Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          P/Vo3ikW4IVgzTT212BF7DApafvJWwHfoXtIgWnvBrg=
Subject key identifier:   FB:17:89:D7:A9:21:C2:92:1A:AA:D1:07:BF:B5:98:B2:CE:B8:BB:E6
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       01976D068012CAEF70D6B0E1C352A6C0D22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 06:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:31 +0000
Files and hashes:         1: L7K-XR4rTNFTEnboIJT8rcKDxW4.roa (hash: Orjc5PbTzJEGwidvDgWcdnyYtJunNcWhaUwiDHcpNvs=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: thjGK4ka2bHu9Sgc3KaCGKoEYskrUvQAwipvmd20fSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:80:12:ca:ef:70:d6:b0:e1:c3:52:a6:c0:d2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Jun 14 06:00:31 2025 GMT
            Not After : Jun 15 06:00:31 2025 GMT
        Subject: CN=fb1789d7a921c2921aaad107bfb598b2ceb8bbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:dd:1c:c4:58:c5:67:8a:10:71:f5:b2:d0:
                    e7:1d:9e:68:a7:06:bd:17:4e:c0:01:ac:5a:fe:40:
                    9d:24:ef:1b:d4:89:9a:d0:86:04:3e:2c:51:af:76:
                    18:5d:1e:55:e1:75:c6:6a:a8:04:e6:6c:eb:7d:13:
                    64:6e:3f:a8:11:3d:4a:60:7f:98:87:4a:c2:4c:a7:
                    96:09:65:50:89:68:f4:fd:6b:ad:bb:b4:a7:14:a0:
                    94:49:41:a5:9c:58:16:ed:58:ff:26:12:da:00:eb:
                    df:84:02:8b:de:87:97:c0:b0:a1:22:5c:5b:ae:83:
                    74:3a:7f:7f:5b:5f:18:bf:50:d5:b2:53:74:ed:f5:
                    25:5b:35:a2:fd:f4:57:25:26:f9:af:c7:db:77:a1:
                    f7:2b:fc:de:f0:7a:ed:19:b2:0a:49:fc:1e:13:7d:
                    0d:b3:7b:1b:aa:5f:13:75:ae:13:bd:c7:00:4b:48:
                    eb:ba:89:67:9e:b8:7b:ed:7f:d4:c8:bb:36:70:8c:
                    64:31:2c:35:e7:10:fa:7f:07:5f:bf:ba:b4:34:d2:
                    1f:1b:98:e9:be:af:ac:81:6d:eb:d2:82:06:6e:4e:
                    8a:e9:2a:a2:e9:dd:d7:a5:94:b4:98:d7:99:d4:04:
                    0b:16:b2:91:1e:77:3d:eb:e1:60:c3:fe:0a:29:c5:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:17:89:D7:A9:21:C2:92:1A:AA:D1:07:BF:B5:98:B2:CE:B8:BB:E6
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:07:61:bb:a5:33:90:0b:88:a4:41:16:ed:17:a1:7b:bc:34:
         41:bb:a6:4a:6e:9f:70:bf:7e:8d:74:9a:1b:52:17:4c:1d:26:
         a1:0b:22:c9:59:f4:df:c8:c5:12:dc:23:36:96:51:f6:4a:77:
         9d:1b:89:61:e8:f7:2c:ca:60:ea:af:c5:d7:a4:7c:da:3a:83:
         b6:12:c2:89:f3:48:37:8e:a5:97:ab:6f:0e:46:10:e9:7b:41:
         fa:a4:f3:b6:c2:c5:75:b6:75:72:aa:4b:4c:5b:e5:3f:37:e9:
         2b:af:66:81:a2:24:72:2d:2e:02:f8:f6:91:8c:9f:41:74:6c:
         b6:c8:a0:08:94:bd:e0:94:e8:7e:c6:64:bf:46:c1:1b:00:72:
         63:d4:1c:23:89:35:03:54:b5:2f:7c:08:81:8b:00:0f:6c:a5:
         51:41:a7:ac:8c:3b:db:c7:91:97:8a:39:50:7c:87:e5:c2:cc:
         10:a2:02:6b:cb:dc:5a:31:c6:0b:53:28:ce:da:9d:e5:92:8e:
         ad:f2:6e:ac:95:8d:24:d3:da:e9:dd:ba:c5:43:4b:7f:7e:51:
         6b:53:f1:12:30:ab:ce:d3:0a:90:fc:32:8e:da:51:dc:e8:a9:
         6e:b5:5f:35:36:cb:a5:b7:cd:25:a8:21:59:82:d4:f1:38:be:
         82:2d:90:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:20:08 2025 by rpki-client