Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File:                     WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier:          sI1NEMzSHxLNtYDLFJ9eRBt4IQ/HvK37G0qjC79WvdU=
Subject key identifier:   CA:4A:83:DC:F5:13:E3:1B:D6:25:0F:49:DC:42:F1:C2:0F:D7:70:CC
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer:       /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial:       019748C3604FA2E2E19446FAB1182263E1EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number:          0B17
Signing time:             Sat 07 Jun 2025 05:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:53 +0000
Files and hashes:         1: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: 450DRVePuzaTsS8LSVRvgB0HMGGZ6FoB/dyDqo8fGMQ=)
                          2: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=)
                          3: xlkkoDtcxpoL9470SYUwdesBd0U.roa (hash: E5i1JoD4+1v4NgDajZkbyhzpzTtWx/xCOYZCaaoJ38U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:60:4f:a2:e2:e1:94:46:fa:b1:18:22:63:e1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
        Validity
            Not Before: Jun  7 05:00:53 2025 GMT
            Not After : Jun  8 05:00:53 2025 GMT
        Subject: CN=ca4a83dcf513e31bd6250f49dc42f1c20fd770cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:49:98:bd:31:75:b6:2c:be:27:db:c3:2c:a7:
                    0b:52:cf:44:59:f5:78:72:14:db:33:67:7f:10:76:
                    13:d8:3c:c6:02:06:c5:40:43:73:e9:91:01:20:e4:
                    2b:d3:58:83:19:00:24:8e:c8:a1:c5:e7:fe:f6:36:
                    c4:dd:de:47:a3:53:e7:19:e2:e6:7a:df:b7:bc:82:
                    c7:10:31:ab:b8:76:20:97:4e:d7:20:74:50:b5:a9:
                    e0:53:5d:5d:5f:1a:9b:87:ff:17:de:2b:18:e0:97:
                    70:54:db:4c:71:6d:6a:2d:04:5f:00:d4:ed:50:41:
                    ff:88:59:46:81:1e:8c:1e:b0:98:8a:38:50:8c:db:
                    64:b5:5e:b1:ce:41:b2:eb:06:17:85:00:ff:84:f8:
                    90:49:35:57:f4:cd:9e:ab:57:75:60:3b:df:3e:c4:
                    b6:95:b6:eb:6d:57:c7:89:c1:82:c8:18:4b:e6:02:
                    44:89:b2:e8:a8:fb:22:9e:a0:6a:25:c1:dd:0a:17:
                    cd:d7:28:2a:77:26:71:cd:5f:8e:8f:a1:10:d1:43:
                    84:a1:9c:e4:99:eb:fc:65:9c:51:91:b9:b5:37:a4:
                    13:fa:38:37:5b:e5:c3:de:ff:cf:41:10:01:dd:9e:
                    65:eb:4e:12:a7:9b:2f:be:27:3a:2f:99:ff:5d:e7:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4A:83:DC:F5:13:E3:1B:D6:25:0F:49:DC:42:F1:C2:0F:D7:70:CC
            X509v3 Authority Key Identifier:
                keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:70:fb:dd:68:99:be:32:ca:cb:36:ae:61:64:c3:52:df:b5:
         ab:84:33:f7:65:07:22:7c:76:6c:9f:0c:2f:ed:6a:11:40:43:
         2a:16:58:b8:01:e0:3f:3d:aa:3b:e7:94:cb:51:b6:ec:2c:72:
         af:12:70:33:3a:6e:d2:a7:31:52:04:f6:97:22:5e:36:66:05:
         4d:b9:15:fb:07:af:cf:8e:2c:95:51:b1:b7:91:cf:7d:fb:7a:
         dd:56:99:c0:d2:64:ac:69:51:2b:32:a0:68:50:5e:14:e6:ff:
         e3:70:e6:02:0d:56:91:4a:8e:36:0a:21:36:ef:e3:18:fc:8a:
         6f:ee:51:6f:4d:1a:c6:04:68:cd:cb:90:ba:b4:33:df:6d:81:
         e5:24:83:45:ec:53:e9:ed:c6:3a:7c:dc:71:d4:f5:36:ce:88:
         3d:a4:98:8e:92:be:dc:b6:cc:6e:df:86:ed:f6:52:2c:0c:27:
         b1:1e:8d:21:86:4a:a5:46:5e:0a:35:ba:52:ab:2d:9a:5c:27:
         81:b9:3b:dd:d6:8b:13:53:38:53:f1:31:de:0b:96:0b:31:4d:
         1b:b0:3c:bb:3b:3c:97:1a:8d:65:3c:18:f7:cd:e6:2d:4a:d4:
         95:a6:22:c1:f0:b0:00:ad:52:b6:61:e5:5c:da:12:9b:85:e6:
         12:a6:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:53:01 2025 by rpki-client