Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File:                     WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier:          hQs8JBiP4xEYr+n0Ea8feED3NFidW/65kJ8G0JPBD4A=
Subject key identifier:   48:93:57:81:D7:70:B8:37:54:8F:7B:3C:FD:1D:47:D4:37:70:EB:EA
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer:       /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial:       0197B6A1F4ED5F5AA46B3D1C33EB6D2AB8ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number:          0EE6
Signing time:             Sat 28 Jun 2025 13:02:36 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:36 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:36 +0000
Files and hashes:         1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: HvVQfn26f7K5OTR9AnxNhTjNtf8W/wib3Wov4XO5up0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:f4:ed:5f:5a:a4:6b:3d:1c:33:eb:6d:2a:b8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
        Validity
            Not Before: Jun 28 13:02:36 2025 GMT
            Not After : Jun 29 13:02:36 2025 GMT
        Subject: CN=48935781d770b837548f7b3cfd1d47d43770ebea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:c0:0f:25:37:f6:0e:2f:6b:5b:3f:f5:22:
                    3c:09:46:5d:22:c8:b6:f8:d6:53:fa:03:94:d3:5c:
                    94:09:75:91:52:64:6c:ff:b7:d5:48:7d:cf:5b:28:
                    95:45:02:6a:85:2f:de:4a:b8:40:a4:9c:2f:b3:18:
                    4d:60:95:ea:99:1b:49:ce:67:4c:6a:0d:30:3b:b5:
                    91:85:1d:5a:f1:e2:7d:4b:13:81:5b:31:8c:30:f2:
                    a7:3e:47:b5:a2:06:8d:51:21:c9:f1:04:01:d4:c2:
                    9a:2b:83:6f:30:8a:6a:d3:fd:9f:d9:c5:c1:f7:74:
                    41:b5:04:3e:c0:4a:ef:b7:c7:0d:e6:8e:78:3e:9b:
                    1f:72:41:f0:c0:ae:df:25:40:a4:6f:57:e5:a2:4e:
                    05:11:f0:24:4d:99:8e:a6:94:05:4b:b1:fb:0a:2a:
                    12:1b:23:ee:95:3d:1b:1b:12:b6:6b:b9:c4:82:b2:
                    b0:29:bb:1a:87:a8:1a:07:56:65:d9:38:9c:a3:e4:
                    a9:2e:cf:d6:09:72:df:65:30:75:f4:ce:dc:bb:0e:
                    da:1b:b4:65:5b:be:8d:95:ef:55:13:86:35:24:41:
                    61:76:cb:9e:45:67:2c:4d:3d:d6:25:70:f1:ec:ae:
                    5e:5f:8f:03:c7:45:a9:68:4f:97:98:09:36:c6:13:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:93:57:81:D7:70:B8:37:54:8F:7B:3C:FD:1D:47:D4:37:70:EB:EA
            X509v3 Authority Key Identifier:
                keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:55:2a:e3:5a:43:ed:76:28:a5:8f:f2:6f:29:4f:f6:21:e4:
         a9:39:d7:15:6d:72:24:2a:ce:8f:67:48:c5:5b:28:50:3b:55:
         4b:17:2a:5f:fd:a9:44:6a:02:b6:6a:c3:ff:20:d5:f1:b8:18:
         e7:75:3e:df:e7:76:da:99:f4:a1:e2:28:45:e2:7c:05:cd:6c:
         ae:c4:c3:2b:01:45:27:d6:92:ae:96:a9:fe:2d:96:f7:46:13:
         8e:21:77:4d:68:9c:c5:ea:df:e9:01:38:48:71:f4:df:cc:2c:
         39:31:a7:e6:bc:09:0d:e1:ab:dc:37:97:71:28:9a:91:18:17:
         4f:cd:1b:3a:66:da:5c:8f:a8:e0:dd:38:21:d1:4c:19:36:22:
         62:79:f7:54:dc:e4:a9:29:c6:b5:4c:52:41:96:f8:22:6b:81:
         fd:0b:5f:84:fb:2b:12:64:33:2e:5a:fa:d7:97:03:80:c2:cb:
         33:80:9f:b2:d0:90:93:93:8c:33:97:c2:5b:ef:2a:1b:a8:73:
         23:a8:79:ad:b5:20:a9:a9:20:4c:61:62:d6:18:48:4b:5b:11:
         29:0f:fd:1d:bd:48:7a:35:0d:7f:3f:60:2a:f2:4b:cf:ea:d9:
         01:45:bd:f0:c8:cc:2d:22:c4:9e:3e:8c:6a:eb:da:f9:42:3a:
         d5:f0:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:05 2025 by rpki-client