Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File:                     WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier:          Vkok5n3mVqiRmynExellQY/IUDPbKhU9wJ4iQ6sfIOU=
Subject key identifier:   B2:F2:8B:46:A2:AD:E3:D4:93:F6:AE:19:40:88:CA:03:32:8C:E2:73
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer:       /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial:       01974A7A54DAF8D412AF21F949F45F792722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 13:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:20 +0000
Files and hashes:         1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
                          2: R-1q52axanYiR_uRw04t04Z8LDo.roa (hash: v5CC/At/0UFJJZBjnOeP3jsuRpec8w6C2aXVgu/IhIo=)
                          3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: zmDXbbCW7MBf3gUJ4GlAX/yzUNpSy+/pE3MbkIoYS+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:54:da:f8:d4:12:af:21:f9:49:f4:5f:79:27:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
        Validity
            Not Before: Jun  7 13:00:20 2025 GMT
            Not After : Jun  8 13:00:20 2025 GMT
        Subject: CN=b2f28b46a2ade3d493f6ae194088ca03328ce273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:14:95:3b:33:4d:55:94:d5:85:ba:9b:9e:
                    e6:85:1c:80:35:ef:45:b8:dc:13:a9:e5:35:85:d1:
                    0f:8f:ed:1c:f3:aa:8d:76:59:38:7f:83:70:14:64:
                    12:59:10:fd:55:8f:47:21:00:be:77:6a:4b:2a:3a:
                    dd:2a:06:d3:fd:a8:f8:b1:8f:06:94:5e:5c:f0:b0:
                    9c:9e:f9:99:88:58:1a:d3:be:35:58:1a:d1:5c:0e:
                    8c:24:75:9e:a3:4e:a3:43:97:94:d7:63:49:6a:dc:
                    34:c7:74:3b:b7:67:82:1c:7b:e5:f7:39:46:ab:b1:
                    0e:4e:eb:42:2c:c6:00:f5:57:b0:cf:04:b2:67:e6:
                    cc:9c:21:56:a3:5d:02:61:a6:35:00:14:29:4c:1c:
                    c6:68:a5:de:71:d1:4e:69:cc:86:86:bf:55:ec:55:
                    a4:f2:ac:98:c1:a5:6d:b1:87:42:f3:6f:df:23:a3:
                    3b:9a:c7:ec:db:94:40:8a:8a:c1:72:ce:35:29:45:
                    cc:fa:8d:43:d0:b4:36:f3:0b:a5:ab:12:f3:0f:31:
                    f4:a2:1c:78:31:82:6b:e4:d7:03:99:bf:b9:b6:33:
                    05:c0:2b:5b:4b:2d:3b:cb:c2:30:ed:10:f2:5b:3e:
                    75:3d:aa:14:49:6d:b4:e7:46:ec:a7:16:66:ea:67:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F2:8B:46:A2:AD:E3:D4:93:F6:AE:19:40:88:CA:03:32:8C:E2:73
            X509v3 Authority Key Identifier:
                keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:07:9b:9f:f7:b0:c8:43:5b:16:1e:61:b1:c4:72:3d:95:70:
         f2:b7:4c:95:b3:e4:4e:f4:5d:09:38:15:a5:0d:13:f6:ad:ad:
         d2:04:86:8d:b0:52:22:a2:82:d5:ec:18:a4:6a:27:5c:af:9f:
         17:78:d5:de:91:ec:07:68:20:0c:dc:30:93:2c:4d:8d:95:76:
         17:7c:d0:97:d9:f3:0f:c3:cd:b5:7e:06:6c:bb:8e:2b:d1:53:
         c1:9f:f3:19:6b:b1:9d:17:eb:c6:a7:b8:fb:c5:85:6f:1c:48:
         f4:e0:46:db:b6:2d:fa:34:9f:71:71:11:ae:66:6e:d3:cb:66:
         42:56:b1:e8:ad:c9:ce:d8:ad:5e:cc:ec:78:57:1d:db:3f:1c:
         0f:b5:a9:0d:c7:f7:ae:da:35:6c:81:6f:46:b2:00:ea:d4:b0:
         74:eb:4b:ea:ec:7a:2c:41:98:68:61:39:60:7d:9f:3b:d0:14:
         b4:40:2c:61:85:36:dc:b6:3f:94:2d:b9:bf:5e:c4:0f:e0:f2:
         73:bc:cd:10:3f:2a:c7:02:2d:24:1c:29:cf:f9:76:9e:de:d9:
         26:eb:d7:9c:59:bf:1b:65:92:ec:bf:c8:ae:7a:4b:7e:25:85:
         24:47:cf:55:b9:79:1d:c1:ea:77:10:c0:d9:89:2f:66:49:ac:
         df:fd:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:25 2025 by rpki-client