Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File:                     WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier:          ldYfj4XUkshhSseDjAPqlvNzwXiofCx2XdcLiKDwYls=
Subject key identifier:   E0:4A:68:F5:B8:26:CF:FF:EF:DD:35:20:E3:35:FE:67:A6:58:74:61
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer:       /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial:       019769CF42C0AF8810C7E0248F8F448397B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number:          0F0B
Signing time:             Fri 13 Jun 2025 15:01:19 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:19 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:19 +0000
Files and hashes:         1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: z4JMHMWqCJT00sUfF5mp+cvqjcaeCgg/KmhqcTHeaC4=)
                          2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:42:c0:af:88:10:c7:e0:24:8f:8f:44:83:97:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
        Validity
            Not Before: Jun 13 15:01:19 2025 GMT
            Not After : Jun 14 15:01:19 2025 GMT
        Subject: CN=e04a68f5b826cfffefdd3520e335fe67a6587461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:d6:8e:78:1c:ae:38:b9:95:63:3e:00:de:
                    4d:11:e5:a2:5a:f8:d4:fb:86:2c:c3:2b:9d:6c:34:
                    a2:af:71:a8:27:68:4f:70:67:26:37:aa:88:9a:fa:
                    aa:fa:9e:d5:f1:49:e7:be:37:85:0e:4d:c0:b0:9a:
                    7b:1a:74:08:32:bc:72:db:5a:ff:b7:80:77:4d:41:
                    7c:08:12:92:98:9e:d1:42:3a:1b:c2:b7:c2:98:6e:
                    e1:5c:e7:5b:a5:6b:94:29:78:a5:c0:bf:12:a4:48:
                    07:85:7d:34:c0:d6:9a:24:17:36:22:bf:5d:92:10:
                    66:a8:5f:2a:d7:79:3b:bb:dc:a1:03:0b:23:8c:1b:
                    3e:8a:d8:c6:1c:97:ab:d6:6b:7e:0c:86:4e:8a:dc:
                    73:df:53:ed:03:9c:b7:d2:15:5b:1c:a1:2d:6a:82:
                    fb:c3:e3:b6:2c:a6:92:7a:af:7f:dc:f6:23:2e:4b:
                    ec:6d:1e:4d:fc:da:0f:8e:8e:72:7c:90:50:5d:00:
                    c5:53:6a:a9:d6:0e:a9:ed:84:ab:24:62:36:48:f8:
                    de:12:20:2d:27:10:a5:dc:0b:92:98:90:27:ce:59:
                    0c:c1:f8:be:8e:1e:42:32:20:cc:75:8a:29:b6:2e:
                    26:e8:70:88:4d:3b:8f:6f:9f:44:6c:89:6a:3f:71:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4A:68:F5:B8:26:CF:FF:EF:DD:35:20:E3:35:FE:67:A6:58:74:61
            X509v3 Authority Key Identifier:
                keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:96:4c:ba:a4:1b:82:99:2c:6c:6a:5e:a3:48:5d:53:1f:90:
         2d:46:e1:4d:ca:7a:7b:0d:47:ea:d6:44:a5:4e:f0:a8:31:66:
         c2:3a:ba:dc:8b:ca:a1:7e:37:1e:c5:df:15:69:ce:4e:10:cf:
         a5:9f:85:9b:da:53:8a:b3:c3:14:5c:4f:09:67:b7:ec:bb:7e:
         95:2c:e1:92:88:1e:a2:e4:9c:9d:90:eb:4b:3a:cc:85:85:77:
         ff:12:1e:e0:b9:fa:a7:68:be:b4:dd:ad:3f:05:eb:3b:8e:65:
         c6:2a:6e:05:0c:cf:e4:3f:15:52:50:f9:fc:de:a7:de:72:32:
         56:49:d8:2f:22:14:8d:a3:b0:81:02:b9:f8:05:e9:9b:48:3c:
         93:f3:38:3f:7d:c6:df:c0:81:69:68:4b:3c:45:c6:d4:86:86:
         83:2e:89:c7:0e:ef:99:85:b6:79:78:6d:8e:d3:62:cc:1a:78:
         15:c3:7a:19:d6:32:b2:ea:a5:39:f8:ab:fa:e9:92:ba:f5:74:
         36:d3:df:84:44:56:c6:b3:03:7e:1f:6a:1c:b8:8a:7f:b1:62:
         f1:fe:5d:22:be:ab:e1:a7:57:14:09:9f:4e:98:5c:6b:ad:52:
         5d:a4:29:f5:f4:ea:ce:78:1a:83:89:7b:6f:51:2c:1a:bf:51:
         54:e2:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:50 2025 by rpki-client