Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
File:                     WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json)
Hash identifier:          rFBk0DW2hstk5fIO9l+85AkCB0GXwjgY8thSsrXtJWY=
Subject key identifier:   AC:DE:94:91:91:62:EC:8E:D8:6A:75:5D:AD:F1:FA:FF:4D:5C:4F:2F
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Certificate issuer:       /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial:       01977C0B9F3678E5A85222B810FB6932C5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
Manifest number:          1598
Signing time:             Tue 17 Jun 2025 04:00:25 +0000
Manifest this update:     Tue 17 Jun 2025 04:00:25 +0000
Manifest next update:     Wed 18 Jun 2025 04:00:25 +0000
Files and hashes:         1: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: sGaEJXs5/0GFwbVE8yLcx2H1jVOSsdQ8qeliHzv3YOg=)
                          2: xrn9wGcZNgBUBClFEOmA1ETirQc.roa (hash: pd4BjALDo2lB/niA3gPglIgN5zsXIWGcWxmGYdPS/DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:0b:9f:36:78:e5:a8:52:22:b8:10:fb:69:32:c5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
        Validity
            Not Before: Jun 17 04:00:25 2025 GMT
            Not After : Jun 18 04:00:25 2025 GMT
        Subject: CN=acde94919162ec8ed86a755dadf1faff4d5c4f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9c:05:57:72:be:98:89:aa:a5:a9:be:a1:e4:
                    3b:27:d3:c7:af:8f:90:44:2f:11:b6:fb:53:8c:03:
                    50:df:7c:60:86:dc:e9:9b:48:f8:61:51:60:be:66:
                    39:91:0d:6c:cc:8c:57:62:d9:41:f1:90:b6:27:f8:
                    73:e7:78:d2:1f:b7:51:69:fe:7a:3b:4c:1f:6b:b2:
                    b9:94:09:c3:c1:35:af:ed:3a:0c:23:79:c2:81:90:
                    15:e3:4c:4e:9d:05:5e:c2:ae:2a:cc:c9:c0:0d:ce:
                    b7:2f:dd:0b:85:a5:a1:bb:bf:b9:01:e4:8b:f4:1d:
                    86:a0:2d:7d:6a:ba:63:9c:51:3c:23:78:57:8e:2d:
                    38:5a:67:87:1a:3c:9b:9a:f5:70:22:05:7a:ad:e7:
                    e8:bf:a5:fe:be:92:ee:7e:b6:69:7c:47:35:fc:e0:
                    6b:1b:8f:f5:b6:2e:e8:85:a8:9b:4c:51:e1:11:88:
                    f5:6d:bb:e8:2a:1c:e2:d1:96:9b:1e:54:f5:74:a6:
                    00:0b:ad:5e:64:6e:b0:de:da:b5:7c:b0:48:ab:ed:
                    9c:d2:0a:e4:46:1b:42:92:43:09:eb:b3:a0:ce:92:
                    df:0b:d9:06:85:52:2c:dc:5b:db:39:9d:f6:d1:34:
                    99:e2:8f:c7:a3:ff:26:73:d2:c4:cb:d5:04:d2:45:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DE:94:91:91:62:EC:8E:D8:6A:75:5D:AD:F1:FA:FF:4D:5C:4F:2F
            X509v3 Authority Key Identifier:
                keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:e1:08:0a:92:3b:88:e3:5d:d2:41:17:c2:d8:e6:34:3b:e4:
         cb:52:0e:a0:3d:01:01:8a:bc:de:ca:81:16:f9:0b:b0:5c:79:
         0d:73:d8:97:5a:9e:8d:56:85:1d:52:64:32:bf:09:9f:f8:42:
         dc:ab:a5:b2:b5:e5:23:63:ec:c7:26:d3:61:92:00:19:52:cf:
         64:37:e0:0f:76:93:a4:f9:e9:dd:d4:4b:55:79:d2:14:cc:5c:
         d8:9d:5c:d7:ee:70:81:72:fa:fb:9b:af:47:7a:29:f5:61:b0:
         b0:8f:24:39:22:83:6d:bc:00:71:81:9f:14:6e:55:d4:25:48:
         87:0b:8c:86:a1:e2:a5:ff:a0:f3:47:3a:61:fb:62:0c:59:e0:
         6b:f7:f2:29:f6:1f:79:cb:b1:92:be:01:4a:59:be:19:e2:c0:
         f2:c9:cf:34:b9:02:c1:6b:e9:1f:73:02:b3:88:6b:57:a3:28:
         48:93:f0:fd:65:f4:aa:fd:47:0c:2e:2d:f7:26:43:57:33:53:
         fb:62:71:9e:dc:e0:a3:f4:7c:0a:8b:58:4a:63:12:5f:7d:3e:
         88:cf:75:41:fd:39:94:f3:96:5c:f0:19:3b:ab:c2:af:bb:83:
         91:a9:9e:bf:19:8b:c6:4f:69:6f:f8:b5:31:b1:3e:91:4e:45:
         95:bb:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:17:31 2025 by rpki-client