Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          Dz7n8jv0AfPiAiLAXvEnFJGzFnfcbT9Po1lKw20SE4k=
Subject key identifier:   CC:6E:D3:16:D6:CF:23:E9:77:49:FC:CB:12:3C:F7:F5:D7:C0:66:26
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       01974C691C10D8D6CF1F0DB758C7524A0ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          1584
Signing time:             Sat 07 Jun 2025 22:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:46 +0000
Files and hashes:         1: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: 4WzeH3CX0IDbO/b0Eyfj8U0IGIBA4dsNRHlHMiOKXXQ=)
                          2: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (hash: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=)
                          3: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (hash: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=)
                          4: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (hash: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=)
                          5: qEBSULOSMZqvdv0jIfml2f7tabs.roa (hash: nH9uGd3tMpksCUbkWl3JLVG6iE75o6qgmjF/U2MlHRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:1c:10:d8:d6:cf:1f:0d:b7:58:c7:52:4a:0a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: Jun  7 22:00:46 2025 GMT
            Not After : Jun  8 22:00:46 2025 GMT
        Subject: CN=cc6ed316d6cf23e97749fccb123cf7f5d7c06626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:44:ea:09:88:0b:fc:62:4e:26:88:71:14:
                    bb:ef:15:ba:13:94:9b:92:18:e5:55:49:44:66:cb:
                    68:7b:ff:f7:31:27:68:81:da:51:b5:be:17:86:fb:
                    ec:cb:be:f5:ab:61:8c:f6:14:94:80:89:19:0a:d1:
                    a7:27:db:07:06:20:a0:59:b4:5b:20:b9:cc:07:09:
                    bf:ad:48:11:16:2b:cb:29:ba:33:8f:36:c2:1e:13:
                    47:55:56:25:b9:a6:9a:d3:a4:31:a1:0c:5f:5f:56:
                    38:bd:87:79:ed:a5:e9:0c:b1:b6:16:d9:45:29:1e:
                    9c:61:73:ac:7f:64:7d:d3:05:a3:9e:00:7f:03:46:
                    b0:d9:fd:e5:b6:85:e3:36:a3:76:33:f7:74:3a:db:
                    1b:d5:5b:e2:8f:1d:40:ba:dc:d7:a0:df:db:16:91:
                    5c:8e:ff:69:e9:37:0d:50:85:d9:2c:58:e7:4a:70:
                    b6:1b:d6:53:f1:e6:99:13:b8:21:d9:82:3b:ad:e0:
                    4b:a2:85:90:8a:c4:69:e3:2c:8a:5f:5f:e6:fe:7e:
                    b8:b8:45:12:26:c1:03:6b:5b:02:3d:09:6d:6a:1b:
                    16:70:8e:1f:ba:1a:ac:79:d5:03:a8:c6:b3:42:fa:
                    60:35:59:bb:c8:21:69:0f:81:81:f6:e5:98:64:03:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6E:D3:16:D6:CF:23:E9:77:49:FC:CB:12:3C:F7:F5:D7:C0:66:26
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:27:9f:0c:f4:4d:0b:99:47:df:42:a8:f9:1f:1f:b5:25:
         68:65:5d:e8:25:14:9d:7b:8a:42:26:13:3d:3b:09:f5:35:f1:
         98:05:08:32:40:bb:83:d7:43:ca:08:80:4e:ea:22:eb:5e:4e:
         18:c5:2a:cb:63:49:2e:fd:f8:d5:fb:8e:ef:07:c8:45:d7:5e:
         70:83:40:80:1e:7f:7c:da:02:cb:8a:02:ed:bc:4f:c4:c2:8b:
         b0:f8:d9:80:65:f2:2f:eb:f7:c1:32:28:0e:2d:fb:82:93:51:
         ee:fb:d2:e0:b3:14:21:c7:78:e1:59:5e:2c:ba:a1:9b:64:7e:
         45:75:b9:cc:ca:9b:6f:38:e5:9f:a0:a1:65:45:1e:4b:2c:41:
         7f:9c:b7:72:19:5d:17:e4:2c:be:4f:c3:c2:36:40:6c:06:d6:
         52:8d:6d:6f:0c:e7:33:5e:37:d5:72:43:e5:de:5f:1d:41:92:
         38:54:86:82:35:14:56:2b:2c:11:2c:32:f3:5a:b7:7f:6a:d3:
         5a:18:01:49:65:19:df:90:88:82:41:11:5f:70:96:99:7c:b1:
         8d:ab:b1:24:d0:e5:58:24:35:52:c8:c0:ed:c5:9a:08:fd:43:
         8c:50:eb:d1:90:43:69:bc:11:f1:6a:6d:91:17:bc:e6:e6:16:
         5f:13:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:22:00 2025 by rpki-client