Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File:                     WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier:          Lqjc1GxT22aLPB/RAPZTp6/TZqqBqnc9Y+ZgWY5dPro=
Subject key identifier:   26:39:84:2C:3B:2F:71:49:C8:13:8A:F3:97:05:5B:2F:AF:49:F3:BB
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer:       /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial:       0197469EABAAC71FB5108F74A21DA84DAC94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number:          0EAC
Signing time:             Fri 06 Jun 2025 19:01:33 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:33 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:33 +0000
Files and hashes:         1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: budClBF5d2iJyesI2Yhf/o7nXdnFSC763st3csXTN+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:ab:aa:c7:1f:b5:10:8f:74:a2:1d:a8:4d:ac:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
        Validity
            Not Before: Jun  6 19:01:33 2025 GMT
            Not After : Jun  7 19:01:33 2025 GMT
        Subject: CN=2639842c3b2f7149c8138af397055b2faf49f3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:e4:e4:f7:ae:9d:c8:1b:1a:5c:a5:b6:a5:
                    7d:4b:ab:bd:6d:16:39:c0:12:c3:52:3d:da:40:62:
                    02:a3:df:69:f1:00:9a:30:6b:5e:4a:9e:eb:a5:26:
                    27:b2:19:c8:98:f1:a6:30:4d:b4:4f:04:5f:ca:f7:
                    fb:26:a1:31:72:84:d0:ea:fd:fe:aa:5c:e4:15:50:
                    e4:81:d5:ce:e7:2a:85:58:19:28:08:74:08:49:21:
                    79:07:38:ff:21:46:11:05:42:49:23:10:34:f0:e1:
                    1c:b5:55:d4:a8:2f:c0:44:67:ee:97:5d:24:5e:51:
                    07:43:72:7b:70:e3:61:c5:da:0c:7c:9f:a3:f7:2d:
                    54:61:13:dc:3b:92:8f:c6:c7:4e:e0:12:2b:46:11:
                    b2:dd:83:32:4c:7e:00:45:49:25:c8:a8:02:d0:db:
                    42:27:a8:51:40:36:51:4d:16:c4:86:b3:ef:bc:a6:
                    9a:b7:81:83:88:a6:07:51:31:a2:3e:c5:89:4c:13:
                    a6:e8:b1:3f:5e:75:93:e0:ca:40:c9:41:39:fb:9e:
                    51:af:7a:72:df:47:12:98:c2:66:fa:c4:48:0f:b6:
                    74:79:f1:e4:47:6d:93:76:33:33:94:66:0e:61:3b:
                    90:ac:ae:04:32:19:1d:a2:26:25:4d:40:84:3a:8c:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:39:84:2C:3B:2F:71:49:C8:13:8A:F3:97:05:5B:2F:AF:49:F3:BB
            X509v3 Authority Key Identifier:
                keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:6c:1b:33:06:a2:f1:d0:7b:9e:42:ad:19:27:e5:47:99:fc:
         e6:fc:68:81:24:e8:75:c9:c0:8c:9f:d7:f2:df:2d:6a:c3:7d:
         8e:95:de:37:94:f7:94:0f:70:ce:81:3e:af:f3:39:dd:b0:84:
         ef:01:ef:a7:83:25:80:6e:38:31:47:7b:f5:e3:4a:6d:f1:da:
         d7:89:b4:d9:9e:6b:b5:0c:b6:70:1d:cb:f2:c1:83:98:b1:7e:
         d1:f6:c7:f6:07:49:e4:6b:97:65:66:5c:60:f7:43:48:43:7a:
         33:13:cc:4b:6c:e7:a7:26:7d:6b:52:c1:16:07:ba:8d:d8:bc:
         a9:d1:1f:78:06:1d:92:6f:6e:98:36:ca:dd:a9:76:b6:83:89:
         88:d7:72:17:fa:16:bc:22:45:da:2c:ef:79:14:3f:4d:1e:0c:
         14:db:29:86:65:23:8c:f5:29:9b:18:7a:da:ac:9d:ce:91:73:
         cb:46:3f:2a:d3:0f:58:f6:72:0b:f9:f2:87:af:a5:a5:a9:69:
         4b:54:16:0f:7d:f4:d2:65:3c:cf:e9:2a:a6:6e:dd:c3:96:a9:
         f3:d9:0c:b9:13:96:b5:67:78:f5:e1:fd:81:e7:16:5e:e0:5a:
         5c:63:d5:ba:75:4c:d3:c4:48:b7:cd:c8:78:c5:7b:28:05:44:
         ed:1f:b2:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnquqxx+1EI90oh2oTayUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDM3YTlmZTU2MjVlZGEwMTA4MWViMmU5MDdjZmQ5YjVh
NWRjOWEwHhcNMjUwNjA2MTkwMTMzWhcNMjUwNjA3MTkwMTMzWjAzMTEwLwYDVQQD
EygyNjM5ODQyYzNiMmY3MTQ5YzgxMzhhZjM5NzA1NWIyZmFmNDlmM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstbk5PeuncgbGlyltqV9S6u9bRY5
wBLDUj3aQGICo99p8QCaMGteSp7rpSYnshnImPGmME20TwRfyvf7JqExcoTQ6v3+
qlzkFVDkgdXO5yqFWBkoCHQISSF5Bzj/IUYRBUJJIxA08OEctVXUqC/ARGful10k
XlEHQ3J7cONhxdoMfJ+j9y1UYRPcO5KPxsdO4BIrRhGy3YMyTH4ARUklyKgC0NtC
J6hRQDZRTRbEhrPvvKaat4GDiKYHUTGiPsWJTBOm6LE/XnWT4MpAyUE5+55Rr3py
30cSmMJm+sRID7Z0efHkR22TdjMzlGYOYTuQrK4EMhkdoiYlTUCEOowCAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY5hCw7L3FJyBOK85cFWy+vSfO7MB8GA1UdIwQY
MBaAFFkDep/lYl7aAQgesukHz9m1pdyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lYWE3ZTItOGFmMC00ZGUxLTgyNDEt
YTU1ZmZhZTJlYmQwLzEvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lYWE3ZTItOGFmMC00ZGUxLTgyNDEtYTU1ZmZhZTJlYmQw
LzEvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2wbMwai
8dB7nkKtGSflR5n85vxogSTodcnAjJ/X8t8tasN9jpXeN5T3lA9wzoE+r/M53bCE
7wHvp4MlgG44MUd79eNKbfHa14m02Z5rtQy2cB3L8sGDmLF+0fbH9gdJ5GuXZWZc
YPdDSEN6MxPMS2znpyZ9a1LBFge6jdi8qdEfeAYdkm9umDbK3al2toOJiNdyF/oW
vCJF2izveRQ/TR4MFNsphmUjjPUpmxh62qydzpFzy0Y/KtMPWPZyC/nyh6+lpalp
S1QWD3300mU8z+kqpm7dw5ap89kMuROWtWd49eH9gecWXuBaXGPVunVM08RIt83I
eMV7KAVE7R+yhw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:22 2025 by rpki-client