Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
File:                     WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json)
Hash identifier:          Sg4WbmHI7jhwj/Yz6SdmXDwhA0mZazisz17BYhONkBU=
Subject key identifier:   8A:24:88:5B:1E:63:5E:EE:C6:DE:79:D9:8D:30:DA:1A:98:AD:65:34
Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Certificate issuer:       /CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Certificate serial:       0196760CC3C87C7DAC7953A544DA79C43D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
Manifest number:          0CB0
Signing time:             Sun 27 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 27 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 28 Apr 2025 07:01:10 +0000
Files and hashes:         1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: NlmSknup6r4Am5L9vku9Dt1uU7Dt9rxXRB+Zf4V2HE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:c3:c8:7c:7d:ac:79:53:a5:44:da:79:c4:3d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
        Validity
            Not Before: Apr 27 07:01:10 2025 GMT
            Not After : Apr 28 07:01:10 2025 GMT
        Subject: CN=8a24885b1e635eeec6de79d98d30da1a98ad6534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:f5:95:d4:39:c6:5a:0c:b6:52:a1:19:8f:
                    3d:b8:64:fe:ab:8c:70:59:80:a0:b1:f2:0d:f2:05:
                    e5:85:27:e5:5e:bd:7a:95:58:16:d6:2d:38:d7:76:
                    e4:f5:ba:84:61:9e:05:9f:42:5f:2a:eb:f2:dd:46:
                    6b:42:0a:1c:c3:e5:d5:f9:2e:09:fd:1a:5a:24:60:
                    bf:11:42:bf:6d:a5:e9:ba:7e:9d:2b:c8:80:e4:1e:
                    88:9d:67:d1:5e:fb:bd:3c:9f:fc:e1:57:49:49:88:
                    57:da:c8:e3:88:da:4c:e6:2b:e7:4d:93:dc:a6:cc:
                    79:b2:35:e8:34:d3:34:f4:64:5d:9d:74:c7:67:07:
                    6f:ef:90:4a:de:f7:e6:61:d3:1f:4f:42:5b:9e:5c:
                    8d:95:40:fd:35:19:6d:49:a2:45:f8:76:ff:06:5b:
                    b3:10:5f:f1:87:a8:c9:b8:01:5f:08:7b:99:45:f4:
                    04:6e:82:06:26:44:9f:93:3d:9a:5c:ae:b6:ed:3b:
                    d3:18:51:79:b2:ef:5c:e4:e7:23:ca:57:8b:0d:65:
                    6c:43:86:b7:18:55:39:dd:32:b6:dd:9b:d3:82:c3:
                    2a:62:67:49:39:4c:6d:13:58:42:24:f3:b9:d4:56:
                    2b:5c:84:bc:ef:cd:fb:8a:aa:e5:24:9c:b8:b4:7c:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:88:5B:1E:63:5E:EE:C6:DE:79:D9:8D:30:DA:1A:98:AD:65:34
            X509v3 Authority Key Identifier:
                keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:bb:de:e7:2a:3f:b4:74:1a:63:95:41:30:6f:0c:a4:0b:
         ed:37:78:e5:7d:36:f6:f4:a4:38:a2:c1:e5:68:da:73:33:7f:
         6b:f5:c2:5f:6c:40:55:eb:f2:30:aa:5e:b1:6f:f3:02:84:a1:
         20:da:24:09:5c:b9:3d:0d:17:68:12:e1:b6:db:96:b5:54:e1:
         eb:31:dd:d8:18:26:18:ba:4f:fe:62:ba:34:5e:5f:29:34:31:
         8a:15:c0:39:e1:64:37:00:35:19:f8:a1:35:fe:ed:ce:81:f5:
         f7:25:63:ee:c2:04:d1:45:7e:60:2d:e6:b2:65:c6:be:5d:e6:
         40:35:2c:d2:6b:bd:97:90:30:ee:fa:40:a6:45:3f:69:f9:cd:
         81:f0:88:af:ef:0a:fb:5e:e3:88:23:67:97:6a:1d:59:14:af:
         40:6c:19:14:64:b8:d0:b3:3c:26:4e:ee:f7:c6:56:7e:de:6d:
         cb:a9:87:7f:41:f2:e6:b6:08:49:88:4d:4f:9f:65:4c:6e:ac:
         ae:0d:8b:f8:7e:f5:74:3e:75:67:a3:7a:85:40:98:94:bf:55:
         c7:1f:ca:eb:8a:65:e1:fe:7c:a6:5a:1d:13:30:64:af:e8:b2:
         b0:f8:21:f8:e9:75:16:e8:67:5d:8a:af:93:5c:3f:90:d7:f8:
         54:23:7a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DMPIfH2seVOlRNp5xD0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmU3YzUxOWM5NDIwNDIzY2QyZjkwNjQwYmQ1MWM5OGI0
YTE1MzYwHhcNMjUwNDI3MDcwMTEwWhcNMjUwNDI4MDcwMTEwWjAzMTEwLwYDVQQD
Eyg4YTI0ODg1YjFlNjM1ZWVlYzZkZTc5ZDk4ZDMwZGExYTk4YWQ2NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3L1ldQ5xloMtlKhGY89uGT+q4xw
WYCgsfIN8gXlhSflXr16lVgW1i0413bk9bqEYZ4Fn0JfKuvy3UZrQgocw+XV+S4J
/RpaJGC/EUK/baXpun6dK8iA5B6InWfRXvu9PJ/84VdJSYhX2sjjiNpM5ivnTZPc
psx5sjXoNNM09GRdnXTHZwdv75BK3vfmYdMfT0JbnlyNlUD9NRltSaJF+Hb/Bluz
EF/xh6jJuAFfCHuZRfQEboIGJkSfkz2aXK627TvTGFF5su9c5OcjyleLDWVsQ4a3
GFU53TK23ZvTgsMqYmdJOUxtE1hCJPO51FYrXIS87837iqrlJJy4tHz7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIokiFseY17uxt552Y0w2hqYrWU0MB8GA1UdIwQY
MBaAFFi+fFGclCBCPNL5BkC9UcmLShU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w1OFVaeVVJRUk4MHZrR1FMMVJ5WXRLRlRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hNDFhY2YtMjc1Ny00MDE1LWIwNDEt
YzlkMjM4M2QyYmQ2LzEvV0w1OFVaeVVJRUk4MHZrR1FMMVJ5WXRLRlRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hNDFhY2YtMjc1Ny00MDE1LWIwNDEtYzlkMjM4M2QyYmQ2
LzEvV0w1OFVaeVVJRUk4MHZrR1FMMVJ5WXRLRlRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqi73ucq
P7R0GmOVQTBvDKQL7Td45X029vSkOKLB5WjaczN/a/XCX2xAVevyMKpesW/zAoSh
INokCVy5PQ0XaBLhttuWtVTh6zHd2BgmGLpP/mK6NF5fKTQxihXAOeFkNwA1Gfih
Nf7tzoH19yVj7sIE0UV+YC3msmXGvl3mQDUs0mu9l5Aw7vpApkU/afnNgfCIr+8K
+17jiCNnl2odWRSvQGwZFGS40LM8Jk7u98ZWft5ty6mHf0Hy5rYISYhNT59lTG6s
rg2L+H71dD51Z6N6hUCYlL9Vxx/K64pl4f58plodEzBkr+iysPgh+Ol1FuhnXYqv
k1w/kNf4VCN6Vw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:30 2025 by rpki-client