Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
File:                     WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json)
Hash identifier:          kGFxK0ut2Xo8nk3OxPKbVVJBnyKl54bM5SfDKnHhJ3s=
Subject key identifier:   41:8A:32:67:67:BD:32:02:69:E2:36:25:39:6F:DA:C5:07:8F:BA:70
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Certificate issuer:       /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial:       0197B6D75DF92DE659BF4253B5780802B85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
Manifest number:          0C58
Signing time:             Sat 28 Jun 2025 14:00:57 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:57 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:57 +0000
Files and hashes:         1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: AyDUzhq52EOKQMQrWH0FPvfwRMgkQUovB2zHcwQ9Ftw=)
                          2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:5d:f9:2d:e6:59:bf:42:53:b5:78:08:02:b8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
        Validity
            Not Before: Jun 28 14:00:57 2025 GMT
            Not After : Jun 29 14:00:57 2025 GMT
        Subject: CN=418a326767bd320269e23625396fdac5078fba70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:51:cc:36:42:75:f5:1a:d8:a0:72:09:65:
                    2c:22:3b:4c:cd:9c:60:fc:74:1d:ff:83:53:9e:ba:
                    57:58:b6:15:e5:61:29:bd:32:f8:e4:90:17:5b:cb:
                    33:66:df:46:89:f6:a6:e3:06:f1:33:ef:52:58:70:
                    0a:5b:42:a3:c8:33:45:b0:25:04:7e:a0:ea:76:72:
                    c0:18:65:f7:6b:ff:59:ee:00:f9:a2:6d:32:0b:72:
                    9e:9d:9e:83:4c:dd:c9:14:f9:5e:44:ad:2e:83:35:
                    d2:c5:e8:62:0e:12:0a:b6:bd:3b:29:a2:c0:aa:63:
                    46:4b:b4:38:43:24:eb:27:4f:1d:94:0f:70:d9:76:
                    cf:9f:f0:5c:fb:b3:f4:60:6e:cd:48:bf:48:99:dd:
                    05:35:25:d7:ea:f4:4b:fb:3a:a3:0c:46:d6:0e:d8:
                    f1:30:1c:c9:9f:91:21:c1:b8:21:e2:65:e4:06:26:
                    7a:3e:32:52:3c:b3:63:be:06:c4:6d:ed:04:df:2e:
                    99:60:76:4a:f5:42:02:27:fa:e5:b2:86:34:d4:97:
                    ec:9a:02:17:3f:04:01:f9:b6:d7:40:cf:a8:3e:ec:
                    8e:ef:4a:ab:6e:00:9c:5b:69:6c:14:71:0e:6a:c0:
                    dc:27:54:b7:7e:4b:43:fd:31:6e:0b:d3:a5:82:d0:
                    3b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8A:32:67:67:BD:32:02:69:E2:36:25:39:6F:DA:C5:07:8F:BA:70
            X509v3 Authority Key Identifier:
                keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:98:c8:47:39:ee:d0:09:3c:12:c4:bf:93:8c:2b:19:24:a0:
         93:89:75:03:bf:0d:ed:7d:fe:32:92:7b:61:88:7e:15:f7:9c:
         d2:06:2f:7f:36:68:4a:59:25:01:86:09:63:d3:f6:e3:bc:d7:
         19:99:47:69:9d:eb:0b:cf:af:b6:d2:e5:12:3a:c0:8e:3e:cd:
         e8:ba:92:df:0d:9e:d5:e3:f4:a4:20:c4:2b:b7:4d:5b:55:40:
         cd:b7:ce:7f:77:d1:1a:b7:6d:e1:ba:21:32:31:ab:69:41:07:
         a1:83:e6:2d:8b:e4:50:3d:00:63:77:9e:d2:c2:3e:99:f4:20:
         b2:77:59:91:41:60:00:f3:ae:ac:06:d8:58:ec:f7:e9:e7:c5:
         ea:de:45:bd:28:d2:6a:6e:12:21:42:1f:dd:5f:7e:77:d0:95:
         ee:87:ad:bf:c1:0a:2f:85:4e:d1:8a:f0:5e:2a:96:db:10:f7:
         f1:3a:ed:e3:0b:e0:ae:c9:4f:90:9c:f1:c8:86:b3:c2:2b:cb:
         6b:a7:0d:11:5b:17:c7:ea:bd:13:06:0f:36:77:3e:61:14:97:
         f2:38:33:77:dc:1b:26:79:43:a8:1c:d5:9f:ed:3f:ba:03:65:
         d1:19:fc:1a:8f:5d:0e:18:6b:b6:56:43:3a:98:e6:a2:7d:ef:
         5d:13:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:54 2025 by rpki-client