Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
File:                     WNLScV9D90e-p2Lc4Wa8pLjpZes.mft (raw, json)
Hash identifier:          aKj/1yinx/KRK3mzRPDZOd2e0AsuDvkVS214MQgbfyI=
Subject key identifier:   2A:51:E5:86:BB:77:11:61:B5:A8:AE:5B:90:4D:87:0C:9D:DD:6D:A6
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Certificate issuer:       /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial:       0197B6D754B4E5BE9C6BEA63D88699DDA1AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
Manifest number:          15C4
Signing time:             Sat 28 Jun 2025 14:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:54 +0000
Files and hashes:         1: PT2usVUEKXyY3Pyrt6bhLZq6Hk0.roa (hash: KueB/N6Tv5XPwuQenNpNyFxyBekEQxh3qYZTCa9pVBg=)
                          2: WNLScV9D90e-p2Lc4Wa8pLjpZes.crl (hash: 3yQ85M6/7r0CC95QqDUIU8vuUJInIwDWoqY2Q/le9eI=)
                          3: Z17YRi9mYaQRV70cYdKNkHS2BT8.roa (hash: XclzZEx6yvB+VuFruQwlqlWve82bQq4L6RiJRruQ7hc=)
                          4: hSVOEYR3wkiN21Km9noHByidNkc.roa (hash: gmgGps7iqZqgn7KgXcruM+0aV/wQZu+D+yKypERbLL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:54:b4:e5:be:9c:6b:ea:63:d8:86:99:dd:a1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
        Validity
            Not Before: Jun 28 14:00:54 2025 GMT
            Not After : Jun 29 14:00:54 2025 GMT
        Subject: CN=2a51e586bb771161b5a8ae5b904d870c9ddd6da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:81:a8:b2:46:0e:10:99:c2:5a:1b:36:33:
                    66:89:d3:02:63:dc:10:0d:3b:a0:f9:24:d4:b9:6f:
                    f7:2b:c9:fa:32:a5:ab:b9:d8:3f:c4:6d:16:53:0c:
                    89:75:99:55:16:1d:a9:71:f7:68:16:ff:75:d6:77:
                    64:91:2a:73:ef:b9:df:ff:ca:08:b1:a6:2f:1b:27:
                    e0:6f:0b:b7:2c:b5:57:df:14:7a:da:de:7e:58:24:
                    50:da:fa:e8:40:63:4e:7f:b6:79:51:79:03:b5:96:
                    31:6a:8c:5d:ea:eb:9e:51:0a:ea:ed:b0:95:8b:9e:
                    ff:95:11:73:ec:d8:a5:73:fe:26:0d:f9:5b:11:2e:
                    be:05:fb:2a:2e:6c:e3:8f:60:6b:a9:74:ac:f6:d8:
                    23:18:48:a0:1b:39:5b:7f:f9:29:5d:08:3c:9a:4b:
                    06:4f:eb:43:0c:01:1e:a7:37:ee:dc:12:52:bf:ad:
                    a7:be:9c:e3:91:d0:22:1e:00:7f:35:7f:7c:b7:a4:
                    1e:a0:18:21:c2:c9:12:21:b3:3c:25:2f:19:5e:d2:
                    59:bf:5f:56:a3:9f:7f:82:6e:7d:17:88:95:76:ed:
                    90:47:60:9f:02:0e:e0:37:45:5e:75:70:ed:a1:78:
                    65:d8:f1:42:e0:92:fb:7a:c0:77:85:f2:f1:8e:c7:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:51:E5:86:BB:77:11:61:B5:A8:AE:5B:90:4D:87:0C:9D:DD:6D:A6
