Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
File:                     wtgszwyN6n1_atcujmJGLXviDVY.mft (raw, json)
Hash identifier:          5ml10RemssgLudUqVbEFN4THRuMvpRGeJbAbCsXo6s4=
Subject key identifier:   AC:DA:7C:F0:EC:7F:82:C7:94:C4:79:18:52:BE:02:61:2D:24:82:EB
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       019761DE306EB5D709877E29F697F79F3539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
Manifest number:          1591
Signing time:             Thu 12 Jun 2025 02:00:40 +0000
Manifest this update:     Thu 12 Jun 2025 02:00:40 +0000
Manifest next update:     Fri 13 Jun 2025 02:00:40 +0000
Files and hashes:         1: 56E2eRNFxzpXqTECZSNhq9NrPOQ.roa (hash: kVqvgKF+nZSGal/AwDKY90LYsegDO41+Dxp8TZ0XdP8=)
                          2: JtbkknZoz-ZpYkGR5Faik_dT6m8.roa (hash: CKgz0QGH5sNSVcZST2h0jpMtQH08uuEFFd8ZyzC9G3o=)
                          3: ltRYivrHDrWNdxne_A9FIv1LJlY.roa (hash: qB1Eut1IyAFg4Lz5YzqH97WbuLNnEkbs/hF3c3T/wFo=)
                          4: wtgszwyN6n1_atcujmJGLXviDVY.crl (hash: aXP9JHpEQisgRgeBkdZmfHZUAaVY7OrjJo9ZkIsczqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:de:30:6e:b5:d7:09:87:7e:29:f6:97:f7:9f:35:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Jun 12 02:00:40 2025 GMT
            Not After : Jun 13 02:00:40 2025 GMT
        Subject: CN=acda7cf0ec7f82c794c4791852be02612d2482eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:fb:25:07:a0:33:da:e5:25:1b:23:f2:8f:
                    3a:7a:ca:4b:7b:92:7b:21:75:06:19:4c:bd:36:0e:
                    ef:1a:91:b8:23:8b:48:5e:60:c6:34:d5:47:cd:f9:
                    94:50:98:09:83:86:b6:35:d6:a4:5f:51:d3:1c:ec:
                    0a:03:a9:2f:f0:cd:8a:5b:64:66:bd:13:ec:25:4a:
                    77:cc:c5:96:28:cc:36:ed:64:c9:c1:f7:1c:81:ef:
                    9a:7e:33:53:09:82:02:8b:54:b2:b6:78:6d:15:0b:
                    7b:08:5b:77:36:88:87:3b:4c:8a:35:4c:f1:f6:b2:
                    b8:eb:50:26:96:f7:45:e1:72:7b:93:be:03:48:fc:
                    96:31:cd:fa:97:83:35:07:f8:c9:c1:4f:c8:38:47:
                    52:80:77:c3:d3:01:f9:d2:22:ad:20:a4:82:c7:8c:
                    0f:45:0a:9a:35:51:a5:31:e2:8c:1a:a3:f5:21:8e:
                    1f:7c:68:bb:f0:6a:b7:4a:26:53:3d:d7:7c:25:2c:
                    c6:13:49:c4:bb:cc:88:ad:bf:05:b5:9a:32:b0:31:
                    35:a7:49:d9:7f:20:80:c8:47:b1:ed:38:e4:a2:a0:
                    5a:9c:80:73:a3:55:1c:27:ad:a9:6a:28:88:fc:f3:
                    2f:22:e2:85:88:e3:c3:e0:7b:9c:44:72:ee:a4:b4:
                    a8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:7C:F0:EC:7F:82:C7:94:C4:79:18:52:BE:02:61:2D:24:82:EB
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:1a:ef:10:e2:23:b6:71:cc:72:d7:87:a3:e1:4c:bd:9f:81:
         4a:e6:c9:88:2b:16:ab:5f:4a:fb:28:fe:47:6e:e6:56:87:32:
         26:e4:e9:31:cd:01:e8:73:bf:b4:d8:b6:d2:fd:fd:a5:0a:62:
         69:ed:eb:f0:b0:bb:0f:58:49:9d:f1:de:2d:0c:56:f7:0e:be:
         73:60:60:9e:4a:65:44:e9:cb:bf:32:70:27:c4:b2:3c:19:b2:
         58:8c:16:15:f5:b3:84:92:e3:1f:8e:7c:33:c0:0d:8f:d5:d2:
         77:5e:1d:f9:dd:29:ef:81:39:53:4c:6b:3b:15:d6:b4:4b:f6:
         a9:da:de:d5:d8:c1:9e:7f:20:11:b3:bd:d7:e6:20:ae:38:f8:
         7c:3e:2d:5b:55:3c:e1:6a:27:00:bc:96:0a:15:ed:2f:e3:cc:
         a9:2b:2b:e1:5b:b5:b4:2e:90:02:44:87:49:2a:da:ab:7b:c9:
         cb:bf:6b:4f:08:62:3c:85:3c:e1:a0:46:df:0e:3a:b5:cf:8f:
         e9:2b:89:5e:80:2b:71:36:51:50:54:3e:cf:9e:9c:41:e8:01:
         a6:bd:05:d3:f9:ba:7e:de:cc:71:7a:c7:2d:fc:24:36:7e:4d:
         e5:91:49:16:f8:ee:14:1d:33:6e:f4:97:7f:e8:1a:73:75:09:
         5b:7c:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 09:44:34 2025 by rpki-client