Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File:                     WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier:          6sWxZHNUJ2I9q9yLqkp77s+k/5wNqdKvLyUHAQ83jz4=
Subject key identifier:   07:E0:40:29:50:19:84:5B:A0:30:43:42:C0:50:32:26:04:75:67:83
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer:       /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial:       01974A4379FDB8A1531A84D716715D1B0DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number:          0216
Signing time:             Sat 07 Jun 2025 12:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:25 +0000
Files and hashes:         1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
                          2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: STX3x8eTohRJSOiTOkUqFexYK8QmjJn5YWOHwL0c4vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:79:fd:b8:a1:53:1a:84:d7:16:71:5d:1b:0d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
        Validity
            Not Before: Jun  7 12:00:25 2025 GMT
            Not After : Jun  8 12:00:25 2025 GMT
        Subject: CN=07e040295019845ba0304342c050322604756783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a7:05:15:e2:5c:65:2d:69:3d:a2:c7:cf:67:
                    da:18:31:7f:9b:ac:9e:e9:70:42:8b:66:55:fd:a8:
                    29:08:a9:e0:5a:8e:95:3f:1b:7e:8f:54:df:35:2c:
                    b8:42:2d:88:4a:e1:be:55:a1:1e:e7:6a:a4:ed:d0:
                    6c:71:e3:4d:34:9d:68:2a:0f:70:40:33:92:6c:88:
                    95:df:21:98:dd:a7:8f:ec:0e:44:0f:e6:67:e7:4c:
                    dd:3d:f7:69:6b:09:34:9c:ad:c5:a1:21:23:76:7b:
                    6e:8f:c8:8f:72:7d:47:7b:91:e2:27:d7:f5:f0:3a:
                    ec:78:53:a4:41:27:54:a6:5b:ab:eb:02:5e:59:cd:
                    de:f5:7d:73:43:41:97:66:e0:69:0c:6e:bc:5a:21:
                    2d:24:ad:62:23:35:ab:cd:e8:8e:c9:94:5d:d4:85:
                    a0:11:81:3a:b7:f8:37:2c:bc:6e:75:47:7d:aa:83:
                    3d:2a:37:41:13:10:e0:e7:b5:65:42:c8:2a:4d:ca:
                    d2:60:18:61:97:da:e2:8b:06:53:4e:81:38:fc:0b:
                    34:be:26:4a:b6:4e:47:8b:56:4a:c0:58:67:a8:42:
                    c3:63:e8:02:d5:b8:1f:1a:b3:99:0b:e3:a4:e2:b9:
                    a0:06:f8:c6:22:2a:91:7b:44:b2:ea:9c:03:9e:69:
                    04:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E0:40:29:50:19:84:5B:A0:30:43:42:C0:50:32:26:04:75:67:83
            X509v3 Authority Key Identifier:
                keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:68:55:59:85:4e:66:3e:a6:ea:45:54:6a:8c:33:80:f1:86:
         83:78:d5:60:12:89:1b:16:7d:eb:c5:63:16:3a:08:0b:4f:a8:
         50:71:aa:86:cc:10:25:ae:98:75:36:18:02:1f:af:c1:9e:7b:
         da:32:be:5b:87:e3:f3:c5:c2:03:30:23:3c:bf:1c:98:69:8b:
         38:38:e2:ed:cd:03:31:ee:71:dc:50:bd:7e:29:7d:19:3b:8c:
         90:f7:7d:bd:6e:30:38:a9:be:07:c1:a4:7a:04:b6:a4:db:1f:
         72:5d:53:3b:c6:3a:1e:89:e0:e9:35:28:30:54:ee:38:fc:eb:
         c1:b7:a9:93:ec:1c:ce:90:1e:8c:5c:bd:ef:b3:1a:85:64:25:
         3b:75:5b:17:09:bc:5d:76:b8:93:93:ac:be:c8:6f:58:71:ec:
         cc:a1:44:03:8e:d1:d5:cd:b9:35:38:a8:fb:8a:7f:29:ba:be:
         0d:02:12:a5:af:92:68:51:0c:0a:87:eb:6b:15:f9:18:86:c7:
         cd:8a:1e:e5:c7:66:d6:d2:a0:3b:d9:ea:62:5f:c4:79:61:90:
         9a:c2:c2:70:7c:de:af:80:21:de:55:50:22:11:89:c0:a4:a6:
         25:3b:52:95:c1:ba:d1:eb:14:7d:4f:81:24:d5:0b:39:c3:05:
         ac:a8:71:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:50:30 2025 by rpki-client