Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
File:                     WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json)
Hash identifier:          DSdj8NS7yeu8DnmFykMVE64Aye0UcEQGYANAI8rPXUI=
Subject key identifier:   A3:E3:1E:96:10:D5:C1:AD:2C:98:E9:FA:DE:F2:AB:6E:B8:A8:A2:58
Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Certificate issuer:       /CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Certificate serial:       0197B6A072BF2ECBD942C2EE688BED95D9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
Manifest number:          0D56
Signing time:             Sat 28 Jun 2025 13:00:57 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:57 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:57 +0000
Files and hashes:         1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: LqMnytt/nkOnL2P+j2TLZ10rFpkddaiB18EQh95dzdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:72:bf:2e:cb:d9:42:c2:ee:68:8b:ed:95:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
        Validity
            Not Before: Jun 28 13:00:57 2025 GMT
            Not After : Jun 29 13:00:57 2025 GMT
        Subject: CN=a3e31e9610d5c1ad2c98e9fadef2ab6eb8a8a258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:84:80:b2:4b:53:9c:7e:01:49:cd:1d:71:
                    3f:f5:d7:ef:ff:0b:73:e7:74:0f:fc:88:b6:f3:2a:
                    e9:f9:b9:d0:b0:1a:7c:86:45:aa:4c:8c:26:a5:9b:
                    d9:58:86:5b:bd:e1:11:a0:c9:f1:a1:19:92:ca:f9:
                    1d:99:80:b1:f3:d5:e0:ac:96:04:34:f0:20:21:8d:
                    12:50:6e:27:43:fb:6a:1b:e7:16:95:e3:38:66:ec:
                    2e:31:5a:60:8c:09:ef:7c:d5:a7:cb:b5:6c:26:01:
                    e8:4b:26:c6:8f:c2:48:5a:8e:34:dc:93:18:36:3a:
                    33:b4:27:7a:18:1c:d8:3a:09:19:06:9e:27:2a:80:
                    9d:28:1e:dd:e9:2b:f2:30:35:3f:6f:c5:ef:18:3c:
                    cc:7d:a1:b8:1d:ba:31:17:71:b9:16:bd:e9:d7:62:
                    54:0d:76:0b:56:2f:67:9b:62:42:65:a6:cd:58:7e:
                    f2:f3:a0:31:1f:38:82:b8:6b:06:2e:9f:42:b5:df:
                    af:38:fb:8e:00:9b:6f:25:00:c2:a1:86:f1:7a:06:
                    4e:ed:4c:15:1c:73:00:87:dd:11:c0:32:2e:e0:15:
                    0b:d6:50:91:06:31:d3:13:bf:b2:18:05:cb:d0:86:
                    ea:ee:7f:f6:7c:27:80:13:57:f7:f7:e9:14:87:93:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E3:1E:96:10:D5:C1:AD:2C:98:E9:FA:DE:F2:AB:6E:B8:A8:A2:58
            X509v3 Authority Key Identifier:
                keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:23:41:a5:46:57:a1:c4:fc:28:20:64:0d:3b:c8:d2:7a:
         c8:7d:f1:5b:4e:29:7a:56:de:e9:e3:f8:37:df:a9:d7:4e:cc:
         a4:3e:de:80:fd:cc:d3:ee:cd:81:43:e9:b1:a0:e0:cb:ea:15:
         11:16:39:f1:ac:e2:83:fa:98:39:58:f7:55:50:2b:7e:d6:48:
         13:8d:f3:9c:80:d5:6c:e8:94:fe:64:3c:1b:8a:c6:f7:17:9c:
         02:eb:55:a4:c9:81:f6:46:c1:0c:5b:0b:9d:e4:cf:3c:ab:f7:
         d1:ef:03:45:a7:7f:6c:20:99:4c:c3:1c:5c:d2:bc:cb:41:27:
         7d:f3:79:76:aa:1b:98:48:1f:56:c4:7c:f5:b1:d7:ee:e6:ac:
         12:7e:81:1c:c3:f6:07:b3:1c:3c:1a:b6:20:37:ca:5d:82:55:
         45:4e:a2:fe:66:7c:8d:9a:a7:f5:64:2f:c6:7f:fd:53:9d:ea:
         33:7e:9d:17:74:b0:5b:c9:15:10:c8:85:55:15:4c:3a:03:82:
         1a:40:ee:e6:79:f4:a5:2d:bf:8f:24:13:76:2c:33:58:0d:30:
         2a:f3:aa:ee:08:b0:f6:7b:44:99:0f:8a:34:5b:d5:47:9c:43:
         67:8c:d7:35:1f:1e:bd:f4:ec:79:a9:95:be:e2:3d:45:05:51:
         a7:26:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:39 2025 by rpki-client