Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File:                     WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier:          bQ449VGnWSQMUqXq4muPZpSstsy/nzK6m/Ppthw7NzY=
Subject key identifier:   85:75:04:91:72:C0:A1:00:7D:D1:17:89:39:3B:6B:4C:0B:BC:6C:74
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer:       /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial:       01975158BB9756739FEE9F3FAF31B3F72040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number:          092C
Signing time:             Sun 08 Jun 2025 21:00:59 +0000
Manifest this update:     Sun 08 Jun 2025 21:00:59 +0000
Manifest next update:     Mon 09 Jun 2025 21:00:59 +0000
Files and hashes:         1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: aaIx7XfgvAoc3wh8m+gK8sWMdXGuHtUcAkCvTw2JA0Q=)
                          2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
                          3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:bb:97:56:73:9f:ee:9f:3f:af:31:b3:f7:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
        Validity
            Not Before: Jun  8 21:00:59 2025 GMT
            Not After : Jun  9 21:00:59 2025 GMT
        Subject: CN=8575049172c0a1007dd11789393b6b4c0bbc6c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:8a:5d:2e:49:69:7a:18:3d:8d:14:52:60:
                    a8:ff:ae:f2:2d:25:c3:4e:f7:4b:6c:80:d8:13:ef:
                    14:1c:f3:e4:da:31:2c:d3:f8:6e:d1:4e:c9:db:97:
                    ac:f8:95:73:2e:f2:d2:49:42:7f:d0:d2:93:1c:b9:
                    16:9e:1c:b3:e4:ce:5f:4b:b4:ce:7f:2b:81:71:ea:
                    01:18:a0:31:d8:95:23:00:91:0a:dc:88:f8:f5:9e:
                    7a:6d:b9:72:93:1b:e0:ca:8e:29:0c:a7:17:33:16:
                    47:f4:2a:f0:67:dc:d9:26:b3:31:48:ab:f6:50:f2:
                    8a:94:ef:c6:a5:a5:5e:de:1e:63:5e:a6:e8:3a:57:
                    a3:38:cd:14:c1:8d:3b:03:62:5c:c3:aa:fc:c2:a9:
                    d0:d9:50:0c:d1:8e:5c:18:cd:9a:f4:b1:79:06:80:
                    07:04:dd:eb:53:ee:87:e1:2a:67:d6:74:05:4e:b3:
                    1e:84:46:6b:25:f1:b2:e3:c8:90:f8:95:b7:66:76:
                    c2:63:84:20:ff:bd:27:28:bd:a7:39:6e:c0:d0:93:
                    57:3a:d1:1d:b4:4b:fd:b3:4f:57:79:17:60:4b:f5:
                    eb:6f:2d:58:91:bb:75:3b:4a:f8:b8:7c:bb:9d:94:
                    81:49:ba:45:fe:b5:e4:71:a9:14:48:15:b4:0f:1b:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:75:04:91:72:C0:A1:00:7D:D1:17:89:39:3B:6B:4C:0B:BC:6C:74
            X509v3 Authority Key Identifier:
                keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:83:3c:8c:4d:5e:db:c4:f4:e1:a1:ec:15:fb:5f:14:ad:b4:
         17:90:0c:ee:ed:63:75:22:c8:7a:b6:d1:6b:1c:93:5f:12:93:
         ce:27:69:07:97:08:a9:94:6a:61:ef:ce:49:1a:73:96:69:a4:
         40:62:60:d2:af:31:5f:1a:ca:dd:2e:e7:06:31:ca:ef:58:f6:
         78:ea:f6:33:80:5a:1b:c3:77:5d:c2:6a:d7:5d:b4:3f:d6:41:
         66:dc:4e:0d:a7:07:5c:9e:9c:38:59:c3:00:6b:eb:27:6f:1b:
         df:cc:04:72:68:d9:ec:55:35:5a:09:22:47:cc:e8:ad:cb:df:
         1f:6d:79:e9:c1:35:2a:a5:50:51:f7:a2:cd:73:0b:c2:e2:fc:
         c9:cd:8e:68:28:3f:f7:25:f9:c7:c1:a9:ee:62:42:fd:ff:8a:
         c1:d0:d2:6e:b3:6e:8e:88:b7:83:5a:31:49:17:1a:3e:78:0b:
         c2:eb:c8:b1:4c:b8:36:78:6f:8c:58:67:4d:e6:49:76:dd:82:
         da:5f:5e:4a:cf:2c:67:5b:a4:a8:18:32:09:fa:20:ec:c6:04:
         4e:c5:d1:dd:ca:7e:93:bb:ec:c4:de:56:81:5a:cf:b7:8b:08:
         04:3f:76:86:ba:93:e8:f6:1f:cf:9d:2e:a2:56:7c:4c:ad:1c:
         bd:6d:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:54:03 2025 by rpki-client