Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File:                     WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier:          8Pi1uHw5QDWayQ/RY1WX5gEwuxhqc5g0F/uV6LXIvjQ=
Subject key identifier:   BE:C5:8D:5C:45:14:06:71:8B:10:C5:4E:9D:21:1A:5F:F5:DD:73:60
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer:       /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial:       01976EF4AD4403DBCDF153FE5E4273803F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number:          0C70
Signing time:             Sat 14 Jun 2025 15:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:18 +0000
Files and hashes:         1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
                          2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: kYrs1im2H6XznYNmuZ2YLcj+02wfcPPokFruVeIR9x0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f4:ad:44:03:db:cd:f1:53:fe:5e:42:73:80:3f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
        Validity
            Not Before: Jun 14 15:00:18 2025 GMT
            Not After : Jun 15 15:00:18 2025 GMT
        Subject: CN=bec58d5c451406718b10c54e9d211a5ff5dd7360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:7b:ff:a5:65:77:62:f4:4e:bc:74:b2:ac:
                    a9:d0:5d:24:a7:7f:01:d4:34:78:39:30:a1:80:ef:
                    4e:1e:c6:fe:77:82:08:13:d7:9f:c5:1d:d4:68:d6:
                    0a:d5:0d:86:f9:3e:ba:04:47:f8:93:8c:cb:4f:10:
                    fb:0a:30:4e:2e:83:59:e8:70:f6:52:b0:c2:7d:27:
                    5d:51:b1:b0:94:b4:0e:a8:23:92:8c:52:51:4d:48:
                    94:13:cf:fb:66:b3:93:57:09:86:eb:8e:60:b4:7f:
                    3d:1e:e1:6f:4a:e6:4e:6d:9e:04:8f:ec:11:bc:fa:
                    13:de:aa:5c:63:d1:cd:4b:e7:74:2b:ac:37:77:89:
                    f7:37:c8:6b:8f:0d:12:45:c1:c1:c9:a7:ec:a5:b3:
                    7a:d1:83:52:6f:d8:8e:62:01:51:3e:de:f9:1f:b8:
                    53:8f:ed:23:87:36:a9:30:29:ff:f1:56:9d:82:1d:
                    c8:d7:c4:a7:94:11:5a:05:3a:56:af:08:3d:13:fe:
                    0b:5d:66:fe:af:a2:7e:90:7d:29:a0:88:83:e5:21:
                    46:f6:c7:ab:40:ba:6f:ae:3a:55:a2:a5:f1:e1:50:
                    8d:f2:3c:aa:e9:81:6b:6f:41:26:21:0f:c4:c7:12:
                    a4:d8:09:c5:31:25:9b:e0:3f:41:f0:f7:89:7b:eb:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C5:8D:5C:45:14:06:71:8B:10:C5:4E:9D:21:1A:5F:F5:DD:73:60
            X509v3 Authority Key Identifier:
                keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e2:1f:27:e3:9c:0c:dd:2f:68:13:2f:7b:82:4e:2a:6f:1b:
         20:61:c7:cd:c7:1c:5c:42:4c:db:06:84:23:67:fe:15:6d:a5:
         8b:5d:1f:f8:b4:af:5b:5d:fb:85:07:fb:96:74:2e:7e:cb:e4:
         07:c5:27:28:cc:d6:78:38:a5:54:62:c6:d0:83:aa:52:8a:2d:
         19:86:15:d0:19:7d:42:2e:4f:68:a7:67:80:cd:e7:18:45:e9:
         d3:d2:d4:7e:04:df:21:73:c8:f5:fe:6b:1f:8f:5f:03:cf:76:
         5d:93:e0:f4:e5:1c:74:0f:a9:8f:a4:78:fd:7f:53:41:18:b4:
         e2:e3:d2:13:a0:fb:15:f2:20:93:31:4f:bf:fb:aa:78:7d:be:
         81:da:63:27:4d:76:0f:b4:ba:e6:10:0a:28:af:cb:c8:23:df:
         37:10:c9:34:da:88:6d:62:e3:56:b0:9c:b8:34:c0:bd:47:e7:
         4a:0f:14:11:2e:c3:4d:e1:ac:8b:17:25:97:8a:23:18:30:91:
         28:29:47:d4:33:e9:c1:48:e1:7f:9b:ff:95:65:14:df:16:d7:
         c1:7e:15:2a:93:6f:7a:51:e2:7f:a6:e9:43:72:83:44:6b:89:
         86:d6:c2:0b:9a:be:d4:59:7b:3d:09:e7:3b:f5:fe:11:92:5b:
         b8:b8:29:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:21 2025 by rpki-client