Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
File:                     WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft (raw, json)
Hash identifier:          5p141g5dqvBURwEd4OgJKN7/VsrW1iTfPNr+qJybVMg=
Subject key identifier:   04:88:BE:7C:5B:4C:57:D9:A8:6B:55:F9:4A:23:05:68:65:32:BA:88
Authority key identifier: 58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B
Certificate issuer:       /CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
Certificate serial:       01976A060F564C638E2D0FBCC9F7AE212AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
Manifest number:          02A6
Signing time:             Fri 13 Jun 2025 16:01:11 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:11 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:11 +0000
Files and hashes:         1: WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl (hash: qZj8Uf8Hh/ujnKl4TZufavX5GT5mRF6ueZHgMMZ+Nb8=)
                          2: Z2JDU3PNXto61tujLWtOdksDxYw.roa (hash: XDiLVtUbcUm1U7CtOsqMZFEyrN50eh3zLLtFQ3J984U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:06:0f:56:4c:63:8e:2d:0f:bc:c9:f7:ae:21:2a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
        Validity
            Not Before: Jun 13 16:01:11 2025 GMT
            Not After : Jun 14 16:01:11 2025 GMT
        Subject: CN=0488be7c5b4c57d9a86b55f94a2305686532ba88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:7b:4b:2e:ae:9f:c3:08:50:69:b7:bc:27:
                    9a:65:bb:3b:a3:38:6c:8c:a1:27:fc:c1:9b:16:35:
                    2f:ec:53:c8:3e:14:86:ae:e2:7b:40:bc:94:bb:0d:
                    18:50:6c:6f:39:fb:48:b3:d4:f8:17:ad:56:a8:37:
                    b0:22:5c:97:97:39:34:3b:42:39:a1:8f:74:48:39:
                    2f:c3:49:7b:b2:64:fa:11:cc:4b:56:bd:f0:fb:88:
                    6a:ef:c6:c5:54:09:42:98:c4:84:33:c2:96:99:5d:
                    25:bd:d6:de:25:93:2c:bd:86:95:a6:24:ed:9f:dd:
                    02:b0:14:6c:2f:b4:d8:c7:65:f0:bf:bb:0a:9d:b4:
                    fe:d7:0b:a9:ae:3e:b7:f2:d2:44:b2:cf:08:a3:20:
                    f8:cd:10:14:c4:ef:7f:05:64:b9:68:5d:8a:cd:11:
                    f7:2d:3f:2b:fa:c6:4d:60:64:08:4e:48:e2:0d:35:
                    36:e9:66:4a:a5:a4:0f:d2:64:29:04:b2:ca:17:ae:
                    b2:c5:ce:78:d0:e4:f4:5a:68:1d:d7:b4:f9:a2:42:
                    3c:7b:1d:aa:07:59:e2:c0:03:99:59:35:79:e9:fd:
                    10:9c:9b:9c:38:5f:05:e5:1a:3f:66:15:75:65:fc:
                    2f:c9:6f:13:99:a0:47:5e:cd:92:8d:1a:01:1f:15:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:88:BE:7C:5B:4C:57:D9:A8:6B:55:F9:4A:23:05:68:65:32:BA:88
            X509v3 Authority Key Identifier:
                keyid:58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:96:5e:37:74:a8:2e:a4:df:a6:3d:12:fa:fc:73:a8:20:00:
         dd:7e:19:23:c4:17:ab:af:24:b2:d4:3b:0d:8a:52:fb:0e:4c:
         93:d1:13:9a:9d:6c:63:a5:1f:5a:e1:fc:8c:dd:7c:51:7e:d9:
         63:e9:6e:a3:12:a3:d8:bd:87:5d:f5:9a:0c:1f:20:5c:99:4c:
         19:62:0f:cd:d7:f4:6e:d5:b7:bc:4b:a3:9b:ea:49:ed:38:2b:
         d9:32:e7:16:52:47:57:7d:38:c0:2a:72:02:ed:43:04:30:29:
         99:ae:73:d1:74:4b:05:22:2d:3d:f8:1b:72:e2:a2:6e:d7:c7:
         ab:37:b8:59:0b:71:a6:1d:2b:48:3b:5f:2a:0b:bb:7d:99:e8:
         c0:ad:df:72:25:bc:d2:d4:13:20:09:15:65:ab:e4:c9:b0:0d:
         14:2d:a8:7c:e9:83:21:b4:19:3d:be:97:07:df:08:59:ff:15:
         bf:e1:83:03:63:db:33:e2:55:13:9b:db:9c:cb:59:0b:07:26:
         d1:22:ff:a2:09:b6:ac:02:7e:b6:cd:75:d2:0d:70:8b:19:5d:
         73:0c:cd:17:b9:f9:41:bf:75:ad:81:af:44:a7:74:d0:75:66:
         9f:aa:97:b4:38:4a:9c:79:f1:41:cc:73:d6:55:7e:f9:35:88:
         dd:77:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:03 2025 by rpki-client