            X509v3 Authority Key Identifier:
                keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:0b:16:f1:63:e7:35:3b:b6:92:1a:eb:e2:e2:a5:32:a1:a0:
         33:4b:7c:bf:d4:2c:86:8a:d8:aa:50:ca:60:bb:8f:6f:dc:83:
         1e:cc:47:ca:0f:de:40:a3:ed:03:f4:08:87:71:ee:09:f6:0a:
         b7:44:4e:4f:5d:16:72:ac:e9:82:6b:a0:d0:fd:40:50:63:67:
         2f:0e:56:97:4d:41:e9:6c:11:a6:ed:36:04:be:cb:fb:ec:2d:
         b3:a7:4f:ed:57:20:6c:4f:41:a4:14:fe:1d:cb:d5:20:29:2c:
         8a:49:65:a4:2b:1d:aa:7c:63:f3:fa:24:30:6c:fb:33:a4:e0:
         39:4e:20:d4:ce:be:4e:6a:61:55:8f:84:ea:4e:37:77:4f:df:
         ea:79:ea:cf:54:74:37:e1:01:c5:be:75:27:08:16:e8:8d:30:
         76:41:29:45:41:83:39:8a:1e:9d:17:b8:ef:2c:a9:bc:77:36:
         03:c3:12:07:90:59:e4:1e:58:b5:02:b6:30:30:a3:bc:0e:7b:
         e9:02:eb:6e:6d:67:6e:4a:99:82:de:c1:1b:79:c2:d4:87:9b:
         16:f6:0e:75:7a:4a:b7:8c:b6:53:2d:8f:9c:1c:e6:3d:b9:99:
         e5:11:6f:1e:c0:78:63:68:a8:e1:1c:71:2b:aa:c2:cf:b3:63:
         65:bb:b0:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe211S05b6ca+pj2IaZ3aGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDJkMjcxNWY0M2Y3NDdiZWE3NjJkY2UxNjZiY2E0Yjhl
OTY1ZWIwHhcNMjUwNjI4MTQwMDU0WhcNMjUwNjI5MTQwMDU0WjAzMTEwLwYDVQQD
EygyYTUxZTU4NmJiNzcxMTYxYjVhOGFlNWI5MDRkODcwYzlkZGQ2ZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztmBqLJGDhCZwlobNjNmidMCY9wQ
DTug+STUuW/3K8n6MqWrudg/xG0WUwyJdZlVFh2pcfdoFv911ndkkSpz77nf/8oI
saYvGyfgbwu3LLVX3xR62t5+WCRQ2vroQGNOf7Z5UXkDtZYxaoxd6uueUQrq7bCV
i57/lRFz7Nilc/4mDflbES6+BfsqLmzjj2BrqXSs9tgjGEigGzlbf/kpXQg8mksG
T+tDDAEepzfu3BJSv62nvpzjkdAiHgB/NX98t6QeoBghwskSIbM8JS8ZXtJZv19W
o59/gm59F4iVdu2QR2CfAg7gN0VedXDtoXhl2PFC4JL7esB3hfLxjsdIrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpR5Ya7dxFhtaiuW5BNhwyd3W2mMB8GA1UdIwQY
MBaAFFjS0nFfQ/dHvqdi3OFmvKS46WXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kNjdiN2ItYzc5OC00OTAxLTgwZjkt
ZTM4MzQ1MTZmYzA4LzEvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kNjdiN2ItYzc5OC00OTAxLTgwZjktZTM4MzQ1MTZmYzA4
LzEvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQsW8WPn
NTu2khrr4uKlMqGgM0t8v9QshorYqlDKYLuPb9yDHsxHyg/eQKPtA/QIh3HuCfYK
t0ROT10Wcqzpgmug0P1AUGNnLw5Wl01B6WwRpu02BL7L++wts6dP7VcgbE9BpBT+
HcvVICksikllpCsdqnxj8/okMGz7M6TgOU4g1M6+TmphVY+E6k43d0/f6nnqz1R0
N+EBxb51JwgW6I0wdkEpRUGDOYoenRe47yypvHc2A8MSB5BZ5B5YtQK2MDCjvA57
6QLrbm1nbkqZgt7BG3nC1IebFvYOdXpKt4y2Uy2PnBzmPbmZ5RFvHsB4Y2io4Rxx
K6rCz7NjZbuw5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:06 2025 by rpki-client