Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
File:                     WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json)
Hash identifier:          8OtjYjXi04vlJALyG61FQEJE3B2kIq7BqVgPhigdQng=
Subject key identifier:   48:BE:B9:2B:39:61:63:4D:B5:53:EC:4B:2C:8E:44:A4:38:8C:F9:50
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Certificate issuer:       /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial:       01976E86F3669F6FD5E97145C91A08095C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 13:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:27 +0000
Files and hashes:         1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=)
                          2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: CgxTF2s09rGd9Yx8fdy4EflRpptN/eqSI8QYzVda7ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:86:f3:66:9f:6f:d5:e9:71:45:c9:1a:08:09:5c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
        Validity
            Not Before: Jun 14 13:00:27 2025 GMT
            Not After : Jun 15 13:00:27 2025 GMT
        Subject: CN=48beb92b3961634db553ec4b2c8e44a4388cf950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:9b:66:23:82:60:5b:80:e6:e9:90:c3:be:
                    82:6c:96:68:52:fe:65:34:bf:df:10:e7:34:23:e4:
                    f6:0a:34:7e:ef:58:d1:ab:b2:ad:8a:6e:b1:ad:a0:
                    7f:85:c1:57:99:19:8d:73:76:b6:c2:c8:5d:ba:95:
                    33:16:47:04:13:a3:7b:ff:4d:1d:20:76:2f:21:4e:
                    9e:87:47:16:90:00:8f:b6:3f:62:c9:6f:f5:ef:22:
                    8b:12:f6:da:95:18:56:78:46:cc:8e:8d:03:d7:83:
                    1d:f5:37:43:28:24:6f:a2:4e:a3:6e:2a:6e:99:b1:
                    2f:56:51:c4:67:a8:1b:6e:ec:81:68:78:9e:c7:bb:
                    77:ad:c0:a4:5f:bf:58:9f:76:d6:9e:15:3e:3f:56:
                    bd:7f:5d:85:f1:1a:70:33:04:b3:0f:b8:72:f0:e6:
                    98:c5:f9:3a:f3:1f:eb:66:d2:36:63:4a:af:9f:58:
                    0f:6b:7b:c3:f8:29:61:cd:69:ce:64:60:96:91:6c:
                    db:2d:d7:e6:45:94:e4:24:47:5f:cb:84:62:41:b6:
                    39:b0:0a:fb:86:13:54:94:f7:64:ac:28:b6:29:e3:
                    4c:57:2f:20:5d:bc:58:5c:d2:e8:b5:70:99:63:46:
                    b7:a1:fe:96:e4:9a:17:ef:82:b4:f5:3c:cd:fb:2a:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BE:B9:2B:39:61:63:4D:B5:53:EC:4B:2C:8E:44:A4:38:8C:F9:50
            X509v3 Authority Key Identifier:
                keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8e:d8:03:62:a3:91:89:25:14:c1:3e:18:b7:da:80:cd:d2:
         17:24:aa:8d:d9:1c:4a:71:85:68:c7:b8:bc:89:a7:52:87:65:
         84:b4:9b:3b:1b:ad:bc:9b:ee:1b:3d:95:c4:e9:6f:bf:d2:ab:
         98:d6:4b:02:3c:d7:b1:cf:a7:80:6c:7c:c3:47:2e:3c:06:5e:
         6c:2e:13:fd:a2:16:76:4a:25:89:02:ca:f8:eb:fb:25:85:fa:
         e4:e3:a8:d7:f5:c0:fd:f9:af:36:f9:29:58:17:47:36:2b:90:
         ad:d6:ce:52:43:e6:1b:33:70:40:25:5a:13:9a:74:0a:02:5f:
         aa:98:95:59:39:10:38:cd:ed:05:0b:cb:9f:fc:eb:8f:56:92:
         d7:b0:c4:ae:7a:4b:c3:a3:98:a8:b2:fa:4a:d1:27:f2:b0:d6:
         b3:ed:91:54:17:55:cd:b6:9c:e6:a5:46:2c:1c:31:bb:47:81:
         2b:da:65:63:23:76:1d:42:9f:8d:53:dc:f7:96:46:aa:d0:d1:
         43:67:cf:d0:f1:7b:3d:19:89:33:23:d4:10:ae:20:7d:47:89:
         99:16:a0:07:c5:18:fb:a5:68:13:6f:7e:df:a8:41:17:c8:cd:
         3a:3f:07:8c:ab:5a:92:35:42:88:e6:5e:a9:f4:f8:35:51:99:
         a8:9c:79:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:34 2025 by rpki-client