Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
File:                     WMV8B555WnlrR6ftMvBysFipOm4.mft (raw, json)
Hash identifier:          3sEMA4k2xrjYBwppnd0FeYOsMkv1fmaPW391oUNRtKc=
Subject key identifier:   C0:6D:43:73:3F:6B:3B:BD:2E:F7:5F:61:D7:75:28:61:19:7E:E8:19
Authority key identifier: 58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E
Certificate issuer:       /CN=58c57c079e795a796b47a7ed32f072b058a93a6e
Certificate serial:       0197B820E4F1C59CF310DABD09E82B22960A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
Manifest number:          02D3
Signing time:             Sat 28 Jun 2025 20:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:52 +0000
Files and hashes:         1: 6Ih0znWdvPnsz1jxHZRvN_VDOZ0.roa (hash: 0+EXXpyshs7NPQdkK6MvrkAg2151xSHnQxOuUtZbYMA=)
                          2: WMV8B555WnlrR6ftMvBysFipOm4.crl (hash: b9NF6hMvcosVLbWFNuccl2+aUF28JTUYFUq31e2na9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:e4:f1:c5:9c:f3:10:da:bd:09:e8:2b:22:96:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58c57c079e795a796b47a7ed32f072b058a93a6e
        Validity
            Not Before: Jun 28 20:00:52 2025 GMT
            Not After : Jun 29 20:00:52 2025 GMT
        Subject: CN=c06d43733f6b3bbd2ef75f61d7752861197ee819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:6b:75:9c:a5:13:28:bf:ad:db:ca:92:d6:
                    b1:89:ff:a0:10:53:26:f5:64:57:a3:93:49:10:b0:
                    fa:b3:96:89:1c:54:39:42:d1:9f:24:79:2e:24:e6:
                    b2:3e:8e:8b:1a:b4:8e:b9:8a:d0:b6:fa:81:6a:27:
                    d9:79:18:de:6f:eb:ea:d1:13:8e:c8:a1:df:ab:1b:
                    a4:8c:25:a5:ce:2a:15:2d:03:3c:89:83:8e:bb:d2:
                    f9:16:b8:a1:86:30:76:ef:95:d3:9b:3e:ef:7f:c8:
                    f0:dd:6c:bc:9d:85:b7:dd:71:cf:e8:fc:05:51:2a:
                    46:c6:52:bd:e3:8c:67:74:12:a9:31:fb:2b:23:c3:
                    61:8d:83:03:83:c7:ee:0c:16:65:2a:c5:ef:95:4a:
                    26:c4:85:03:10:6a:b7:a0:9d:f6:33:fc:ac:17:1b:
                    c7:ac:4e:99:8d:cd:78:3b:4a:a5:80:a1:af:a3:fb:
                    2a:77:7a:61:55:1f:56:bb:c7:d4:48:d1:bc:47:a4:
                    cc:7b:44:13:66:f8:44:ca:42:91:68:da:9e:97:06:
                    51:d8:42:fe:e8:a4:59:23:80:20:f4:67:a7:f0:35:
                    ec:3b:32:e8:9b:83:a7:59:b3:8d:12:17:7d:d9:6c:
                    c5:34:9e:e4:15:65:6b:57:e6:c5:5e:1c:38:b3:11:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6D:43:73:3F:6B:3B:BD:2E:F7:5F:61:D7:75:28:61:19:7E:E8:19
            X509v3 Authority Key Identifier:
                keyid:58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:08:9c:79:60:09:6b:4a:87:66:df:66:0e:29:6c:3b:cf:25:
         78:f7:f6:8d:2e:94:b9:c0:89:8a:26:65:c6:d6:a5:67:fc:8a:
         35:26:a4:b2:ff:66:d6:f0:16:70:70:d6:85:cd:be:20:ef:e2:
         f4:8c:cd:5a:c7:d8:c8:df:94:61:00:6f:87:e1:7a:60:9e:5b:
         11:55:60:ef:5a:84:47:30:8e:05:1e:4c:e7:a3:4e:c7:50:91:
         76:4a:cb:b8:5d:8b:4c:f3:22:8d:d9:fe:f6:0a:4a:38:ea:3d:
         58:33:41:f7:86:7f:63:7f:81:8b:6e:6e:74:9a:d6:13:69:e5:
         1b:7a:e7:65:c3:9d:d3:46:01:a5:f9:01:02:d7:33:ef:7b:39:
         30:e5:21:92:14:cd:23:c3:ab:37:72:58:43:5f:8f:e1:93:7f:
         5c:15:20:7f:15:31:3c:ad:94:c1:a9:0b:db:b7:e3:5d:d6:9c:
         85:35:43:28:96:93:8c:f8:72:e1:1a:13:cd:19:27:7d:a6:9a:
         08:94:05:02:a7:1a:9e:cc:7e:0a:8b:e0:6f:67:7a:be:99:89:
         17:2f:c1:2b:14:19:f0:a8:ae:02:87:5d:cf:65:73:5e:43:9f:
         9b:f7:bf:19:53:ab:97:04:64:1a:cb:2d:9a:84:d1:ee:5c:db:
         5b:2c:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:51 2025 by rpki-client