Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
File:                     WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json)
Hash identifier:          r6huNfxUDXkpJk2B+3sECErsrwkHS/0PXb7NIiu6ecE=
Subject key identifier:   12:DA:4B:89:61:38:6E:53:59:F7:74:0A:6B:98:DD:0E:E8:3F:93:87
Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE
Certificate issuer:       /CN=5825eafb78f3d56926517c2a3cd5339aa51386de
Certificate serial:       0198A0BB0E30C5EC6BC2E837C972F7840866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
Manifest number:          01D5
Signing time:             Wed 13 Aug 2025 00:01:10 +0000
Manifest this update:     Wed 13 Aug 2025 00:01:10 +0000
Manifest next update:     Thu 14 Aug 2025 00:01:10 +0000
Files and hashes:         1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: gzMEalJHj8iscfzNB8MRS8oyoRVYwnfrpTR1KamQ4Oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:bb:0e:30:c5:ec:6b:c2:e8:37:c9:72:f7:84:08:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de
        Validity
            Not Before: Aug 13 00:01:10 2025 GMT
            Not After : Aug 14 00:01:10 2025 GMT
        Subject: CN=12da4b8961386e5359f7740a6b98dd0ee83f9387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:71:18:dc:4b:16:2e:93:80:0c:e3:8d:36:
                    7f:94:a6:51:09:e5:ae:86:f9:23:db:3b:eb:3e:99:
                    76:f0:78:4f:13:ab:d4:83:be:4c:a1:86:97:5d:57:
                    f4:82:2e:6a:94:8c:91:3e:c7:81:1e:68:ca:c8:60:
                    ff:57:f1:c4:9d:97:1b:24:e0:9b:77:50:ea:43:d6:
                    5b:82:83:e9:c2:95:31:49:d8:1a:df:50:e3:cc:2b:
                    72:93:79:73:d0:46:dc:65:72:cb:71:27:81:f3:0d:
                    3f:86:d3:9a:1a:d9:76:8c:81:be:cc:59:a3:eb:91:
                    42:80:1e:6d:cc:94:dc:fd:59:fb:74:9a:8a:1d:10:
                    0c:d6:e2:20:c5:90:4f:c4:b4:f2:61:90:76:23:7a:
                    83:c9:14:30:c2:bb:bf:af:e8:90:89:51:e1:ac:9b:
                    6f:da:c8:2c:6b:d1:dd:ce:c6:26:50:01:07:0b:70:
                    b9:c8:fe:21:e4:27:53:af:27:19:a0:49:9b:57:9b:
                    c0:b3:b7:ac:2d:1a:c4:4d:ec:0f:94:29:3f:f3:8c:
                    38:55:51:6f:6b:ff:06:b2:b5:75:4b:52:e8:23:09:
                    0e:6c:69:e8:22:e7:2e:83:11:3a:4e:9d:06:67:f2:
                    f9:69:f4:21:61:b6:1a:0c:bb:8e:4f:d7:29:2e:35:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DA:4B:89:61:38:6E:53:59:F7:74:0A:6B:98:DD:0E:E8:3F:93:87
            X509v3 Authority Key Identifier:
                keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b1:5b:88:ef:d3:b2:71:c5:ac:f7:63:19:65:d1:cf:99:00:
         12:9d:a3:61:8d:2c:e9:81:73:3e:41:51:34:f0:ec:c5:84:c6:
         6a:76:c4:fe:78:67:c8:6b:c5:71:54:13:39:a2:f0:fb:e5:01:
         0e:b2:37:94:34:51:2f:fd:64:b2:34:ae:23:fd:75:96:54:13:
         a2:eb:42:ef:88:7d:22:66:7e:17:9f:d0:65:2c:24:6e:b1:19:
         ba:15:ef:4e:bb:24:c2:7b:a4:cb:91:b4:bc:3b:b2:60:29:37:
         ea:d9:f2:bc:44:e1:46:6d:e5:bb:aa:d3:84:a5:dd:88:4a:bc:
         29:36:c6:6f:2a:59:90:e4:c5:ba:12:f7:7e:b2:52:1a:d9:6c:
         8c:45:cc:0b:f7:d8:5d:df:18:d6:6c:54:85:44:5e:08:69:ac:
         30:87:ea:fd:73:06:a2:00:b9:fa:5d:ec:28:26:b5:2e:f3:bb:
         6e:38:24:9d:32:72:60:fd:71:c1:20:58:eb:cf:1a:72:f0:ac:
         7a:33:99:d5:96:f3:f4:c9:02:cc:9e:36:9a:88:b7:d5:c3:3c:
         14:bb:70:95:e5:f4:97:26:18:e6:e2:c6:41:2a:5e:b9:7e:d3:
         c9:71:c5:65:04:01:ba:57:72:bd:d4:e0:08:15:68:98:8f:7e:
         63:0b:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:18 2025 by rpki-client