Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft
File:                     WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft (raw, json)
Hash identifier:          Lx3gNmW8nrDQW6llbYhe+MOMjVKTBvSOaV5H50jfcTc=
Subject key identifier:   B1:B3:FD:9B:27:7F:27:AF:68:85:25:DF:5B:63:6E:A8:F6:3E:BE:5C
Authority key identifier: 58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5
Certificate issuer:       /CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
Certificate serial:       019923314F5C743854E883F6500A88E46C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft
Manifest number:          0BB9
Signing time:             Sun 07 Sep 2025 08:00:58 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:58 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:58 +0000
Files and hashes:         1: WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl (hash: wm0hQh8REjFM6+qmQT0n0kp5gB1NL+yP4sxCrih+5ks=)
                          2: us94-cTYjSj_Phf3kZ7i28S_4EE.roa (hash: oRFFWuNByAAmZ32nIZdCPFxlnNzHPkwynXEEHoRBcpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:4f:5c:74:38:54:e8:83:f6:50:0a:88:e4:6c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
        Validity
            Not Before: Sep  7 08:00:58 2025 GMT
            Not After : Sep  8 08:00:58 2025 GMT
        Subject: CN=b1b3fd9b277f27af688525df5b636ea8f63ebe5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:ec:79:66:27:3b:ae:71:ce:cf:2e:c1:8c:
                    40:20:ff:bb:ea:88:90:51:e3:12:3e:a2:a5:70:8f:
                    5f:bd:44:30:6a:c9:7c:e8:e7:80:c1:7e:02:10:e3:
                    f1:35:a7:ba:12:ae:42:13:8c:c8:e1:25:9f:36:1b:
                    31:eb:79:06:6e:2a:30:e2:24:47:8e:ab:fa:a8:34:
                    be:b1:45:f0:81:03:2c:b4:d7:be:e3:dc:15:b9:81:
                    8b:49:de:bb:3a:08:79:6a:83:c0:25:a8:7b:e7:4b:
                    28:24:26:c1:73:36:72:a0:f7:8f:30:62:36:b7:0b:
                    c6:0a:b3:57:74:5c:76:06:c6:da:03:70:f7:63:9c:
                    ed:50:f6:8d:a5:c5:e9:00:08:a5:a7:4c:1a:80:94:
                    88:72:4b:6f:a6:fc:bd:3c:63:e1:7d:de:5e:e4:3a:
                    43:41:d8:f0:c2:76:09:c0:39:b5:6a:e7:95:93:92:
                    4e:4f:70:71:c9:6d:82:45:25:0e:1b:ed:11:1f:7a:
                    42:d6:7f:ea:4b:df:8b:8b:e7:b4:5a:db:4f:b7:b2:
                    19:86:68:7a:dc:17:fd:b2:12:35:39:65:86:e5:87:
                    89:f9:5f:a7:3e:96:02:b5:0a:e5:de:18:d9:cd:45:
                    ee:df:ba:e5:81:f1:94:7c:d3:7b:2b:a2:d6:7e:cb:
                    5b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B3:FD:9B:27:7F:27:AF:68:85:25:DF:5B:63:6E:A8:F6:3E:BE:5C
            X509v3 Authority Key Identifier:
                keyid:58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:eb:a9:24:0a:0c:3c:d3:44:94:6e:99:0b:ed:e5:2c:52:f1:
         6c:dc:a5:ff:46:a9:6f:30:35:96:65:a6:63:c5:30:82:3f:74:
         3f:98:ad:b1:a6:2f:4f:c6:d8:be:6f:de:6d:45:96:f1:d3:b7:
         20:f2:9e:fa:24:c8:d0:0e:32:44:5f:7f:47:2d:1b:6c:cb:b6:
         2d:c6:61:9d:89:e2:32:62:e3:73:a5:a0:a8:a1:39:72:ee:b6:
         67:06:8d:87:32:23:07:96:c8:a2:59:ab:3a:af:72:32:54:c0:
         9d:db:de:02:a5:82:f3:dd:29:2c:c9:a1:38:0d:34:ad:50:a6:
         94:41:08:f3:46:c6:f1:c4:34:8c:f3:c1:fb:55:bc:b2:19:28:
         b7:02:13:ae:67:a1:e5:ba:76:c6:14:4c:92:e0:5f:6a:d2:32:
         d2:a4:38:1e:2a:2e:29:0c:96:cc:af:3f:f6:f9:91:3e:19:5d:
         50:a9:7f:3d:b6:4a:b5:aa:0a:fc:eb:8c:ce:fe:e8:2c:ad:4e:
         94:09:ed:b7:93:56:7a:56:c4:52:c7:06:8d:91:e4:af:c4:b8:
         9f:9c:bf:f3:2d:0e:0f:f6:b0:fc:cb:eb:d2:fd:09:0a:49:b9:
         27:b1:0f:27:7b:4c:88:eb:8b:5e:b8:90:63:65:a1:30:95:d4:
         ea:6f:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:59:16 2025 by rpki-client