Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          NkddCpDHgriZ6pHIyTTsF852mCAFDlQ1gv/L3TKQ51E=
Subject key identifier:   C7:6F:73:99:C3:E3:D0:87:38:23:E4:E6:CA:BC:C4:DB:B9:34:0C:41
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       0197BA7DDC48CDD3E1148126D3F277BB9100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          15C2
Signing time:             Sun 29 Jun 2025 07:01:39 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:39 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:39 +0000
Files and hashes:         1: OcUAdk27zQERJiG1ES11t0jbx40.roa (hash: G/z2CQj1gUn0HMua9E3wJQ0HyTWhulxJTYdAIClZCUg=)
                          2: UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa (hash: c7iWfc2h0xfZuOGmHIC37VdlCYWmVoLvyubnSxmqlrQ=)
                          3: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: v96dTR/nLGmgi+b7KdS/sOPtkn19F4Hgn2ELbfLhAGA=)
                          4: a0heAr5Tdh28am-YWZ2LDUI1i-I.roa (hash: 4Riercylxh3jedSptQ6f+cc+w6P5hj4cNLgG2FwgmtI=)
                          5: gw7B96UShjsyHnq6pn1ZB8lO3nw.roa (hash: weKIf0S7rCXr80VHrw+niMSn5bWUOaoN4oVmKk0/npM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:dc:48:cd:d3:e1:14:81:26:d3:f2:77:bb:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Jun 29 07:01:39 2025 GMT
            Not After : Jun 30 07:01:39 2025 GMT
        Subject: CN=c76f7399c3e3d0873823e4e6cabcc4dbb9340c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:41:7d:47:f9:40:93:db:aa:65:21:b0:03:
                    bb:f1:89:79:c9:fd:1c:c6:f5:8a:80:af:17:ba:25:
                    8d:05:42:26:ef:90:ce:d9:44:34:6f:98:54:e0:e3:
                    ff:01:e8:60:eb:80:13:cb:da:c9:ff:06:09:f6:db:
                    84:2a:a8:72:f2:d2:9a:28:a8:36:a9:0f:73:0b:e8:
                    4d:ca:31:c6:da:cb:6c:41:a3:2f:84:e9:1c:ac:f4:
                    99:b9:47:18:28:12:ce:ce:98:6d:d2:f0:5e:e3:36:
                    d4:c8:44:16:d9:07:82:2c:40:1d:22:c9:30:16:31:
                    ee:90:62:a3:56:04:0b:02:43:c2:67:e5:95:aa:22:
                    bf:da:b7:cb:46:ee:24:a9:4c:ff:52:72:e7:b5:5b:
                    a5:1e:73:8c:1a:81:a4:91:0c:7b:4e:4f:62:a0:15:
                    06:3d:08:9b:af:58:03:c7:a7:3f:78:70:5f:72:f1:
                    33:35:3e:67:0f:40:0a:db:69:9f:1f:ad:1f:07:bb:
                    e9:c5:93:ae:18:e9:97:e0:3a:39:67:87:28:d5:89:
                    b6:6a:be:77:81:c0:3c:f2:ed:de:de:f6:42:5a:69:
                    6c:1c:25:8a:81:38:2a:4f:11:81:62:ce:7f:ba:a7:
                    71:f7:92:41:4c:ed:4a:44:21:81:18:48:25:52:be:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6F:73:99:C3:E3:D0:87:38:23:E4:E6:CA:BC:C4:DB:B9:34:0C:41
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:c3:6c:74:2d:fd:ce:71:41:28:1b:0a:f5:b7:66:d9:34:
         92:dc:e2:53:20:0a:9c:68:e7:0d:7b:5d:55:0b:ab:82:35:ce:
         10:26:09:29:64:57:f7:cc:9c:5f:2e:3b:5d:86:8b:e3:50:e2:
         59:99:f0:e7:ff:e5:85:bd:c2:56:79:d4:1a:ec:fd:a0:13:29:
         f0:65:32:b5:22:2b:bc:0a:f5:8e:5b:a3:02:9a:24:5c:dc:1b:
         d5:b3:bb:5b:33:0b:54:25:bd:fa:d3:83:01:d5:34:90:88:c7:
         41:c1:8e:97:52:1a:5a:a6:7b:fc:f7:67:74:cd:bd:90:cc:10:
         f5:04:b2:6b:58:2c:79:a7:1c:92:b3:a1:fa:5f:7a:21:7b:98:
         10:93:18:df:e2:26:85:2c:73:16:57:23:cb:c6:f4:db:b6:13:
         e6:5a:a7:1a:6c:e6:b9:7c:9f:8e:e4:6b:0c:a5:e1:e9:be:16:
         05:7d:c6:1e:bb:50:13:29:87:73:c5:b5:94:c7:e0:aa:ef:12:
         f3:8a:c0:19:7d:aa:27:5c:e1:af:1d:95:b8:a9:e4:09:fa:8f:
         19:1f:52:2f:db:10:46:c5:3c:c0:e8:13:a1:39:08:9c:e1:98:
         15:90:7a:42:13:02:eb:ff:79:89:58:5b:e4:bd:25:ce:9a:5d:
         42:78:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:31 2025 by rpki-client