Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
File:                     WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json)
Hash identifier:          JWZydv+4rcxW97IxocGRpBem91kPIJtUCbdi9ZOgIwA=
Subject key identifier:   4B:3F:86:B6:91:AC:66:64:B4:91:AD:25:5A:9F:4C:09:6D:9F:88:F6
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Certificate issuer:       /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial:       0197C56F1608D31727C7B67191C5D72363FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
Manifest number:          15BE
Signing time:             Tue 01 Jul 2025 10:01:21 +0000
Manifest this update:     Tue 01 Jul 2025 10:01:21 +0000
Manifest next update:     Wed 02 Jul 2025 10:01:21 +0000
Files and hashes:         1: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: dK9s2AV9XiSXCADleneYAlEb84Vr62R6FiZKe303gjA=)
                          2: xrn9wGcZNgBUBClFEOmA1ETirQc.roa (hash: pd4BjALDo2lB/niA3gPglIgN5zsXIWGcWxmGYdPS/DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:6f:16:08:d3:17:27:c7:b6:71:91:c5:d7:23:63:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
        Validity
            Not Before: Jul  1 10:01:21 2025 GMT
            Not After : Jul  2 10:01:21 2025 GMT
        Subject: CN=4b3f86b691ac6664b491ad255a9f4c096d9f88f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:0f:ec:de:2a:0c:00:55:a4:5e:b3:03:de:
                    12:5a:90:bf:7d:a0:11:55:e4:7e:3f:f2:05:06:d2:
                    9a:1a:de:23:b2:98:cc:0c:d8:77:40:f8:bc:64:7f:
                    a6:61:37:b1:8f:8f:90:8b:07:39:bc:94:b0:69:ab:
                    e6:a5:bb:d0:7f:b2:5e:80:47:56:c8:46:0f:98:4a:
                    28:b7:ce:e7:5d:17:f6:b4:b7:9d:99:47:ee:4d:b6:
                    50:64:0b:1e:bf:22:f2:4c:5f:15:3f:8f:3f:a2:0b:
                    d6:15:7f:24:4d:77:50:20:31:cc:43:94:5c:a0:d0:
                    46:af:a0:01:76:61:6a:11:f4:05:b3:90:34:b6:1e:
                    0e:62:91:7d:f2:38:7b:48:78:c1:ce:00:5e:41:2c:
                    32:e1:ae:62:ad:da:75:61:ae:27:8b:f1:a1:9e:aa:
                    ad:69:57:c7:c5:26:3b:60:1f:95:26:81:a8:21:fc:
                    b8:58:27:53:a8:41:ed:de:2a:5e:22:1e:a5:63:bb:
                    69:4e:d4:0e:f2:c7:19:5b:0a:97:1a:95:cb:0c:4d:
                    37:9c:c0:b3:43:17:71:aa:d8:2d:0b:b3:4f:fe:20:
                    e1:b7:cd:74:3b:25:c0:a9:ae:32:e1:fc:f2:bd:36:
                    03:cb:89:16:ab:ff:5e:cd:be:89:73:dd:ec:32:8e:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:86:B6:91:AC:66:64:B4:91:AD:25:5A:9F:4C:09:6D:9F:88:F6
            X509v3 Authority Key Identifier:
                keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b8:37:3c:b1:60:da:9e:1e:b5:67:75:c6:bb:d4:b1:eb:ca:
         0f:5c:eb:39:d6:f0:ca:ac:6d:b8:69:37:4c:f0:24:28:a5:ae:
         ce:9d:5a:44:25:67:f7:82:f3:a9:ed:c8:ec:a0:6a:9a:c9:79:
         97:48:82:3e:ac:0e:c7:6c:83:78:64:7f:7b:8a:01:de:54:c1:
         57:d8:a0:13:7a:80:e0:3f:dd:28:88:4c:3a:8c:48:db:86:2d:
         a5:ce:1b:b6:72:f8:42:7d:4e:e4:b1:60:52:06:77:ee:3d:96:
         fd:25:49:aa:d3:e2:8d:9d:58:70:bc:35:03:38:cf:dc:14:91:
         de:0d:4c:89:29:fc:31:c2:54:28:5f:39:61:cf:8e:70:52:5c:
         3b:f2:a8:0e:38:d0:e6:48:87:d0:0a:54:51:9c:ba:26:e2:cb:
         c8:2f:ef:86:f6:9a:37:41:95:aa:bd:1a:85:6c:7d:98:f9:69:
         be:39:be:19:ed:15:1d:3e:e1:a5:cd:78:86:32:e8:4b:fa:8b:
         9c:93:dd:12:cf:ae:79:d7:30:4c:8f:3c:85:a7:40:48:06:35:
         a8:4f:8c:d7:e4:e7:f2:2f:62:21:6c:97:e1:2e:3e:27:3f:70:
         54:ed:03:fe:b4:6a:09:2a:c4:37:1c:db:a4:72:ba:2b:62:7f:
         25:76:5d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:09:45 2025 by rpki-client