Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File:                     WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier:          +oVv97oZULB+yB7eHI2MdI5A71Et30pJqEnpWgHB1cQ=
Subject key identifier:   8F:B4:B0:3D:B3:61:8D:6E:A7:40:7E:0D:C4:A5:A0:68:BF:49:15:9E
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer:       /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial:       0197B77CBC3A5E0B2CF10B961F8C1BCE7D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number:          0886
Signing time:             Sat 28 Jun 2025 17:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:34 +0000
Files and hashes:         1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: McxDlSLSCiSvi1rw6xkWzucRDFli8nxYPMY0qjRkTyE=)
                          2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:bc:3a:5e:0b:2c:f1:0b:96:1f:8c:1b:ce:7d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
        Validity
            Not Before: Jun 28 17:01:34 2025 GMT
            Not After : Jun 29 17:01:34 2025 GMT
        Subject: CN=8fb4b03db3618d6ea7407e0dc4a5a068bf49159e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:4e:59:22:a3:76:b9:f3:bc:09:0b:50:ba:
                    cd:71:66:b3:0c:87:0d:27:50:2c:d5:29:8b:5e:4e:
                    aa:3d:1f:01:51:a9:17:17:88:a1:99:50:1c:0e:28:
                    35:3f:7b:1c:cd:3b:87:9c:94:ee:bd:5f:45:19:8a:
                    ce:ca:6c:96:3b:74:56:50:ed:8b:c0:fa:d7:1b:40:
                    c7:2c:f7:11:30:b2:5b:47:14:04:d3:3a:31:bd:5e:
                    02:de:7b:3b:01:11:1c:82:73:b3:c3:4b:64:50:dd:
                    d4:6f:95:56:b9:01:39:49:fe:d7:e9:70:26:4b:ed:
                    50:20:86:0b:d1:b1:cd:22:08:55:1a:35:7d:e7:6f:
                    47:85:4f:bc:16:13:13:11:a2:99:bd:ab:3b:ac:b8:
                    f8:25:74:ff:84:a1:eb:71:1d:6c:58:54:60:03:3d:
                    db:dd:99:4b:c7:05:54:c8:2c:5c:dd:a3:57:7a:b5:
                    26:b6:c4:45:11:eb:ec:e8:5b:ba:4b:28:cc:f0:7c:
                    71:f6:fc:d0:54:65:2b:2f:bd:63:b5:33:d7:f7:09:
                    19:7d:a7:11:6c:de:cc:3c:07:25:61:3a:b1:92:5e:
                    ae:c2:ed:25:84:81:d6:2f:40:62:a4:fc:34:54:05:
                    6a:fa:70:5d:9a:f6:2b:b8:d7:68:1b:51:4f:c8:b2:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B4:B0:3D:B3:61:8D:6E:A7:40:7E:0D:C4:A5:A0:68:BF:49:15:9E
            X509v3 Authority Key Identifier:
                keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:3e:b1:c2:74:bf:4c:c2:1d:ca:2d:1b:2f:65:83:07:8c:73:
         df:1f:08:ff:f2:8f:c7:e5:4c:fd:d1:6a:48:ea:87:30:c9:15:
         a5:0d:c9:51:d2:9c:54:48:d5:c4:90:db:73:0a:91:12:85:d5:
         9e:e1:20:91:7f:47:72:d4:1d:51:58:5e:18:48:c2:04:ea:de:
         aa:5e:20:17:d3:71:6a:2e:1a:c0:96:8c:b7:94:74:4f:ef:c7:
         72:c4:4e:6a:e9:39:39:25:9f:96:6d:16:51:77:a6:bb:6f:e2:
         24:72:d4:f5:a2:2a:37:19:82:11:18:4f:09:f7:f7:5a:4c:fa:
         d7:1a:0d:85:58:bd:17:24:8b:12:6c:df:b1:2c:95:b3:dd:50:
         a3:ea:25:82:54:e9:87:33:e7:df:4d:db:08:93:e0:b4:2d:e0:
         12:2e:a3:79:9c:6f:45:e6:62:ee:21:71:c3:6b:e6:36:c0:2e:
         11:20:6e:8d:f1:06:18:15:62:6b:ca:40:5f:cf:7a:ae:b5:47:
         10:b2:06:6a:9c:b9:a5:7b:3b:3f:ed:fe:41:53:85:ad:76:a6:
         82:ca:74:ba:79:ea:43:4b:b9:5b:5e:4d:7b:dd:c3:cb:cd:4f:
         b1:4e:23:01:bb:01:0b:b5:e3:2d:d2:77:9b:b8:74:83:6f:4d:
         26:c6:d2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:10 2025 by rpki-client