Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File:                     WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier:          oQjq2bwhYnM9Ucq4WCy2800nSoKyR/3RrS5mXr/jvxI=
Subject key identifier:   01:5F:1D:FB:FB:B2:74:93:08:B4:35:73:82:94:7B:7D:71:42:85:B9
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer:       /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial:       01985268C4EB82D5B55BCC8745F9CDFF8398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number:          1601
Signing time:             Mon 28 Jul 2025 19:00:54 +0000
Manifest this update:     Mon 28 Jul 2025 19:00:54 +0000
Manifest next update:     Tue 29 Jul 2025 19:00:54 +0000
Files and hashes:         1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: CO9qYx6fZ1ibJQ9vX5BZq9JuLNdJZ0BHmmXDpabCBtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:68:c4:eb:82:d5:b5:5b:cc:87:45:f9:cd:ff:83:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
        Validity
            Not Before: Jul 28 19:00:54 2025 GMT
            Not After : Jul 29 19:00:54 2025 GMT
        Subject: CN=015f1dfbfbb2749308b4357382947b7d714285b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:45:76:fe:2c:96:42:12:35:1d:4e:68:0d:
                    aa:30:09:56:9f:86:c3:e9:b9:12:29:79:a5:44:48:
                    7a:33:4e:bf:8f:bc:44:23:82:89:34:c3:80:ed:a0:
                    8c:b5:a1:7c:e1:aa:4e:2c:89:5f:3d:65:20:17:5e:
                    d5:ac:a9:7a:0b:3a:e9:2a:be:14:9e:b0:49:8a:d8:
                    bd:da:bc:da:6c:67:eb:08:e7:d3:2a:9b:a7:ee:4a:
                    d4:37:34:91:b1:c7:c6:62:f4:3b:b3:c5:f0:a5:f3:
                    43:b3:19:a8:dd:6a:97:aa:ba:bc:1d:1a:7a:36:7f:
                    34:3d:c6:75:b0:95:2e:0b:c0:80:88:11:f5:51:32:
                    02:98:54:ee:5a:a5:8f:b6:91:e5:b8:1f:75:1f:92:
                    0d:2d:62:78:f5:f3:9e:91:89:a9:60:62:a5:26:48:
                    5f:be:20:99:5e:04:f3:c6:34:5b:24:26:5b:04:83:
                    e6:c2:85:2d:ad:ed:f6:a3:82:d6:bc:2e:55:f2:c1:
                    25:8c:29:e2:b7:e1:35:b0:43:f1:13:6f:e6:a0:2e:
                    01:7d:c8:f9:18:3b:cc:2c:98:e6:4f:46:d5:40:8d:
                    20:78:1a:79:2a:0b:d7:35:76:e7:98:0d:34:25:c5:
                    92:e8:cc:b7:13:3f:59:f5:8c:34:7a:24:2c:d9:10:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5F:1D:FB:FB:B2:74:93:08:B4:35:73:82:94:7B:7D:71:42:85:B9
            X509v3 Authority Key Identifier:
                keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:87:43:ec:8b:44:da:b1:6e:22:4d:93:c8:6a:88:21:d7:8c:
         39:e6:cd:04:c5:2d:77:94:76:e4:db:de:b1:cd:9d:b3:8c:20:
         7a:43:49:42:e7:b0:2e:04:47:c4:5c:a6:77:9c:4e:0f:c8:89:
         56:e8:77:7c:3d:8c:c6:57:6a:d2:a7:03:6b:ae:0e:a7:fe:24:
         40:8d:ed:01:eb:2a:e3:bc:da:bf:41:25:42:1d:0e:3e:6b:8e:
         48:53:65:c5:ec:c4:18:9b:17:4a:34:d4:b1:b6:7e:1f:df:9c:
         e5:bd:a3:02:92:ab:ba:14:00:48:07:23:31:37:96:73:11:6c:
         d4:0f:ed:74:23:7e:01:19:77:1b:34:69:08:2a:b5:0b:ea:2d:
         d1:14:fd:8c:a9:0c:ba:3f:f8:69:a3:2c:19:8f:ec:01:8a:13:
         69:7a:b4:c6:ad:35:2f:e6:6d:d8:20:53:49:01:b0:02:cd:65:
         cc:ea:6c:48:e6:3a:9f:8b:2f:8e:19:19:05:ef:70:a9:c7:7e:
         89:f0:b3:7f:48:67:d5:45:9d:20:99:03:a2:85:31:61:d8:b4:
         8c:87:c6:b7:bf:80:95:43:da:32:0d:c5:cf:56:e3:c9:05:ab:
         70:6a:88:bb:11:33:48:c3:37:20:fc:95:5c:2b:ab:88:8f:23:
         29:27:3f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 21:03:48 2025 by rpki-client