Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
File:                     WQYyXjRBilfOVm78DD6LOKDvpds.mft (raw, json)
Hash identifier:          jbrThDNcZJJWvxN9H2KoWoP9yx2kROAX1ye8E1nGUoE=
Subject key identifier:   D9:B4:87:AB:1B:9E:27:F2:F3:81:F2:BE:F9:5F:A2:96:3C:74:F8:44
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Certificate issuer:       /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial:       019777C1D658CB5EBFAB5C0375FAE412793E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
Manifest number:          0575
Signing time:             Mon 16 Jun 2025 08:01:21 +0000
Manifest this update:     Mon 16 Jun 2025 08:01:21 +0000
Manifest next update:     Tue 17 Jun 2025 08:01:21 +0000
Files and hashes:         1: CHolCMPV9MDfWslO2iJddWWgMxU.roa (hash: xbO5/GWIWdRSiMSxSxvQxXxVcngA8nyNGqLLz8U68pk=)
                          2: WQYyXjRBilfOVm78DD6LOKDvpds.crl (hash: s45beC3cDvCTgEbXcQ5308D8lyg9j04zUfmKc9Jhqek=)
                          3: lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa (hash: BxDOajJXMhzwiCUKNNyd1p9JlNupPH3KBSPrVsuMQCs=)
                          4: xyGqaFm8wV6in1t_6bj0_LRGfV0.roa (hash: m0Saw+cLOstpLd2stdgUm+hFFozHrcVyidN3zuOottg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 08:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:c1:d6:58:cb:5e:bf:ab:5c:03:75:fa:e4:12:79:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
        Validity
            Not Before: Jun 16 08:01:21 2025 GMT
            Not After : Jun 17 08:01:21 2025 GMT
        Subject: CN=d9b487ab1b9e27f2f381f2bef95fa2963c74f844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:b8:8c:fe:de:4a:9c:47:18:b3:af:a2:8a:
                    33:e1:58:59:3b:e2:87:cd:b7:a6:6c:c5:e7:30:da:
                    95:12:91:b3:4e:de:eb:91:a2:19:af:e4:d8:c3:60:
                    f0:d5:dd:63:67:46:2c:9c:ce:c5:d6:39:31:e2:4a:
                    dc:96:c4:ab:83:aa:20:d0:29:68:34:1c:a3:eb:86:
                    32:d8:4e:df:3a:c1:9e:68:39:e5:84:95:fa:8a:e2:
                    54:2e:80:a5:48:fc:49:7f:ca:c8:88:40:28:95:0a:
                    0e:fe:41:62:92:86:f3:e6:94:d7:31:79:29:89:fd:
                    ff:9d:d5:5d:81:ad:f0:6b:46:a3:69:18:02:27:b2:
                    e8:62:a1:0b:8c:87:d5:2c:c4:d4:de:ab:0e:12:26:
                    9b:aa:ba:7b:c8:bd:3e:76:d9:8b:a3:d8:19:3a:cd:
                    c5:94:7e:12:c2:5b:41:da:9e:1e:f6:45:69:91:45:
                    aa:e9:78:a9:f1:d0:d0:7b:d5:0d:d1:1b:00:7d:e1:
                    39:e7:e7:d7:62:8a:ca:7b:51:89:b1:df:4d:9f:2c:
                    d9:06:0d:a8:e9:27:47:56:6f:d1:6a:1d:0e:9e:75:
                    a9:5d:03:f9:a6:10:9c:be:36:3b:ba:a3:80:19:b3:
                    18:df:ab:77:b9:4a:07:e2:d6:f5:34:d0:e2:a5:c9:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B4:87:AB:1B:9E:27:F2:F3:81:F2:BE:F9:5F:A2:96:3C:74:F8:44
            X509v3 Authority Key Identifier:
                keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:98:ff:67:fd:a3:06:57:91:07:22:fb:86:4d:08:7f:6b:3f:
         dd:37:e3:44:c0:b3:58:b4:1d:77:1a:83:19:61:c2:57:d8:d7:
         91:9f:08:3d:42:67:d6:3f:76:18:66:40:c9:b1:69:df:b4:c6:
         34:52:93:9a:1b:83:3e:45:cf:bc:20:aa:28:56:0e:21:c1:74:
         ca:aa:ca:fc:35:d3:29:46:e2:34:c3:66:84:7a:d2:a4:01:d6:
         31:27:24:bb:a1:a1:f6:c1:10:21:fd:84:80:b5:6a:29:fb:b1:
         ed:d1:d3:67:81:88:98:e5:d5:e3:20:5d:a3:44:df:d5:1d:96:
         1d:b6:39:f7:12:1e:b6:4c:05:82:ad:17:d9:9d:93:f9:88:19:
         d0:78:29:ee:21:fe:91:0a:1c:8a:84:97:6c:70:89:c7:46:a0:
         49:cd:d1:33:3e:ab:3e:15:76:1d:7c:91:c1:8a:62:e6:91:2a:
         ba:54:87:b9:71:d2:f4:bd:a7:11:21:e3:62:fc:c7:64:c5:23:
         5c:bf:3f:2a:5f:15:fb:2f:0b:e5:1a:45:cc:9d:c3:b7:13:ef:
         ca:ca:3f:b5:32:19:9a:87:b6:77:20:e5:86:bf:26:0b:a9:6a:
         b8:72:dd:a6:a2:7c:a7:99:dd:33:37:35:1f:db:68:76:47:36:
         dd:23:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:16:20 2025 by rpki-client