Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          cXWEcVGgF3gb4+5dESl/bgTDE0Q6dpEVJPqQWpYrKrE=
Subject key identifier:   72:59:55:3F:CE:94:F8:1E:01:08:72:F4:13:BE:A8:B2:D5:04:16:ED
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       0197684DFA468931CEE2E812EB01041D3498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          EC
Signing time:             Fri 13 Jun 2025 08:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:30 +0000
Files and hashes:         1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: gdriEWDopSrgzHtwC05ATLiKiAjSdFP5NF0Mhhgudg0=)
                          2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4d:fa:46:89:31:ce:e2:e8:12:eb:01:04:1d:34:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Jun 13 08:00:30 2025 GMT
            Not After : Jun 14 08:00:30 2025 GMT
        Subject: CN=7259553fce94f81e010872f413bea8b2d50416ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:d8:a5:0e:1f:27:3b:db:17:b4:a1:4a:e3:
                    e5:bd:b1:02:2e:10:e6:74:26:3b:87:ea:15:3f:b6:
                    a6:01:b6:7a:78:24:1d:74:d7:e7:c3:83:d6:d6:af:
                    da:89:c4:a2:8f:23:ff:f4:fa:02:0e:9e:c0:fb:91:
                    48:c5:3e:ca:91:9b:23:11:71:16:17:06:33:76:b6:
                    c5:4f:90:cc:c8:41:49:9d:17:38:83:0c:c0:69:14:
                    19:e5:60:b2:93:b3:32:85:ee:9f:f2:56:c5:62:72:
                    c4:da:cb:67:88:8d:0e:4f:36:20:b4:de:ca:22:33:
                    48:b0:17:b7:7b:09:74:b8:ae:f6:6d:7a:51:e2:94:
                    55:bc:ff:c2:23:a8:5f:00:a9:f9:97:95:36:6b:74:
                    fe:e4:f8:ab:58:b2:bf:2b:99:85:e1:c6:d9:66:35:
                    a4:e4:43:1e:3e:f9:73:49:7b:c5:27:d4:d8:0a:12:
                    a3:b9:3d:65:27:ae:1f:cd:ab:03:06:3a:63:5c:ee:
                    3d:5b:b4:b9:b8:69:06:f1:bd:fb:c8:34:a1:cc:4a:
                    ca:d3:91:4d:d6:fa:1c:19:97:cb:28:05:72:81:69:
                    de:72:dc:95:cf:69:58:ea:8a:b5:b5:55:31:85:93:
                    32:64:17:85:fb:41:d7:c9:8d:49:c4:f4:e5:74:e6:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:59:55:3F:CE:94:F8:1E:01:08:72:F4:13:BE:A8:B2:D5:04:16:ED
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b2:04:96:45:fc:c7:b6:c9:97:eb:b7:8f:31:3a:00:bb:52:
         7a:8a:08:11:0c:20:ec:b8:85:91:90:89:60:65:cb:45:51:ff:
         ad:1b:70:4d:39:0f:9e:8d:08:46:d2:e3:09:d6:d1:d7:e7:0c:
         9d:00:10:46:c3:e0:3f:cb:bb:6b:bd:dc:a4:26:af:81:09:fd:
         31:d5:c3:0f:1a:a6:4c:40:42:55:4b:4b:6c:90:79:f3:3d:97:
         48:e3:70:40:87:cf:80:a6:7d:90:66:b1:37:d8:83:30:b8:27:
         c3:a1:36:ed:9a:bb:45:b9:be:92:3d:41:4f:1e:8a:a6:41:3c:
         a1:34:56:fc:8b:58:e4:5f:0c:c1:1f:d7:cc:b0:81:4f:2c:d3:
         99:64:08:49:95:d8:73:7d:ef:ed:5e:ce:a3:76:49:c9:d1:87:
         65:02:05:d2:8c:f9:94:07:ca:f8:5b:77:b2:5f:41:38:f1:7c:
         57:06:22:1c:6f:8e:d3:11:00:d4:3d:7e:8e:b3:af:e9:1f:14:
         5c:bb:a9:c5:2a:62:52:e6:9a:0c:a6:5c:b4:b3:f7:d1:76:8b:
         ff:a0:70:e4:cc:ca:8e:44:3c:c3:87:ff:14:8e:86:53:ff:4f:
         8b:51:ce:b7:76:bf:57:82:3c:0b:c5:c6:59:05:d0:50:bc:69:
         7c:3f:11:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:53 2025 by rpki-client