Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File:                     WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier:          D9zb2grinTCKWGD+tpNEDw9WvA2CViPeSM9AQrfmCFc=
Subject key identifier:   89:9A:A7:60:3D:2E:BB:CE:F7:8E:B8:5A:5B:B4:6A:93:17:9E:D3:1A
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer:       /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial:       0197B7EAB23322843FF20E1197D550412053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number:          1035
Signing time:             Sat 28 Jun 2025 19:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:40 +0000
Files and hashes:         1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: oU3EnlDmcTO8VykG3KqJLIhD6vq/nAZUvuYdEW7o/+Y=)
                          2: sFIXRQJn6gWqFtVA57SXc1bI7fY.roa (hash: t96rDa/4w2snbHkniKh0udHKc89Z39dZL4JpEk5b1qw=)
                          3: shlWOO7Z9iMRimNwtzvMpj0xCOw.roa (hash: OGVs5eP2ukqgeMF6xh4aW39jWErAU5TSB9h+2E53gSo=)
                          4: wpo37Wm8Zrjq6WOjV-Utovw4RnU.roa (hash: 3lxmCw9oNQcd5iapsWAsPZTQ1ZkWY5buGodasHlf5rI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:b2:33:22:84:3f:f2:0e:11:97:d5:50:41:20:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
        Validity
            Not Before: Jun 28 19:01:40 2025 GMT
            Not After : Jun 29 19:01:40 2025 GMT
        Subject: CN=899aa7603d2ebbcef78eb85a5bb46a93179ed31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:19:73:21:ed:a1:db:f0:e4:01:3f:77:f1:
                    ee:18:92:e9:e7:52:a4:2e:81:b4:5d:d8:c0:66:a9:
                    de:06:48:b6:52:5b:0b:86:82:5f:72:72:44:d0:5c:
                    97:85:83:ff:c3:2e:28:8b:be:3e:46:9a:f9:4e:a3:
                    29:17:4c:23:00:6c:7c:1f:ef:10:25:24:be:4b:f2:
                    1b:6c:80:16:5b:c1:b3:83:b9:ff:88:87:2d:47:83:
                    5e:92:fa:2b:b3:8e:23:93:a2:e9:88:f8:95:2a:47:
                    7f:0d:0d:e1:e9:a6:27:ec:45:59:8a:2d:50:00:02:
                    cc:a3:45:01:4a:8f:35:10:31:14:96:cf:a0:32:b5:
                    47:f2:b0:4f:fa:d0:34:7b:d0:ca:b5:e2:5b:a6:c2:
                    33:22:59:2d:09:b1:28:95:1e:e6:ad:f0:e4:62:eb:
                    e6:16:8e:4e:58:e6:bb:b6:f6:59:a6:f1:30:45:ce:
                    f7:72:2c:c3:17:80:97:a0:f1:eb:64:08:fe:f2:e8:
                    ce:b8:7a:a3:a0:d5:c9:3f:f6:4c:ad:0c:4b:fb:a9:
                    42:87:c4:e9:fd:d6:de:f8:39:1e:4a:29:44:96:3b:
                    d8:e1:c6:e1:cf:02:6f:f4:6c:ca:bc:05:2c:50:af:
                    5a:19:79:50:01:36:5e:ae:f9:66:c0:e7:37:aa:8b:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9A:A7:60:3D:2E:BB:CE:F7:8E:B8:5A:5B:B4:6A:93:17:9E:D3:1A
            X509v3 Authority Key Identifier:
                keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:35:47:74:9e:60:ea:2d:c3:da:66:57:5e:c0:39:06:bb:28:
         61:58:2d:7f:c5:55:57:ed:da:f2:31:8c:35:c4:5b:dd:d0:c5:
         f7:48:0b:77:b4:c9:0d:3c:de:39:35:7d:a0:73:e7:c5:bf:c5:
         75:08:9a:c9:9c:db:e5:a6:d9:98:8f:43:dc:d4:08:4e:c7:fa:
         a7:2d:73:80:2a:8f:4b:84:ca:75:3a:0d:2e:f6:e9:e7:99:5a:
         93:63:ab:c3:69:75:7d:f1:59:b3:84:1c:f6:ac:41:4a:2c:ed:
         cb:56:57:f1:93:2a:8f:93:45:42:bf:bf:16:0e:be:01:25:67:
         33:a2:4e:80:9b:a5:f7:63:b3:0f:78:f6:c0:a1:73:5f:cb:85:
         40:b0:82:f5:2c:12:c4:c1:eb:b0:10:39:27:e8:4a:86:bc:c7:
         fd:cc:a0:a8:c1:59:1f:9c:a7:f8:6c:a8:7a:fe:77:d8:a3:37:
         55:ab:b0:0f:89:67:bf:46:e9:2a:d9:ec:a2:eb:cc:5a:72:c9:
         0d:60:f0:48:ee:bc:8d:20:58:32:90:cd:bc:f1:fa:a3:d8:64:
         5e:a2:e9:da:84:c4:46:f7:b4:95:17:7f:0b:2a:be:ac:e0:a2:
         bb:ed:53:67:4e:ae:80:a0:69:20:f4:e2:e4:11:e5:01:58:d5:
         8b:dc:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:40 2025 by rpki-client