Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          gtDjxAishJhjLNGXnKFWloVUOm1g99iBygypfJMdw78=
Subject key identifier:   E6:54:F2:4E:4C:80:B1:DB:18:26:45:EF:85:B1:77:24:4C:06:37:ED
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       0197B745B9BF8A431E0A649715A12A12FB8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          056F
Signing time:             Sat 28 Jun 2025 16:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:29 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: h4cZN30Q8xjHrNrDrwQ0ZwKp+cc70mickypHz8X4H90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:b9:bf:8a:43:1e:0a:64:97:15:a1:2a:12:fb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Jun 28 16:01:29 2025 GMT
            Not After : Jun 29 16:01:29 2025 GMT
        Subject: CN=e654f24e4c80b1db182645ef85b177244c0637ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:e6:42:b3:4b:c7:93:ca:05:db:29:2d:66:
                    a9:ab:ab:e2:9a:d1:9d:41:7b:50:fa:ad:ba:2a:28:
                    1a:1f:1d:6f:85:3d:7a:b9:94:1f:df:c4:2b:07:a9:
                    38:f1:eb:3f:f9:fb:71:f4:8e:a8:ee:1c:6f:ce:55:
                    41:e2:3e:ac:9f:3b:41:c3:91:5b:fc:34:e4:1f:af:
                    69:29:b9:af:b2:1d:1e:5f:4d:10:55:d7:e2:e1:fa:
                    23:d0:b9:f5:e9:57:11:ec:82:d5:c2:12:1d:1b:b4:
                    2c:12:1c:ed:70:30:38:0f:c8:be:c6:8a:a1:21:48:
                    b6:6b:8e:e3:50:d4:5b:14:8e:45:ac:0a:12:e0:e3:
                    08:72:81:8b:39:3c:0e:dc:8a:75:74:13:58:7d:03:
                    84:d8:2a:4c:89:38:ec:6a:a5:ef:e9:43:f7:82:4b:
                    1f:d0:52:92:3b:f3:ff:25:12:0f:4b:81:79:12:ce:
                    2b:ad:d9:ff:05:14:aa:df:d9:43:68:9d:c5:19:12:
                    6b:96:47:09:2f:ed:17:04:9d:9a:3e:1e:2d:7e:a1:
                    00:43:2b:2d:45:60:fc:e2:5d:bf:ce:cb:4b:01:90:
                    d9:42:9e:c9:49:5c:e2:3f:99:76:33:52:b8:3b:c1:
                    61:5c:09:47:b0:15:13:5e:3b:07:8b:d3:4c:39:19:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:F2:4E:4C:80:B1:DB:18:26:45:EF:85:B1:77:24:4C:06:37:ED
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:3a:8a:72:07:e0:7f:60:58:2b:7e:ea:3d:57:26:36:f9:
         73:7e:b0:7d:07:81:2b:02:c2:f3:d9:37:3b:1c:55:d6:5b:99:
         21:17:10:54:e6:dc:23:7a:e6:fd:03:f3:5a:e6:10:e3:37:13:
         ce:fa:b2:40:c3:0f:78:53:41:ea:ca:df:3b:c8:f2:6b:b0:88:
         65:87:f3:97:ea:e5:d2:0c:c7:20:54:ff:c4:24:02:4f:76:17:
         ed:9d:2b:8d:fa:93:d9:92:65:57:7c:70:d2:21:b7:1c:99:9d:
         36:ab:cf:0b:90:ab:86:8a:ae:90:5c:41:90:26:7d:fc:2e:42:
         e7:42:f4:4d:59:c4:4a:3f:ec:99:3e:28:5b:2d:e7:79:4b:ef:
         e5:6b:e8:2c:a4:db:2f:75:5e:a1:d6:19:58:f4:1f:d5:dc:30:
         bb:2d:52:2e:0b:8f:f7:ae:0f:b9:8a:3b:32:e9:c0:8b:86:1d:
         34:03:a4:fb:32:1c:04:08:7d:57:6a:d6:64:be:c9:ad:10:b5:
         74:d4:77:f0:e6:38:30:ef:b7:23:00:36:c2:47:31:8d:71:00:
         55:1c:45:5a:50:1c:53:d6:ad:a4:6a:49:7a:8f:6e:45:6d:79:
         57:41:89:33:2c:65:2c:5e:c3:63:63:75:74:a8:23:fb:a9:c7:
         26:cb:27:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:34 2025 by rpki-client