Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File:                     WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier:          XMvGQOghTxvuW0fEINKSXIQMaErZk5hhqRuygf799P0=
Subject key identifier:   96:90:5D:E2:07:8A:51:C8:B0:AD:2D:28:FB:AB:BF:A8:61:EF:91:32
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer:       /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial:       01988EEC849230855625BEF480F0CB1E4DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number:          02BE
Signing time:             Sat 09 Aug 2025 13:02:01 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:01 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:01 +0000
Files and hashes:         1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
                          2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: V2PIPo05Odj+4skVPNpRx5lzKW7ir0Y+9Yd+tSJG/kU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:84:92:30:85:56:25:be:f4:80:f0:cb:1e:4d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
        Validity
            Not Before: Aug  9 13:02:01 2025 GMT
            Not After : Aug 10 13:02:01 2025 GMT
        Subject: CN=96905de2078a51c8b0ad2d28fbabbfa861ef9132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:c6:7c:31:f5:a3:6a:6b:77:a4:5d:4c:17:
                    ba:59:f0:15:ad:b7:2b:3e:fd:c8:be:4a:49:7b:26:
                    93:d8:77:97:47:cc:01:84:be:37:5e:b7:81:55:ce:
                    0a:e8:74:37:2a:d8:b0:3b:21:c6:f0:6c:a9:05:96:
                    01:a9:ec:66:4f:fb:87:25:21:a1:a8:a0:c4:64:b9:
                    5d:c8:79:06:00:ab:5a:68:43:4b:83:03:12:88:d6:
                    63:30:d7:97:f6:5e:55:24:91:3a:74:b3:56:35:82:
                    b9:94:6a:eb:b9:4f:03:32:1a:9d:66:f5:76:d9:e1:
                    20:d6:a9:03:ad:39:e3:3d:10:61:6a:53:9d:97:3c:
                    97:24:e8:f8:02:21:2a:a8:58:b7:67:ec:fb:8e:2d:
                    e8:26:4d:b4:54:2d:fe:e5:05:ae:3f:a4:3f:5f:7f:
                    59:cb:9c:56:7d:99:10:22:1a:7a:52:df:f2:d8:61:
                    39:54:72:36:42:2b:ba:12:95:88:c2:c4:a7:d6:de:
                    14:9c:9e:07:ca:fd:e0:76:c6:7c:fb:9f:87:d0:ee:
                    e2:eb:95:17:9f:62:e2:bf:88:93:a1:84:ea:10:57:
                    04:a9:59:6d:0f:9a:a2:96:63:78:40:fb:3f:ec:b3:
                    c6:9e:e4:80:d1:14:4c:45:46:6d:a1:b5:a2:06:f2:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:90:5D:E2:07:8A:51:C8:B0:AD:2D:28:FB:AB:BF:A8:61:EF:91:32
            X509v3 Authority Key Identifier:
                keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:57:a9:cf:d2:f1:6e:c5:a7:b5:cf:14:8c:5a:37:b7:fb:
         50:8e:51:da:a5:84:14:4c:af:9e:24:95:e0:b2:6d:1b:69:75:
         fc:a4:6a:47:4f:ff:b3:21:27:58:90:36:08:4c:42:a3:be:71:
         bd:9c:48:dc:0a:37:2f:6e:73:f8:9c:95:0e:c7:79:20:fb:0f:
         4b:18:2f:e1:2d:65:00:55:82:7d:28:43:60:17:08:a0:11:a9:
         47:80:4a:59:27:96:7b:8c:b8:04:7e:3c:cd:0f:4b:bb:f1:ce:
         ef:31:31:d2:0e:c4:c6:eb:93:c2:b6:99:e6:db:c8:cc:11:f9:
         d4:67:4f:50:59:67:81:ff:07:4c:cc:bb:b8:ea:55:ed:9b:66:
         bb:db:97:56:29:fd:23:01:14:65:ef:73:92:be:22:5c:73:aa:
         49:bb:ce:c7:6d:76:e8:da:81:7e:78:ec:85:7b:10:68:b4:f6:
         de:3b:b7:7f:3d:a6:13:f5:63:2e:f7:cf:02:bc:20:93:da:f4:
         7a:ef:d4:8e:cd:3e:bf:66:a3:a3:8e:96:e6:0b:45:da:cf:fd:
         e2:0e:25:80:59:c3:0c:86:5e:3b:87:7b:dc:aa:9b:0b:17:88:
         20:b7:28:db:a1:d7:92:5b:db:d0:dd:63:e3:19:da:5c:f1:94:
         97:18:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:18 2025 by rpki-client