Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
File:                     WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft (raw, json)
Hash identifier:          WjYi7j5aXX84qMu8Q4VYWHSeivTz3nkCQwqpdoWVLjg=
Subject key identifier:   98:D6:B1:4B:64:D6:7A:15:CA:31:9D:A2:34:31:F5:99:B5:DF:9A:A0
Authority key identifier: 59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56
Certificate issuer:       /CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
Certificate serial:       0197B70F3392890C803CC4544AAF60B62E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
Manifest number:          0603
Signing time:             Sat 28 Jun 2025 15:01:56 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:56 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:56 +0000
Files and hashes:         1: GqbACIHpXheHhq0oe01LtYC6Cs8.roa (hash: 1QDs0/2NoNbNsd7ad8m6jQQ5pnMmhaUanNisyPMXmxQ=)
                          2: WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl (hash: 3j3fWPIsZe/wecpf7qwzoZpRn2y/12P0qTYW31CrH7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:33:92:89:0c:80:3c:c4:54:4a:af:60:b6:2e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
        Validity
            Not Before: Jun 28 15:01:56 2025 GMT
            Not After : Jun 29 15:01:56 2025 GMT
        Subject: CN=98d6b14b64d67a15ca319da23431f599b5df9aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:b3:9b:05:90:25:e5:30:16:ef:80:6e:bf:
                    0d:39:08:72:8e:35:be:1c:60:ce:c8:1e:8b:2a:50:
                    53:fb:ef:10:c7:22:1a:87:fc:10:70:87:23:43:7c:
                    36:cc:f8:d9:c3:a8:7e:74:71:ba:c1:c2:36:39:2e:
                    d0:82:19:ae:d4:75:8d:41:83:05:be:33:59:d8:b5:
                    b4:a1:49:43:86:78:7e:87:77:dc:90:81:1e:8a:d6:
                    74:ec:91:d8:d0:df:be:50:a6:ba:72:02:a6:6e:c2:
                    3e:13:55:f6:07:a6:2e:3a:fe:15:70:36:17:ae:5c:
                    ba:7f:e4:b7:f4:86:9d:ba:e3:52:e0:0b:e3:d5:82:
                    0a:55:39:f0:70:05:2f:80:17:ec:b8:a7:07:d2:ef:
                    bc:ed:67:e3:c9:a4:e8:a1:75:ba:7c:44:a4:2d:fd:
                    85:98:d4:86:75:80:d4:40:4e:11:31:a2:02:7b:52:
                    26:94:be:a5:ad:ea:f3:46:c4:89:83:eb:45:fb:8c:
                    33:83:67:e9:a3:4a:d4:ac:14:28:d3:4d:5a:fa:b8:
                    31:a4:16:99:a5:1e:b8:88:85:fe:26:ef:9c:8c:20:
                    c2:9c:f7:48:bf:11:fb:3d:c6:43:c1:73:13:5a:f1:
                    f8:d6:6b:a0:b2:d1:19:80:78:ed:53:6d:38:72:ba:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D6:B1:4B:64:D6:7A:15:CA:31:9D:A2:34:31:F5:99:B5:DF:9A:A0
            X509v3 Authority Key Identifier:
                keyid:59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3d:95:85:ee:e0:23:b1:35:0f:d3:f0:fa:35:62:cd:a1:4a:
         6b:00:cf:60:f3:6e:2b:bd:b4:ca:3d:66:45:36:72:76:1c:07:
         05:63:d8:a1:05:d5:f9:57:8e:11:14:27:da:99:e9:ef:8e:c9:
         2b:c0:8d:ec:c3:7b:34:ff:b5:c2:48:4a:2f:c8:65:0a:04:36:
         bc:04:0f:ca:11:4a:ef:50:82:81:74:57:29:00:14:0d:30:94:
         b1:b6:7a:d5:99:d8:f6:a7:c0:d8:92:2b:55:31:f4:5f:37:68:
         64:9e:5b:c1:b0:48:4a:db:81:74:77:26:e8:83:80:0c:6e:42:
         83:8f:02:2c:33:cf:02:d1:d1:57:d7:39:cc:d2:f8:d3:e3:5a:
         a6:ba:60:68:f6:e8:1c:35:ef:3e:1c:34:2f:9b:9a:05:92:0b:
         6a:27:fd:06:cc:c6:2b:b6:b3:b9:7d:8d:e6:c3:f3:74:df:43:
         05:e6:7e:8d:cd:22:5c:f8:76:0f:d6:a1:81:8c:73:71:2a:b2:
         ac:23:76:b3:fb:80:22:68:d5:cb:3a:b3:db:bf:9a:ed:a5:a2:
         c4:e2:0b:0a:6b:57:55:ce:9e:26:21:a4:51:e7:69:12:b9:a0:
         63:30:d0:11:90:72:6e:31:e6:d0:d7:2b:70:6b:5c:ef:f4:4c:
         e4:ee:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:51 2025 by rpki-client