Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
File:                     WLPteKcQZof2-2jvIG7dzw696bM.mft (raw, json)
Hash identifier:          9FbiFLNYBD7FNn19k3yRp1Km35npngjNSgPuPT2zQqE=
Subject key identifier:   73:81:9A:9D:3A:A7:03:54:5B:63:0E:1B:30:AA:A3:63:89:32:7B:5E
Authority key identifier: 58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3
Certificate issuer:       /CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
Certificate serial:       01977452393A15CD5F69656EE17CFAB17349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
Manifest number:          0A8D
Signing time:             Sun 15 Jun 2025 16:00:35 +0000
Manifest this update:     Sun 15 Jun 2025 16:00:35 +0000
Manifest next update:     Mon 16 Jun 2025 16:00:35 +0000
Files and hashes:         1: WLPteKcQZof2-2jvIG7dzw696bM.crl (hash: qInNSzWDD+/DUnodonYi/zoR/+VCBNPJmCVoCJR3gXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:52:39:3a:15:cd:5f:69:65:6e:e1:7c:fa:b1:73:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
        Validity
            Not Before: Jun 15 16:00:35 2025 GMT
            Not After : Jun 16 16:00:35 2025 GMT
        Subject: CN=73819a9d3aa703545b630e1b30aaa36389327b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:db:d7:f2:8c:fb:21:f4:2f:d3:e6:1b:8d:
                    2b:ef:c0:08:70:8b:fb:6c:73:1f:92:04:0d:33:e7:
                    3d:0f:57:20:a4:06:e4:58:10:43:d9:e5:fb:47:66:
                    15:79:1f:7b:e5:cc:4a:38:1a:45:97:bd:f7:51:1e:
                    3c:40:84:46:e2:34:0b:a4:25:9f:42:e6:06:e0:bc:
                    7f:54:a0:b9:f6:72:d6:7b:df:02:da:31:2b:92:25:
                    bf:72:57:d0:bb:61:1e:34:e0:7a:78:3d:1a:88:13:
                    cd:89:f2:58:d7:51:39:14:6e:4a:bd:11:94:fb:d7:
                    6c:43:d8:8c:14:a0:d0:6a:b8:a9:8c:77:65:cd:82:
                    8a:73:31:61:20:16:e4:0d:9c:f7:61:51:45:22:db:
                    2c:75:26:a8:5c:8e:c6:bf:df:ce:f3:1f:3d:79:06:
                    97:4b:39:d9:13:2c:0f:08:11:bb:94:98:d7:02:27:
                    b2:a4:13:c1:a4:37:97:00:35:00:ce:10:c6:a9:2e:
                    d2:4e:38:f1:90:a0:56:9b:03:65:7e:19:98:48:60:
                    01:95:22:22:5a:28:00:25:b6:8e:01:f7:c7:e4:ab:
                    ae:9b:31:b2:7c:08:55:ad:0a:96:5d:e3:37:9c:5d:
                    72:2a:3c:fb:6c:ed:f2:e6:cd:59:fc:8a:f9:b8:2b:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:81:9A:9D:3A:A7:03:54:5B:63:0E:1B:30:AA:A3:63:89:32:7B:5E
            X509v3 Authority Key Identifier:
                keyid:58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:23:ae:78:77:0e:08:35:d9:8d:f8:87:a6:74:c2:9e:03:c9:
         73:ae:24:e8:d0:5d:da:e7:32:1f:76:3b:67:06:7e:73:1b:ec:
         33:7c:ac:06:25:fa:ea:0b:92:c8:a8:05:a4:8e:41:34:09:3e:
         1e:82:61:97:6e:75:6a:76:bd:db:fa:e7:89:55:67:96:af:cc:
         81:e3:a3:5b:75:19:6a:8e:63:27:f2:78:48:c5:63:77:ea:bf:
         d8:61:60:00:a1:2a:d4:1e:3f:3a:96:92:a2:6c:39:2d:d9:95:
         95:8c:c8:78:1d:1d:c2:aa:28:be:4a:8e:2c:fa:bb:cc:3b:cc:
         ac:54:64:30:fa:fe:01:b5:f1:f8:77:24:53:a2:9e:a5:54:ae:
         b3:65:1a:cc:ba:da:76:70:63:3e:37:93:3d:93:56:8f:77:51:
         88:54:0a:13:c7:2d:0c:ca:48:93:f1:13:75:b6:bc:6c:89:69:
         5f:28:3a:a4:50:19:94:af:f9:47:e3:fb:18:d5:6f:79:da:3d:
         ae:c6:25:b6:cf:8c:ff:34:ee:28:9f:e8:2e:9c:ab:ce:85:b8:
         32:9a:85:21:c4:2c:62:50:67:9f:1e:f9:bd:13:39:29:1c:6a:
         da:e2:08:be:98:2a:8f:0e:7b:3a:74:8b:8b:ef:ac:5f:42:16:
         17:37:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:21:34 2025 by rpki-client