Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File:                     WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier:          GMNPkenXlwbkPSel9Fbh5fo12Y5nZisQpQTOzh7/BZ0=
Subject key identifier:   AB:0A:97:0A:B3:66:0A:85:71:91:BF:38:47:6B:C2:BC:98:4A:79:B1
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer:       /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial:       019749D5D3714E03F39607521315F0935175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number:          1578
Signing time:             Sat 07 Jun 2025 10:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:39 +0000
Files and hashes:         1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: Xpdn7z56rd1tn0YU1RYeZK4AKHCiS6izhSMAe/VD3Y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:d3:71:4e:03:f3:96:07:52:13:15:f0:93:51:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
        Validity
            Not Before: Jun  7 10:00:39 2025 GMT
            Not After : Jun  8 10:00:39 2025 GMT
        Subject: CN=ab0a970ab3660a857191bf38476bc2bc984a79b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:8d:b6:32:b3:6b:b7:0b:0d:38:9d:0b:44:
                    d2:0e:c0:b9:32:57:cb:5a:bc:cb:35:05:52:81:06:
                    ad:f8:f1:43:ac:c1:75:5f:fc:2c:14:ee:a9:e5:2b:
                    10:44:91:4d:da:54:7f:dd:4b:d5:59:c6:08:8a:0c:
                    4c:75:74:02:b5:df:3f:84:89:10:23:1a:48:72:32:
                    04:da:27:f5:d6:67:81:af:61:e5:4a:f4:67:e0:85:
                    3c:13:7d:fc:3c:3f:98:bb:22:ef:73:f1:c1:5f:61:
                    b0:b6:fa:8d:3d:38:e1:ac:b5:9b:53:1a:e7:7c:6b:
                    3e:4a:fb:ca:3f:1f:1c:74:0a:6d:42:fe:4e:60:9b:
                    cc:71:a3:8d:5d:25:01:ae:de:cb:77:87:1b:a6:62:
                    1f:f5:80:d5:75:c1:11:17:c8:29:0d:33:bb:bf:bc:
                    5a:77:3b:4c:64:34:bc:71:f4:d1:ea:16:91:75:77:
                    d8:1b:c3:ca:2d:15:14:63:89:e0:35:c3:ce:fc:71:
                    b5:6a:9a:51:90:e7:a1:e5:c1:86:1b:96:c7:43:a4:
                    00:ca:99:40:f8:97:30:86:bf:63:e5:30:0f:e7:fb:
                    52:e7:be:0c:00:bd:32:aa:01:6f:70:cc:7b:60:4b:
                    47:34:02:fc:dc:86:0e:35:f2:e2:d0:e3:5c:d7:f8:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0A:97:0A:B3:66:0A:85:71:91:BF:38:47:6B:C2:BC:98:4A:79:B1
            X509v3 Authority Key Identifier:
                keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:a6:4e:51:a6:b5:13:bc:9b:07:0d:b6:a6:a7:f4:51:04:
         0c:3f:1d:67:b3:b6:46:27:10:c9:b0:e0:66:07:35:10:ec:9b:
         ee:d2:fd:9d:36:8c:47:9b:49:4a:24:cf:f5:c7:71:0f:47:6e:
         6f:69:df:1b:96:84:27:3d:32:8a:f9:d1:d0:54:95:ad:c2:2b:
         29:9f:47:46:c2:56:80:6a:bb:f1:84:1f:39:cf:ce:73:fe:7e:
         06:17:cd:82:83:eb:3f:99:34:87:3b:fe:41:40:6e:3f:1f:8e:
         ea:b9:4e:52:99:b1:f7:0a:aa:92:0f:a0:64:8b:36:a9:14:c1:
         d4:52:87:5d:b4:1f:da:bd:2e:47:9d:61:ee:ca:7d:59:56:a0:
         d9:f3:4a:5e:10:38:a2:8a:da:81:db:f6:a3:bd:00:9e:b2:55:
         72:0b:9e:e6:f0:fd:1e:d9:88:69:f9:c5:bc:df:7b:88:72:78:
         a0:96:1e:c4:1d:aa:e7:4e:bb:5e:68:03:03:61:4c:ed:d8:8f:
         10:a4:1e:19:fd:48:4f:29:39:b9:ed:a2:96:da:dc:65:7a:69:
         19:bc:b2:77:6d:d1:a0:d9:71:e7:69:5a:d6:7a:d6:08:48:60:
         58:42:3d:49:e2:2a:4d:c2:cb:a7:e0:f9:86:b9:2b:43:36:75:
         8e:b3:3e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:10 2025 by rpki-client