Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
File:                     WXtExKeTHGam_56S27MspyPUzPc.mft (raw, json)
Hash identifier:          EhlEE9mvn8248xT9kuAbgBGuS6SOdrU2lp3ZP6zH1DM=
Subject key identifier:   9F:95:A6:F1:06:43:E6:1A:90:E2:66:05:EB:F0:E8:D0:F8:12:F8:55
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Certificate issuer:       /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial:       01978320DE0CEC45A4E3951EB7B64A1E73D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
Manifest number:          159E
Signing time:             Wed 18 Jun 2025 13:00:58 +0000
Manifest this update:     Wed 18 Jun 2025 13:00:58 +0000
Manifest next update:     Thu 19 Jun 2025 13:00:58 +0000
Files and hashes:         1: 27thg2xR1ns9dxvQknh6OQz2HQE.roa (hash: 8utEVwtgJM/87D9G8Lvp0Zap9PR/R1pmHN8nnbsDNS0=)
                          2: 7EOkJISYh1lPEvtjEsSd_uB091A.roa (hash: iyJBe6KDY2jgmtE4ar31VWghuSb4Z0TN62CuRa0HGDo=)
                          3: IsbNRUwtF97TzTNIl7-2xG06qDM.roa (hash: ZJvUiTXJS17zRJXm+MWYGG6p9Wcs9KOAFeVCvx+kP0Q=)
                          4: WXtExKeTHGam_56S27MspyPUzPc.crl (hash: 9tzs5G2q49IAbOO3U/lwdz2Vg9uUq/spTHrZ3XnXizc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:20:de:0c:ec:45:a4:e3:95:1e:b7:b6:4a:1e:73:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
        Validity
            Not Before: Jun 18 13:00:58 2025 GMT
            Not After : Jun 19 13:00:58 2025 GMT
        Subject: CN=9f95a6f10643e61a90e26605ebf0e8d0f812f855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:79:7a:db:4e:2f:05:ec:4d:a6:a1:ce:a4:53:
                    11:61:77:a2:c7:bf:c7:14:d5:e0:fc:a6:fd:8b:18:
                    63:0d:a4:9f:80:e3:28:1d:c9:04:6c:38:07:56:d0:
                    d8:30:55:33:a8:7b:e4:05:5b:0e:de:b6:19:c7:fe:
                    78:2d:63:15:73:86:d0:b2:61:16:7d:ed:5f:04:1e:
                    33:13:46:26:6b:91:36:d5:d7:38:52:e6:4d:a2:e8:
                    92:91:24:3a:d1:05:01:15:fb:9d:94:8f:cf:e7:6a:
                    32:42:ab:14:d5:9b:d5:43:6c:b8:ce:96:a7:c1:3d:
                    98:6c:8c:96:bb:f0:07:b5:cb:5c:c5:e6:54:16:f0:
                    a3:59:bb:4a:6f:de:47:35:01:8e:10:00:13:f7:f8:
                    3a:a4:25:cc:cf:d9:f9:a5:bc:89:d6:23:9c:ef:b8:
                    5c:f1:21:2f:15:93:01:86:17:7e:91:50:ae:df:70:
                    5d:36:77:c0:68:25:b3:47:cf:50:68:24:05:cf:25:
                    76:ef:bd:84:38:91:8a:ff:81:df:30:c0:73:04:0b:
                    d0:f6:79:3e:ba:57:05:ff:75:33:c3:c3:0a:9d:22:
                    d9:e0:50:0e:d2:50:d9:5f:4a:7f:04:68:4c:89:18:
                    a8:1e:fb:37:ae:4c:b1:b5:1b:a1:f3:e0:2e:52:56:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:95:A6:F1:06:43:E6:1A:90:E2:66:05:EB:F0:E8:D0:F8:12:F8:55
            X509v3 Authority Key Identifier:
                keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:c1:2b:79:59:b9:c2:e0:87:5d:51:9a:65:8e:c7:54:8e:
         39:b3:f6:b9:ca:2b:83:c9:00:ad:cf:ab:f2:6f:ca:26:a2:88:
         42:5a:e3:74:e0:a6:bc:ea:a8:72:92:6b:06:63:f0:69:56:96:
         4a:0d:e6:5c:a0:7a:0f:89:c1:ce:91:5a:f3:5c:4b:21:31:3f:
         d4:a4:4e:8a:43:0f:65:0f:3d:4f:05:d3:c2:4e:8a:ad:50:d4:
         7d:86:55:9f:f6:f0:ca:63:5c:82:80:7d:45:0f:30:97:81:e5:
         35:b5:4f:87:48:c6:4a:4a:61:b6:ed:8e:c8:d9:20:46:7c:c0:
         31:e6:3b:63:fd:ab:57:df:d4:09:7e:74:59:9b:81:61:29:25:
         00:3d:1e:bb:3b:c0:af:99:3f:76:cb:1e:49:e7:3f:20:78:67:
         74:ed:9a:e2:4a:5b:a6:aa:e1:c8:6b:1b:fb:1d:1e:39:fa:f8:
         84:a4:1a:be:be:e2:62:14:09:2b:9a:2f:a4:c7:ac:64:0f:36:
         fd:3e:61:26:c5:c6:a0:1a:ac:e3:84:99:db:a3:9d:1a:eb:d7:
         78:64:45:e6:54:69:24:fc:68:6b:45:38:92:3f:21:94:61:3f:
         f4:78:fc:df:99:33:24:59:b2:86:fb:26:af:c6:26:5e:bb:f6:
         67:3a:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:28:11 2025 by rpki-client