Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File:                     wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier:          DDTIqPK39LMpCuBslr3gEiTFKrhFSHkuOen6N++M2HE=
Subject key identifier:   80:A5:82:9E:A8:5A:D2:94:95:CF:B2:0E:FE:21:BE:46:2A:EC:E7:39
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer:       /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial:       01975B006DC45A08B08D72A74E4A13F40669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number:          1587
Signing time:             Tue 10 Jun 2025 18:00:44 +0000
Manifest this update:     Tue 10 Jun 2025 18:00:44 +0000
Manifest next update:     Wed 11 Jun 2025 18:00:44 +0000
Files and hashes:         1: JPfPPVmim_oMGeKjFN51mz2DXZs.roa (hash: huLyNUibR3FOKspRTI8zL5oJYiyI6ApwBCQ1/RFqhSE=)
                          2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: 7vtYciVtaPgnN2jCfLaEo2rBM3HZOf/lypiae9F5Yns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:00:6d:c4:5a:08:b0:8d:72:a7:4e:4a:13:f4:06:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
        Validity
            Not Before: Jun 10 18:00:44 2025 GMT
            Not After : Jun 11 18:00:44 2025 GMT
        Subject: CN=80a5829ea85ad29495cfb20efe21be462aece739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:d8:ec:6c:41:b4:4b:e8:bd:0f:8f:b3:24:
                    7f:cf:10:a0:8f:b2:01:a7:4f:95:81:1e:81:69:97:
                    6b:5c:0e:2a:be:cc:7d:96:84:2b:17:7b:b3:23:9e:
                    38:ed:03:ea:6f:6c:00:c6:1b:4c:ab:c0:1e:79:49:
                    6d:6f:43:c6:8f:f3:80:c5:3a:85:f8:59:48:2e:e6:
                    85:03:f9:a8:33:08:6d:8f:e3:ce:e6:ea:7f:16:c3:
                    dd:c0:ff:ac:88:c1:eb:27:fb:5b:c1:aa:9d:fc:d9:
                    4c:e8:7b:d2:98:67:3b:aa:2b:e3:3f:31:60:d4:c4:
                    c9:c3:ad:45:ac:9b:9e:7a:36:62:bd:15:65:5e:0a:
                    19:84:49:1f:d6:d4:5b:01:86:bc:98:c1:61:4b:b5:
                    e4:13:10:96:be:b1:71:07:dd:92:93:f6:55:b7:bd:
                    84:d6:fb:f1:ba:22:7c:88:02:bb:9e:4d:68:a3:02:
                    a8:3a:87:ed:a1:fc:3b:74:82:07:e7:d2:81:ef:30:
                    68:de:26:1f:89:15:ab:99:7e:6b:2a:59:bd:70:b9:
                    4b:06:d6:47:ec:2f:de:dd:d8:45:34:af:a5:19:58:
                    dd:9f:d1:70:1c:13:98:ce:97:dc:d5:ea:df:31:75:
                    bd:ca:ee:38:44:fe:07:49:3b:a2:57:84:de:4e:49:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A5:82:9E:A8:5A:D2:94:95:CF:B2:0E:FE:21:BE:46:2A:EC:E7:39
            X509v3 Authority Key Identifier:
                keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:02:ca:6b:d3:d8:e7:59:47:61:5c:c2:13:20:28:85:24:de:
         cd:5f:d6:cd:15:8d:7c:92:6d:20:0d:04:96:e1:40:da:22:15:
         20:92:f0:6e:84:75:76:5f:e8:07:28:19:c6:9d:d5:dc:1e:d8:
         b7:89:11:67:89:84:f0:e1:64:62:7c:3c:05:3a:ce:16:ed:e4:
         26:10:d2:4e:c4:5c:6c:9f:50:a3:c7:d5:7e:d6:08:a8:86:f4:
         8b:3d:55:e0:01:e9:b7:64:29:aa:3f:60:89:49:14:9c:98:1a:
         9f:16:c7:bf:34:36:36:e2:1e:30:c7:8c:04:90:95:81:0c:fd:
         e6:bc:ee:ea:bb:51:38:ae:bc:32:45:4a:13:26:c5:04:44:76:
         f1:dc:2d:b4:5b:88:09:77:34:f8:fa:f5:ac:97:dd:ae:7a:01:
         be:d8:f0:13:74:b5:9d:51:d5:a5:75:6c:56:86:98:78:69:82:
         00:67:db:3d:11:5d:94:08:5c:f5:ac:27:12:88:dc:94:62:cd:
         11:80:f3:98:a7:39:4c:36:df:f5:01:4e:42:bd:43:fc:10:24:
         14:83:0b:ec:45:93:d2:74:a7:3d:ee:69:20:5a:ba:e8:0a:41:
         ef:7f:e8:50:1c:34:ad:01:d4:2b:d1:b6:8f:cf:7c:72:79:8a:
         a1:44:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:06:03 2025 by rpki-client