Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File:                     wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier:          5tWJTiW88mFrkqfozO5c2X9mGkVO8HJaD6dD89dQa/w=
Subject key identifier:   52:3F:2C:8D:ED:37:66:37:FD:86:11:60:72:07:E3:38:92:B0:54:90
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer:       /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial:       01976F998B479D40AFFA67A1C3A888962F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 18:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:23 +0000
Files and hashes:         1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
                          2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: mGbliD1SLBNSRuBhfEAmA6EA+L82PexiXgIJX5LZTPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:8b:47:9d:40:af:fa:67:a1:c3:a8:88:96:2f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
        Validity
            Not Before: Jun 14 18:00:23 2025 GMT
            Not After : Jun 15 18:00:23 2025 GMT
        Subject: CN=523f2c8ded376637fd8611607207e33892b05490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:90:24:55:25:90:a1:47:06:4f:0d:c3:9b:
                    c2:ef:33:d6:38:a6:3f:43:87:a1:29:2d:a0:ed:99:
                    84:21:dd:2d:04:a7:d4:74:39:00:2c:3e:ca:27:a0:
                    d8:af:00:31:b6:c3:4e:9e:04:c2:cd:af:57:ab:0b:
                    94:fe:70:36:5e:08:b7:bf:a8:bc:41:04:3c:05:90:
                    8e:4d:3b:30:29:49:a5:50:53:bc:b7:e4:ec:bc:ca:
                    b1:3e:37:56:c7:64:f1:c8:1c:8e:36:18:70:d6:f1:
                    74:39:27:ff:cd:2a:a7:a6:ca:88:3f:7d:9a:df:05:
                    57:dd:d3:6c:06:b8:ee:18:3c:88:b9:40:6f:0f:ae:
                    cd:b6:eb:ec:0b:c2:5f:72:7d:26:43:4b:85:34:5f:
                    97:8c:e5:fb:af:60:be:3f:26:3e:ca:99:a1:d2:11:
                    e6:de:fe:75:7a:da:78:08:e4:3d:5c:7b:ec:6a:a5:
                    49:cf:dc:40:3a:10:df:4d:0d:d7:36:b3:c4:a5:b0:
                    98:d3:25:29:26:2a:67:7d:69:9b:a6:26:cb:32:b6:
                    5f:6d:b6:5e:61:9c:84:bf:70:3a:a9:25:9d:f8:d4:
                    46:56:f0:bc:b2:98:4f:d5:a7:07:e1:54:6e:27:0c:
                    cf:d5:e7:d9:75:dc:e2:33:3e:8c:ff:72:ce:dd:5c:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:3F:2C:8D:ED:37:66:37:FD:86:11:60:72:07:E3:38:92:B0:54:90
            X509v3 Authority Key Identifier:
                keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9a:6f:fb:44:d8:bc:f4:18:bc:ce:2c:b6:fc:64:b8:6f:34:
         3d:88:21:9c:b6:06:b2:83:8a:b8:db:b5:27:a4:86:9a:1c:de:
         7f:4c:4f:78:aa:92:df:95:b6:f9:74:1d:71:fa:2f:00:3f:a0:
         93:26:29:29:3d:02:bb:64:a6:d6:db:7f:07:d8:2a:f3:f2:49:
         d9:15:ba:b2:e6:40:16:d5:14:5c:86:a2:ec:c6:bf:65:36:b1:
         86:da:62:bd:e3:97:9a:a8:85:f9:16:8c:51:45:47:db:33:b6:
         8b:0b:ed:bf:1c:fd:83:d6:b6:aa:a1:65:86:92:88:c0:83:b5:
         9d:88:0d:ba:83:ef:c8:fc:5a:f5:05:8a:69:d9:c8:46:df:48:
         c2:23:9d:e2:7e:fb:fc:f5:80:2b:f6:c7:a1:e0:f8:f0:fa:4c:
         57:cb:f8:86:24:00:8e:f0:e9:91:79:a3:f2:45:f0:35:de:43:
         4a:b7:09:85:1a:92:ee:e9:a4:e2:a5:ea:ed:ee:65:c2:ac:28:
         6e:39:95:c3:4c:87:a7:bf:b4:a9:c5:41:78:28:98:dd:8b:29:
         1a:cc:dd:d1:5c:98:89:7e:02:7c:d3:64:d6:a3:26:38:f6:ba:
         bf:f0:45:ed:79:88:a1:83:11:58:e9:d6:c4:90:d2:af:6c:9c:
         11:f6:26:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:43:49 2025 by rpki-client