Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File:                     WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier:          PlBCaYtz8gcutA2kRcnqpbOZj1cVR3OFl+kugMMVT0g=
Subject key identifier:   7E:5C:16:3A:11:87:28:B9:92:D0:A0:70:D9:01:DD:34:31:3D:D1:ED
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer:       /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial:       01974C322DFB8BF579B6723656E349431796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number:          0B99
Signing time:             Sat 07 Jun 2025 21:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:46 +0000
Files and hashes:         1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: Gb/yiVuuq8LOm8V8vainb/AnJbFrcAvOMy4apHZtMxk=)
                          2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:2d:fb:8b:f5:79:b6:72:36:56:e3:49:43:17:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
        Validity
            Not Before: Jun  7 21:00:46 2025 GMT
            Not After : Jun  8 21:00:46 2025 GMT
        Subject: CN=7e5c163a118728b992d0a070d901dd34313dd1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6a:46:07:57:5c:f3:81:4c:33:b4:23:97:19:
                    b4:af:4b:89:8f:b0:d6:4f:1b:b9:06:8d:e0:f6:f6:
                    36:77:51:0b:e3:fc:cb:60:1b:4d:87:f0:ef:13:a6:
                    21:16:46:c3:0c:b5:e8:25:9d:16:d7:ff:4f:a9:80:
                    24:9c:b8:e3:7b:4c:dd:bc:51:2f:af:c3:93:4f:41:
                    97:92:d4:e9:0e:a2:ee:9d:cf:92:4c:dd:be:5d:91:
                    4f:6e:c8:31:5e:d7:fe:8b:40:31:af:38:c2:d4:99:
                    a2:e3:36:69:7e:f6:ff:cb:b2:8d:09:e9:7c:dd:60:
                    9c:93:ce:90:ff:33:1d:75:ec:8c:af:12:c6:e1:a6:
                    c2:c1:26:bc:0b:45:01:79:22:0f:7b:09:4d:5e:c1:
                    78:f9:05:d1:78:d7:a9:c6:f6:d7:89:b0:fd:e5:2f:
                    d6:73:34:5e:64:5a:8c:17:32:9c:6a:94:bb:36:fb:
                    4d:2a:fc:67:6c:28:b2:c6:c1:ed:fd:ba:bb:66:10:
                    c8:4d:d6:3a:3e:cf:ce:3c:3f:6e:17:57:bc:53:22:
                    59:8c:26:80:d1:b7:cb:85:f4:a9:70:47:43:6c:26:
                    af:da:cb:ad:b3:95:01:bb:9c:a8:eb:46:f0:b8:d1:
                    ab:8e:e5:60:24:99:bd:e5:33:7b:d0:87:b4:fb:a8:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:16:3A:11:87:28:B9:92:D0:A0:70:D9:01:DD:34:31:3D:D1:ED
            X509v3 Authority Key Identifier:
                keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ea:ce:dd:47:32:dc:16:a5:a0:c6:2f:4d:8e:82:3e:06:4d:
         1e:31:d3:14:da:90:bd:c1:a6:12:a5:c3:64:c8:12:a5:54:2e:
         e9:a1:57:4f:88:94:b6:61:14:52:c3:87:49:59:71:b8:d4:cb:
         43:a5:99:30:00:c5:cc:9a:b0:e7:43:2c:59:2b:fa:c8:1a:ef:
         32:1f:6c:f0:24:a7:3b:66:8f:98:18:03:17:2e:ac:de:73:96:
         23:16:25:03:9f:d8:1f:55:17:4c:c4:5a:00:4e:8a:21:05:0d:
         41:a5:21:9e:a2:fd:52:79:80:fd:38:5e:0d:45:bc:59:d8:75:
         25:1b:ef:48:67:f4:7f:0a:10:6d:5d:0a:e1:86:c8:63:cf:41:
         c5:33:2d:eb:1f:77:3e:11:62:9a:2e:a4:12:3c:60:fe:4d:b5:
         f0:25:4c:38:46:47:59:ce:3c:33:d2:e7:e0:2c:de:f9:c9:0b:
         ab:be:b6:51:0b:e8:1b:11:e7:87:e5:9d:e4:31:7f:f7:78:f2:
         bc:52:ed:e4:f9:8c:25:eb:f6:67:ac:8a:96:80:02:1d:f3:85:
         17:6d:04:10:de:04:ce:0c:03:c7:a7:11:ac:44:13:71:66:43:
         0c:f0:91:7f:51:4f:cb:1c:47:96:a6:55:66:45:3e:9e:38:fd:
         12:0a:6d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMi37i/V5tnI2VuNJQxeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTg2YTZjNzFmYjczNGM3MDViNWU2NmU3NGFjMWM1NmJi
OTYwNWUwHhcNMjUwNjA3MjEwMDQ2WhcNMjUwNjA4MjEwMDQ2WjAzMTEwLwYDVQQD
Eyg3ZTVjMTYzYTExODcyOGI5OTJkMGEwNzBkOTAxZGQzNDMxM2RkMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2pGB1dc84FMM7Qjlxm0r0uJj7DW
Txu5Bo3g9vY2d1EL4/zLYBtNh/DvE6YhFkbDDLXoJZ0W1/9PqYAknLjje0zdvFEv
r8OTT0GXktTpDqLunc+STN2+XZFPbsgxXtf+i0AxrzjC1Jmi4zZpfvb/y7KNCel8
3WCck86Q/zMddeyMrxLG4abCwSa8C0UBeSIPewlNXsF4+QXReNepxvbXibD95S/W
czReZFqMFzKcapS7NvtNKvxnbCiyxsHt/bq7ZhDITdY6Ps/OPD9uF1e8UyJZjCaA
0bfLhfSpcEdDbCav2suts5UBu5yo60bwuNGrjuVgJJm95TN70Ie0+6gPbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5cFjoRhyi5ktCgcNkB3TQxPdHtMB8GA1UdIwQY
MBaAFFioamxx+3NMcFteZudKwcVruWBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAt
YTliMTNjMjgwMGFmLzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAtYTliMTNjMjgwMGFm
LzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqurO3Ucy
3BaloMYvTY6CPgZNHjHTFNqQvcGmEqXDZMgSpVQu6aFXT4iUtmEUUsOHSVlxuNTL
Q6WZMADFzJqw50MsWSv6yBrvMh9s8CSnO2aPmBgDFy6s3nOWIxYlA5/YH1UXTMRa
AE6KIQUNQaUhnqL9UnmA/TheDUW8Wdh1JRvvSGf0fwoQbV0K4YbIY89BxTMt6x93
PhFimi6kEjxg/k218CVMOEZHWc48M9Ln4Cze+ckLq762UQvoGxHnh+Wd5DF/93jy
vFLt5PmMJev2Z6yKloACHfOFF20EEN4EzgwDx6cRrEQTcWZDDPCRf1FPyxxHlqZV
ZkU+njj9EgptcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:39 2025 by rpki-client