Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File:                     WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier:          6B6EgBBt3OJFJE4qoj/gPHXihvYJ+gt6O3lZge2Xsos=
Subject key identifier:   A7:ED:4E:30:C3:30:15:C5:19:7E:98:B6:79:A3:19:A5:FF:61:70:CF
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer:       /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial:       01976E1920D4F163BE333EE19D69D8B3B9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number:          12B4
Signing time:             Sat 14 Jun 2025 11:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:29 +0000
Files and hashes:         1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: Vdssv5J4+e7w3sm4BUL4eFaxin5u7ef9w0dqwQ9xBMs=)
                          2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:20:d4:f1:63:be:33:3e:e1:9d:69:d8:b3:b9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
        Validity
            Not Before: Jun 14 11:00:29 2025 GMT
            Not After : Jun 15 11:00:29 2025 GMT
        Subject: CN=a7ed4e30c33015c5197e98b679a319a5ff6170cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:9d:d7:66:37:2b:de:c4:38:71:a3:75:1f:
                    54:8f:ad:39:3d:3a:e9:63:33:bd:0c:fa:5d:46:bc:
                    73:42:a4:15:5b:65:ce:a8:6b:fe:86:22:f6:9c:aa:
                    cf:cf:be:13:af:a8:f4:a3:9c:1d:28:19:27:42:67:
                    1a:6f:35:4b:13:04:09:7a:a2:8c:0f:0d:b8:69:26:
                    cc:50:c1:e8:65:df:4e:ef:20:bb:43:71:cc:09:e8:
                    ef:d9:a8:81:4c:64:91:67:4b:c1:25:5e:f7:46:dc:
                    a8:e7:a7:82:0d:4a:22:b9:2a:32:d6:2f:39:66:c4:
                    92:0b:12:e5:7c:e2:3a:9e:83:7d:71:b4:57:1a:86:
                    2a:6e:99:d9:e6:79:44:2d:ee:f2:79:44:bb:e0:c7:
                    b5:c8:5f:97:5a:ca:c0:e5:c6:15:9f:fb:24:e2:0c:
                    77:03:7f:90:7b:87:d7:37:b9:c9:b4:3e:3b:d5:3f:
                    e6:9f:c5:c4:a6:bb:41:da:25:00:56:f0:bc:a2:e3:
                    40:c2:ca:aa:73:58:60:0d:9f:27:31:15:9a:f2:7c:
                    bf:a9:58:ad:03:61:14:e9:a2:e9:a9:62:e8:e7:fa:
                    b2:0f:9d:7b:28:90:90:69:06:45:17:74:13:8f:f9:
                    a6:ab:e9:94:8f:37:87:2b:d7:7e:71:4d:0a:ab:a6:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:ED:4E:30:C3:30:15:C5:19:7E:98:B6:79:A3:19:A5:FF:61:70:CF
            X509v3 Authority Key Identifier:
                keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:17:c9:6c:eb:97:2f:12:c0:63:85:14:1a:6b:5e:e1:73:63:
         54:e1:30:f3:76:3a:0e:0e:bd:8d:cd:43:af:b4:52:3d:77:3b:
         cc:bc:0e:51:96:b8:41:94:1d:29:74:88:5b:ef:b9:6b:ed:62:
         8a:b8:15:e5:44:50:aa:2e:08:e5:ed:bc:ad:63:b9:70:47:0f:
         8d:be:11:07:56:81:f5:43:fc:8d:ca:8c:ae:1c:75:7a:dd:1f:
         f1:78:c5:86:17:84:52:74:b5:74:fd:5b:03:f4:a6:3b:ef:4f:
         8c:18:bf:7a:40:6f:3e:e5:5e:c8:3e:d9:15:bc:10:ed:25:96:
         64:f6:f7:3d:79:2c:a8:2b:28:7a:7a:23:16:2a:3c:ed:eb:d9:
         61:67:8e:19:05:a7:47:52:2c:f7:5e:84:8a:a9:93:66:8e:03:
         6d:35:15:f3:a8:06:3b:69:89:1f:86:8a:03:96:d2:5e:6d:6f:
         46:83:64:53:ae:5b:5c:b7:65:06:fc:dc:ad:c8:ab:d5:ca:47:
         42:f9:1e:18:1b:41:10:c1:1f:ff:88:f2:5b:ab:10:57:8f:36:
         63:f8:cc:c7:3c:03:c1:7b:a7:3e:76:c7:1f:1b:52:9d:9d:0f:
         da:65:5f:b8:d2:32:ef:e3:a1:91:1c:86:c1:d7:83:33:bd:42:
         54:0c:23:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduGSDU8WO+Mz7hnWnYs7m1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGQ0MmFiMzQ2MDI3OTcwOWMxMzRiNTcwZjc2ZTM0ZTRk
OTViOTEwHhcNMjUwNjE0MTEwMDI5WhcNMjUwNjE1MTEwMDI5WjAzMTEwLwYDVQQD
EyhhN2VkNGUzMGMzMzAxNWM1MTk3ZTk4YjY3OWEzMTlhNWZmNjE3MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX6d12Y3K97EOHGjdR9Uj605PTrp
YzO9DPpdRrxzQqQVW2XOqGv+hiL2nKrPz74Tr6j0o5wdKBknQmcabzVLEwQJeqKM
Dw24aSbMUMHoZd9O7yC7Q3HMCejv2aiBTGSRZ0vBJV73Rtyo56eCDUoiuSoy1i85
ZsSSCxLlfOI6noN9cbRXGoYqbpnZ5nlELe7yeUS74Me1yF+XWsrA5cYVn/sk4gx3
A3+Qe4fXN7nJtD471T/mn8XEprtB2iUAVvC8ouNAwsqqc1hgDZ8nMRWa8ny/qVit
A2EU6aLpqWLo5/qyD517KJCQaQZFF3QTj/mmq+mUjzeHK9d+cU0Kq6ZUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKftTjDDMBXFGX6YtnmjGaX/YXDPMB8GA1UdIwQY
MBaAFFjdQqs0YCeXCcE0tXD3bjTk2VuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgt
NmUzMTM0N2QwNGQ5LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgtNmUzMTM0N2QwNGQ5
LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohfJbOuX
LxLAY4UUGmte4XNjVOEw83Y6Dg69jc1Dr7RSPXc7zLwOUZa4QZQdKXSIW++5a+1i
irgV5URQqi4I5e28rWO5cEcPjb4RB1aB9UP8jcqMrhx1et0f8XjFhheEUnS1dP1b
A/SmO+9PjBi/ekBvPuVeyD7ZFbwQ7SWWZPb3PXksqCsoenojFio87evZYWeOGQWn
R1Is916EiqmTZo4DbTUV86gGO2mJH4aKA5bSXm1vRoNkU65bXLdlBvzcrcir1cpH
QvkeGBtBEMEf/4jyW6sQV482Y/jMxzwDwXunPnbHHxtSnZ0P2mVfuNIy7+OhkRyG
wdeDM71CVAwjvw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:49:53 2025 by rpki-client