Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          vXcVu0hSLf9TKGZP49M2Q+yhMRyy0AoOl0Gi8N2t/vo=
Subject key identifier:   5B:FB:5F:81:11:71:ED:1F:2C:77:34:E8:83:34:1F:17:D7:64:5C:18
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       0197B74585AEAC6485237602A4F11E6FD2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          056E
Signing time:             Sat 28 Jun 2025 16:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:16 +0000
Files and hashes:         1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: n9USc3IoxICcM2ueOkbVj4XS41ssWUaqG3p4QmEFQ70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:85:ae:ac:64:85:23:76:02:a4:f1:1e:6f:d2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Jun 28 16:01:16 2025 GMT
            Not After : Jun 29 16:01:16 2025 GMT
        Subject: CN=5bfb5f811171ed1f2c7734e883341f17d7645c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:3b:45:78:a6:ec:06:65:1e:19:09:07:7c:
                    a9:ce:07:84:ef:df:8d:1f:33:5c:68:45:6d:26:f8:
                    82:ac:0b:be:89:74:76:ad:c8:0f:4c:24:bf:33:09:
                    93:f8:88:0d:d2:f2:fc:43:c9:1e:5b:a9:51:6e:ca:
                    46:1c:c2:51:0a:48:a9:94:96:2f:b6:fe:4d:e0:c6:
                    fb:be:94:7f:6f:f1:ec:73:cf:cb:f6:2a:51:d0:15:
                    00:fc:61:29:b7:dc:86:ae:5f:6f:b0:b0:0f:9e:a2:
                    6d:3c:60:60:0f:0d:93:79:83:68:95:a9:90:2b:89:
                    7c:cb:f4:52:a3:f1:e8:2a:f7:74:8f:5e:94:2a:ca:
                    a6:66:47:ef:b2:d5:1f:f9:70:9f:01:4a:40:61:f2:
                    65:91:e3:f0:05:01:9c:98:63:ee:51:46:81:a0:5f:
                    69:b9:68:98:88:2c:a8:bd:8d:d0:fb:7e:0b:60:22:
                    4c:0f:b7:35:93:7d:b0:6a:4a:96:a6:67:45:47:a4:
                    fd:c0:29:42:4f:6f:af:dc:cf:84:30:fb:4f:3e:90:
                    4b:65:83:fb:da:0c:fd:19:27:62:c8:3a:09:12:36:
                    dd:32:43:1a:c7:6e:5a:37:7c:df:42:89:62:ac:15:
                    6d:cc:cf:71:01:0f:2b:32:46:6b:ad:d6:9e:88:2f:
                    6a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FB:5F:81:11:71:ED:1F:2C:77:34:E8:83:34:1F:17:D7:64:5C:18
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:98:a9:9c:45:a0:e2:91:eb:15:e4:0f:0c:62:fa:46:76:ff:
         44:d2:97:b5:7c:99:5d:05:d5:83:3b:4a:5e:c5:f5:a3:0e:9b:
         05:27:b6:af:27:af:4a:9f:03:7f:60:26:d4:9c:1a:af:48:97:
         58:0f:64:70:5d:4b:a3:61:fb:62:2c:bd:fa:ec:9c:9c:26:ac:
         e5:fd:24:3f:8e:71:d2:ca:2c:9c:c2:c3:67:48:3f:96:01:d7:
         34:1c:51:12:f6:99:65:ca:36:07:c5:6e:0f:3f:da:15:1f:53:
         0f:b2:10:9a:1f:56:ba:45:c1:a8:6f:48:58:3a:c8:bc:79:59:
         61:7e:6d:91:02:8c:2b:1e:e3:fb:ec:70:71:bb:d7:fd:9b:6e:
         21:ab:b3:a1:26:77:86:62:23:82:97:45:c8:72:4d:b3:e1:ef:
         36:2c:74:26:3d:79:57:3b:36:b6:77:31:ae:b2:eb:84:90:8f:
         4b:77:68:74:a8:99:4f:da:13:7c:00:e6:fd:e9:43:55:98:47:
         00:c3:6f:c4:9a:ed:1b:c5:0b:2a:50:62:96:3c:25:01:29:17:
         bf:67:a3:7f:ec:c3:2a:d6:03:bc:f1:12:e2:bf:22:7a:d4:e7:
         e6:b8:9c:b7:33:8c:35:2a:67:1e:68:f9:e0:54:22:11:6c:31:
         04:74:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:16 2025 by rpki-client