:a3:
         13:a5:05:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6UcmuPZS/9XZycDQhWMO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzNiNTk4NTUwZGY1YmZkYmM5OWE3YTFlMzk2YzM0OTVi
ZGE4M2IwHhcNMjUwODA1MTMwMDM2WhcNMjUwODA2MTMwMDM2WjAzMTEwLwYDVQQD
EygwNzBkMTcyNDE2ZmQxY2I3MzJmYmQ2ZWY3NzAzZTExZTJkMTNkYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDzHENT/aA6aYlHKZ0iZIBw9lOuV
461uLSWoLpHbq6RBs10BvVatT8w2tmX5kkhQK9TO8Sv4K/2wb6sVvJFgBxlkoD++
X1wH0gruHYKyNTqMlz3z7+vnQWooVOXif1S7gEQVfG2/oRTR6pTVVwxanzlVIAlf
Ckt1/OuIHFVO4+sehLYtqOPEhbTPlmcj0Ivjk8n7HnnvumbebCj0C1U9V9eIlAsu
00xWrwQP6IQk27PnIjrf0mAfBdky7YEEALUY/554LR8MMmO/k/vPwVe65Cdjn3kC
oiJHk2IMy8sp3zZV/7rATuZPJhD+EXGzClHHJLkZ3IQJjInifXL0blotxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcNFyQW/Ry3MvvW73cD4R4tE9tjMB8GA1UdIwQY
MBaAFFhztZhVDfW/28maeh45bDSVvag7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWIt
MTc2OWQxOTk0ZGY2LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8xNDIzOGQtODU5MS00NzFmLTg5NWItMTc2OWQxOTk0ZGY2
LzEvV0hPMW1GVU45Yl9ieVpwNkhqbHNOSlc5cURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0XUxpYN
HFMRAXNTBddfwyMNd2HTEfWlWe4Y4uGzdEiEouBQa/S5Se2uyBoLlmYdFeuwoyn9
x3R/vQNFeE7KJwQDov6hvTKktzjBg4Z5ejksU9kFYn3J7znZe6jJ5tQtIT7aTZIl
6FnHXNJhyLUpsh74Y6+a2GFZd//OWQfUqacmHm/iIrCBXiY207yS3Lf6bAtOzd3u
SktcZmjIC5krLriTIaeff8C2cn+u3JQs3L954rgCkgAHFzI+bzObrJg2c6j/dyl5
eTEKjljuxNh8i+YuodiG/EFpS0Rv10iLzHJR4/f8dYcU3nKvwkLqbS2Fi4q9o0hp
QYdJgjKjE6UFZQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:21 2025 by rpki-client