Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
File:                     WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft (raw, json)
Hash identifier:          dv43R1w480KpW/wyIKdLQWLDEDkTx0OT5KXlKYX6PA0=
Subject key identifier:   6A:2D:03:3D:14:B1:76:44:F7:F8:E4:1A:99:5F:E8:D0:ED:63:E2:57
Authority key identifier: 58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A
Certificate issuer:       /CN=58d3e953b5fe17a531c9cf71560748df41ff714a
Certificate serial:       01976D3D52D437DD7117E2AEFDE4996202E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
Manifest number:          0C82
Signing time:             Sat 14 Jun 2025 07:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:24 +0000
Files and hashes:         1: CMb2v2PccTlBgcAh5nA2SeBCOKc.roa (hash: khwSYgRcb0xgIwV3Wxw9JYrinxD/gAooMfP6PNCyCK0=)
                          2: WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl (hash: culmixNeEQJ3nuw/+wXSXQZYFLEVNNTJvIH0A8CiJGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:52:d4:37:dd:71:17:e2:ae:fd:e4:99:62:02:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d3e953b5fe17a531c9cf71560748df41ff714a
        Validity
            Not Before: Jun 14 07:00:24 2025 GMT
            Not After : Jun 15 07:00:24 2025 GMT
        Subject: CN=6a2d033d14b17644f7f8e41a995fe8d0ed63e257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:84:2d:04:96:5e:d9:cd:c3:29:b1:dd:0c:aa:
                    94:bb:a0:ff:f0:4b:f8:cc:93:b9:91:75:2c:9a:16:
                    5f:51:99:92:d1:a3:4a:a3:4f:c4:ce:ab:36:4c:31:
                    ae:4d:76:b0:a5:d2:cf:af:c0:d3:c7:c1:99:23:e3:
                    7c:e5:17:0e:03:4b:ed:91:8d:4b:97:6a:55:93:54:
                    66:d7:af:2a:e3:3e:88:c3:d4:33:db:77:52:18:7d:
                    75:39:68:99:c8:b5:48:40:cd:1a:fa:4b:d8:ca:8b:
                    4c:d6:2f:5f:fe:1a:ee:31:4c:b1:17:4d:77:a2:82:
                    0c:90:4a:31:ff:30:f3:bd:21:08:e6:7a:28:65:68:
                    62:9e:b3:f9:36:c4:a0:e2:1a:64:4f:04:e8:36:b0:
                    a9:1f:ef:31:94:4f:f7:94:b2:20:69:9d:bc:1d:96:
                    0c:75:d7:06:e4:16:c4:f9:b9:1c:8f:6f:ed:6b:4d:
                    82:37:15:46:47:78:3c:51:b7:43:7a:4f:50:e6:92:
                    1f:10:67:3d:2e:75:75:10:8b:4d:02:00:68:e8:d4:
                    77:c4:2b:5f:b7:35:a8:df:39:ad:1f:e1:78:4b:5f:
                    b2:fa:4c:fe:9d:be:ee:ff:4e:3f:ee:bc:e6:61:a3:
                    1d:aa:07:a1:b9:1c:26:b3:8f:af:97:7b:65:56:65:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2D:03:3D:14:B1:76:44:F7:F8:E4:1A:99:5F:E8:D0:ED:63:E2:57
            X509v3 Authority Key Identifier:
                keyid:58:D3:E9:53:B5:FE:17:A5:31:C9:CF:71:56:07:48:DF:41:FF:71:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNPpU7X-F6Uxyc9xVgdI30H_cUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ac38c4-4b83-40b7-8d0e-7ceabce34e0d/1/WNPpU7X-F6Uxyc9xVgdI30H_cUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:73:f7:13:f9:1c:52:e0:ff:eb:b7:ea:4b:db:67:4d:f2:
         49:0e:cf:c7:a2:d4:90:5e:ca:54:71:e4:d5:9b:15:78:24:95:
         25:09:34:70:1e:4c:21:e0:28:0e:c0:49:51:02:2c:09:5b:aa:
         1f:be:ba:40:8c:7d:86:04:51:38:34:25:cb:65:aa:5f:c8:b5:
         e0:2e:f2:e6:f8:14:a6:03:82:f9:d8:51:eb:34:14:eb:66:6c:
         3e:f3:3c:2c:60:53:f1:70:56:7c:02:96:f1:bb:b1:23:f1:48:
         9d:f7:73:d6:d2:93:9f:a4:3a:ec:06:e8:48:28:0f:6a:06:92:
         bf:5c:69:54:4e:04:f6:3c:6a:95:a6:ec:4c:fe:28:38:19:cd:
         2c:6f:b1:60:d4:66:4c:b0:aa:78:21:66:c2:ea:06:9b:4e:28:
         49:92:b3:41:9b:73:50:bd:ab:2c:e7:47:d4:c5:fd:5e:3f:70:
         a5:c5:ef:37:d3:21:78:eb:0a:67:fe:b3:ab:2b:46:0e:a8:1d:
         40:63:e1:71:9d:48:76:c4:bf:29:39:f6:1e:72:23:56:4f:57:
         9e:cf:0a:88:0a:0c:c8:53:1c:7f:db:63:4d:b1:93:8c:97:de:
         bc:25:07:17:b3:12:1b:b7:9a:2c:48:77:f9:31:ad:d2:f4:c0:
         4d:ea:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:37 2025 by rpki-client