Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File:                     WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier:          ZeC99y4esaQuT84pe7NDSJoczlVVQBbxi9wzdCkkE8Y=
Subject key identifier:   2D:28:63:94:2C:DE:40:27:E3:A6:0F:6C:B4:D5:32:AD:8A:80:C9:D3
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer:       /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial:       01987CE5BDB3E547BB53A862CBC61F569CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number:          1617
Signing time:             Wed 06 Aug 2025 01:01:27 +0000
Manifest this update:     Wed 06 Aug 2025 01:01:27 +0000
Manifest next update:     Thu 07 Aug 2025 01:01:27 +0000
Files and hashes:         1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: 2TeF0KCKsuzDL7vzIy0JZYrxcGzc7/Qc31c4siOQAtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:bd:b3:e5:47:bb:53:a8:62:cb:c6:1f:56:9c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
        Validity
            Not Before: Aug  6 01:01:27 2025 GMT
            Not After : Aug  7 01:01:27 2025 GMT
        Subject: CN=2d2863942cde4027e3a60f6cb4d532ad8a80c9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:11:db:8f:89:8f:9c:62:ea:6c:a7:42:05:
                    e7:3c:a4:ca:88:54:5f:d8:fb:89:5b:dd:23:32:27:
                    ab:3a:df:a7:f7:be:83:d2:68:f0:7b:45:62:c0:96:
                    b1:6f:93:0d:60:62:dc:ba:f2:27:e5:6d:70:66:e1:
                    5f:38:4b:a8:b4:83:ce:60:63:b4:4e:af:37:3a:22:
                    98:58:3a:f8:dd:52:78:51:26:0f:52:03:82:67:5d:
                    d2:3a:58:79:1c:b4:86:bc:d6:ee:17:f9:11:49:cd:
                    17:0b:9d:1f:14:3d:cc:e3:f2:a5:48:8e:12:12:eb:
                    22:d9:d3:06:67:96:9e:53:d8:b3:d9:cd:25:f7:a3:
                    69:53:d5:30:a1:b7:33:df:b8:76:c6:77:76:1f:09:
                    7e:0c:8f:ca:78:9e:ca:64:fe:a3:4d:aa:85:fe:37:
                    3d:b3:b9:41:2e:19:e7:ba:e6:aa:86:d4:af:88:f9:
                    a0:3b:9b:18:92:c4:ea:a0:f4:67:dd:1b:6b:27:44:
                    46:67:41:8c:04:5b:6d:40:bd:1e:56:63:71:da:a1:
                    da:ad:45:21:11:0a:07:20:90:0a:22:49:6d:44:97:
                    70:07:23:9f:ac:fe:89:b9:28:0d:ae:a7:4a:4f:c6:
                    69:f5:2d:a3:a0:72:34:32:7c:66:4a:f0:e8:7f:71:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:28:63:94:2C:DE:40:27:E3:A6:0F:6C:B4:D5:32:AD:8A:80:C9:D3
            X509v3 Authority Key Identifier:
                keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:42:96:41:be:ae:d0:f1:b4:5c:c5:ea:5d:f3:25:6e:4b:02:
         7d:ab:5c:6d:1c:60:c2:4d:9d:b0:8e:bb:d6:5f:bc:55:e9:c6:
         c8:dd:4b:07:32:b3:f6:3d:2c:fa:4b:a6:b1:95:71:f6:25:a6:
         99:e6:a4:13:b9:c5:79:8e:ac:85:24:2c:fd:18:e7:8e:0c:68:
         37:93:02:61:0a:fc:ce:d0:a5:e6:1f:9d:d7:aa:63:62:76:5e:
         90:d1:99:97:b1:1d:ac:f1:d0:bf:7e:81:37:47:82:de:8f:fe:
         a3:4b:46:67:cf:91:56:b6:54:b6:13:98:d3:b6:13:8e:7b:3c:
         7a:68:62:43:57:84:71:13:b2:64:80:b5:06:7d:96:32:6e:ee:
         af:f4:a0:d8:6f:93:78:3a:ac:1a:80:d1:05:46:f7:91:bb:39:
         67:6d:e5:67:10:b1:4d:67:cc:96:14:98:29:3a:c2:b6:72:32:
         79:6c:2a:12:eb:5b:b4:42:6a:30:c7:ea:e1:bf:fd:08:c7:cb:
         8f:02:7d:86:1c:ad:73:7a:5e:bc:54:32:98:fc:18:77:72:d6:
         c7:a6:11:0c:74:93:6b:85:7e:eb:81:a2:99:1f:ad:ee:f7:08:
         a8:89:1b:94:76:76:6a:36:1f:33:13:3c:c1:96:35:cd:49:18:
         91:ad:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:00 2025 by rpki-client