Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File:                     Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier:          pDrZEXwRd9zjXMW25ooLgutlRiacotFP8xTAQNXag38=
Subject key identifier:   62:EA:75:53:4C:A4:C1:C6:DD:21:8C:8E:85:52:0D:5C:07:33:DB:14
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer:       /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial:       0197C94BA8155996781A849E31F666FC8D87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number:          0B07
Signing time:             Wed 02 Jul 2025 04:01:07 +0000
Manifest this update:     Wed 02 Jul 2025 04:01:07 +0000
Manifest next update:     Thu 03 Jul 2025 04:01:07 +0000
Files and hashes:         1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: h2qOFyNH9JwqhOCOtcCJU1x3WjQGAPLvliJrJ8yvU2A=)
                          2: y0QD6cVeHITeOOUrewdmduPjNyw.roa (hash: d578B+uX2xF03DWPlSDJU4G4ivlMPauq0XylCe7obdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:4b:a8:15:59:96:78:1a:84:9e:31:f6:66:fc:8d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
        Validity
            Not Before: Jul  2 04:01:07 2025 GMT
            Not After : Jul  3 04:01:07 2025 GMT
        Subject: CN=62ea75534ca4c1c6dd218c8e85520d5c0733db14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:fc:36:cd:d1:fe:d3:04:ef:a4:d5:00:73:
                    7b:48:8a:c0:71:a2:6e:d5:ca:af:35:bd:4a:a1:1f:
                    7e:b3:46:e7:c4:3f:1d:ab:15:bb:5b:10:28:d5:32:
                    a5:be:28:42:b7:f5:09:34:fe:c3:8a:e4:ce:3f:52:
                    87:d7:76:c5:34:68:28:f4:86:ba:71:5c:a7:b2:54:
                    df:36:d9:58:44:e7:5e:5e:29:c9:68:e6:b8:00:a8:
                    34:32:e5:a8:d5:cf:7a:d8:6b:1e:c4:31:70:66:c4:
                    56:6f:24:e5:66:20:fd:04:9d:bb:3b:8d:18:44:03:
                    4b:c9:bc:5d:1e:83:ab:d4:09:50:d2:38:c7:c9:b0:
                    c5:70:6f:36:69:26:f1:46:bb:28:cf:24:ab:c0:21:
                    31:19:00:5d:23:eb:c6:11:ff:ca:36:04:0c:0c:ef:
                    10:18:fe:b4:6f:49:2b:26:dc:06:88:ad:1a:fa:39:
                    e3:91:5a:29:c9:2d:2a:c3:5b:d9:d6:2e:90:66:bb:
                    8a:c7:df:39:c4:25:c5:5d:6b:f6:2b:27:e1:20:1b:
                    dd:19:61:cd:72:ec:fe:c1:64:4b:47:fc:d9:36:9c:
                    3a:88:37:5f:cb:64:7e:b0:8e:7c:23:9b:62:62:37:
                    00:17:c9:d9:af:e6:f3:ce:55:6b:91:4b:49:90:b1:
                    9e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EA:75:53:4C:A4:C1:C6:DD:21:8C:8E:85:52:0D:5C:07:33:DB:14
            X509v3 Authority Key Identifier:
                keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0d:19:7e:fe:99:f7:a4:32:77:d1:dc:13:f1:76:45:7d:80:
         80:13:e9:8e:50:f7:58:48:d5:22:76:14:dd:00:27:b7:36:1e:
         15:91:dd:3b:bf:0c:e1:2a:a5:54:69:11:ad:84:12:e4:e2:8e:
         30:38:48:60:90:64:fc:8e:15:46:f2:d2:b3:f7:51:37:ad:d8:
         2a:6b:e4:91:3c:0d:9a:09:5f:a7:46:33:d6:5e:3b:39:c1:4e:
         54:7f:e0:94:22:25:bf:ab:6b:c5:52:39:bb:ce:ca:29:d0:b9:
         99:64:d7:8f:da:ac:a6:09:d6:84:2c:94:3d:4a:0d:38:df:24:
         38:b9:21:b9:ff:2c:76:3f:c1:bc:ac:5f:7a:94:a0:98:82:0e:
         d7:47:a9:18:cf:74:ad:59:50:fe:6b:9a:3a:a4:8b:14:85:af:
         a2:d3:ca:4c:cf:96:8c:4f:28:5e:23:ee:82:a5:46:82:29:3c:
         aa:7e:d7:f7:64:1d:ac:cd:78:01:f3:12:da:7e:37:29:96:4e:
         5c:6c:76:24:00:77:bf:4b:52:cf:3d:65:fa:ce:bf:e1:a7:bd:
         3e:a1:c5:a4:3b:17:5e:29:71:e9:9f:27:89:76:18:ad:bd:df:
         6e:8c:59:51:62:98:e5:5a:fc:b7:41:15:b5:ef:65:ee:a8:5c:
         13:d9:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:16:35 2025 by rpki-client