Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
File:                     WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json)
Hash identifier:          0HPlI3OXiGnlaI04IIxuJmctDireG3Rtck5260Twx4s=
Subject key identifier:   3A:CB:27:A3:38:C2:DD:C8:37:70:BE:29:8B:37:90:4C:59:75:69:04
Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Certificate issuer:       /CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Certificate serial:       01969E9A6C90316C2142DDDD5FD8C70B8860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
Manifest number:          0CC5
Signing time:             Mon 05 May 2025 04:00:42 +0000
Manifest this update:     Mon 05 May 2025 04:00:42 +0000
Manifest next update:     Tue 06 May 2025 04:00:42 +0000
Files and hashes:         1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: GvNhZ+P9MGY6wlSMLaEcZ6o4acQOgE8GHwse2mU4zjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:6c:90:31:6c:21:42:dd:dd:5f:d8:c7:0b:88:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
        Validity
            Not Before: May  5 04:00:42 2025 GMT
            Not After : May  6 04:00:42 2025 GMT
        Subject: CN=3acb27a338c2ddc83770be298b37904c59756904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8a:12:d1:5f:a1:e6:3f:8c:9d:64:49:b3:c0:
                    99:f7:e3:e0:2e:9f:c3:38:a1:39:97:83:cc:8b:59:
                    44:b1:78:6d:48:40:24:4b:c9:ea:29:16:25:83:a3:
                    e0:0c:f0:ea:32:02:fb:16:64:55:14:1c:e5:76:20:
                    56:ac:a1:f8:4f:57:7d:7b:e7:9d:cf:cc:2f:54:50:
                    bc:d1:8f:5d:01:99:bc:d2:12:76:24:11:09:0c:26:
                    1a:f5:e5:12:ef:14:84:bc:25:8f:f2:27:37:2b:e9:
                    ac:50:e4:2a:b0:a9:30:20:69:f3:ae:f7:78:79:af:
                    7f:cd:29:5a:20:2f:b3:38:a1:ff:49:d9:77:63:7d:
                    9d:d9:7a:f7:c9:6e:b3:49:cb:4c:ad:67:5d:16:b5:
                    c2:fb:0a:2a:96:2b:73:73:9b:4e:3f:9a:3c:4d:45:
                    38:92:e3:a4:c6:bf:50:fa:ce:d9:fd:10:17:df:38:
                    71:c5:b8:32:6b:25:5e:c0:28:6d:f4:58:60:62:6b:
                    a1:2c:df:eb:4f:84:e0:62:c2:6b:da:6d:b4:ef:15:
                    ab:1d:53:91:36:32:9c:0f:66:63:3b:68:05:8c:7b:
                    b7:d3:d4:7c:81:d7:12:44:15:58:84:3b:88:27:2f:
                    1a:b4:e0:3f:a9:37:09:bd:b2:3a:2e:34:08:05:ef:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CB:27:A3:38:C2:DD:C8:37:70:BE:29:8B:37:90:4C:59:75:69:04
            X509v3 Authority Key Identifier:
                keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:65:be:2b:e8:1f:d5:a4:10:85:dd:c3:86:41:aa:86:6d:3d:
         55:96:9b:8f:31:61:95:09:3a:10:18:80:cc:d5:0b:53:93:0c:
         95:d7:20:76:f9:62:2f:31:fa:81:13:e0:f5:b9:9f:5f:1d:c5:
         32:96:57:95:f1:a7:10:81:ab:2d:13:ee:80:33:af:87:90:a8:
         44:cd:43:25:b7:5c:91:f9:86:13:47:9c:db:cf:e6:5a:68:f2:
         6e:60:12:86:b6:10:02:53:78:aa:a8:79:f2:f4:22:7d:a5:a6:
         f6:d0:77:48:47:4b:c6:e5:7b:4d:d3:50:e1:e6:16:fc:42:f2:
         5c:16:24:b9:ad:c9:f7:b6:12:e6:2b:d1:74:c1:49:80:91:1c:
         ea:1f:9c:2a:3f:88:17:16:0b:10:5b:0b:bf:7c:03:f8:8f:aa:
         c4:90:d3:64:09:bc:4f:a5:ab:3d:e0:23:b3:3a:8e:d9:dc:c6:
         62:6c:a9:de:e5:8a:a5:30:22:08:66:64:12:ba:25:a3:e8:69:
         3d:75:57:a5:be:75:f4:56:c2:61:5f:ce:6c:e6:e7:91:5c:57:
         b9:10:14:b4:af:01:a8:36:60:6b:e6:0d:f0:fe:51:ab:03:af:
         7b:16:7d:68:e5:96:ea:6a:7f:a0:31:e0:7b:4e:cb:a8:cb:62:
         6d:e1:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:48:17 2025 by rpki-client