Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File:                     WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier:          qNFc2v3sbA5Ey8JYs8D2ds5VTGso2So7wNtKYmIm5+U=
Subject key identifier:   55:C4:13:FA:0F:0E:08:A6:8B:D1:A0:4F:34:D5:2E:C0:69:FE:18:C4
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer:       /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial:       0197B6A239E5A6C365D0E84AA510631B2546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number:          0C95
Signing time:             Sat 28 Jun 2025 13:02:54 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:54 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:54 +0000
Files and hashes:         1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
                          2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: wF+bCod8yCtKYZUsaUZ5ArBYjQJpP5X+zxTym1X7Sug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:39:e5:a6:c3:65:d0:e8:4a:a5:10:63:1b:25:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
        Validity
            Not Before: Jun 28 13:02:54 2025 GMT
            Not After : Jun 29 13:02:54 2025 GMT
        Subject: CN=55c413fa0f0e08a68bd1a04f34d52ec069fe18c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:72:c4:f6:dd:d1:21:b7:82:29:61:89:3f:
                    10:8d:5f:03:25:30:e3:93:74:86:d4:bd:b9:9f:57:
                    94:4a:7c:3a:06:80:f9:4b:4a:35:0c:fa:9d:b4:b4:
                    ee:91:ab:a7:86:b4:2e:88:f1:a3:2f:3a:1e:7e:b7:
                    8b:19:4a:0a:f9:5f:67:d0:fc:93:5a:22:b8:05:ed:
                    03:5b:cb:41:8e:7a:b2:83:70:f1:31:74:66:85:25:
                    0d:e2:79:5d:a1:1a:1d:ed:73:d0:37:eb:23:d6:d9:
                    c4:5e:6c:6e:36:3d:2f:82:25:3c:a7:63:13:e1:bf:
                    1c:33:f7:07:24:d0:7e:94:6f:b4:05:5c:e7:28:5d:
                    d1:08:b8:22:61:25:8e:74:ce:11:f2:1e:fa:d1:89:
                    99:58:06:9b:fd:1a:21:63:eb:2e:a5:6a:e2:a1:7f:
                    2b:de:db:b7:8c:01:21:df:e6:e2:c4:6e:cb:a5:ee:
                    8c:f3:4b:2a:fc:61:78:c3:ca:53:a5:35:45:c1:29:
                    51:5e:1d:99:9e:63:f5:6b:21:79:ae:61:cd:20:6e:
                    f9:ea:9e:63:8f:8b:29:76:da:89:44:03:f6:9a:a1:
                    67:ef:b1:b5:ee:dd:67:02:37:8c:e7:e8:12:cd:71:
                    6b:25:fa:d6:74:ba:de:30:ac:9c:49:ab:fe:03:83:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C4:13:FA:0F:0E:08:A6:8B:D1:A0:4F:34:D5:2E:C0:69:FE:18:C4
            X509v3 Authority Key Identifier:
                keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ae:89:a1:ee:6c:c0:cf:29:65:29:b9:41:84:5e:d5:db:c0:
         1a:b0:0e:09:52:f9:7f:08:c5:ac:11:d5:fd:4e:65:d1:36:fb:
         e6:e0:05:42:06:d3:81:1b:42:b7:dd:1f:73:7a:f7:fe:53:65:
         b1:1e:11:a2:ed:10:bf:71:ef:ce:87:36:d3:85:95:9b:8b:37:
         03:72:38:f3:c7:65:58:40:8c:90:7f:26:ac:45:9b:53:95:a6:
         27:9b:74:a7:53:b0:bb:cb:c4:18:0d:d2:13:f8:c8:26:89:11:
         94:30:f6:68:e6:62:36:45:66:ba:de:58:c8:af:82:9f:98:1f:
         88:4e:85:8d:48:e5:51:ad:28:1c:6b:f7:49:e6:8c:bb:03:13:
         80:91:ac:97:28:8b:5a:86:65:10:92:42:7c:fc:a6:3d:60:b4:
         85:49:49:b4:d7:cb:16:91:6a:ea:3d:c1:a6:17:d2:87:f7:4e:
         b1:a5:da:cf:c4:a5:9a:45:6a:5a:90:51:c0:dd:cf:6d:eb:23:
         6c:4d:9e:d1:bd:0a:59:55:e1:a4:fe:5c:89:bd:ba:3d:4b:d5:
         b3:16:9b:4c:2b:9b:e0:05:be:2e:0a:df:cd:25:be:61:74:07:
         9d:4d:88:b6:30:66:8c:d6:0d:3f:b7:95:94:71:17:54:85:b5:
         d5:fc:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:26 2025 by rpki-client