Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
File:                     WLuO46dH7YtXhlfN1HN1hvX9uTE.mft (raw, json)
Hash identifier:          kIVHNt4KK1+4+Sbev6rfFFy1f5MrF5yvLxQrr1Qb/0E=
Subject key identifier:   A1:55:E7:64:43:80:90:74:C1:B2:6A:11:22:BD:E1:3A:7F:2A:8D:5B
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Certificate issuer:       /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial:       01975158EC002A9090654207446385487D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 21:01:11 +0000
Manifest this update:     Sun 08 Jun 2025 21:01:11 +0000
Manifest next update:     Mon 09 Jun 2025 21:01:11 +0000
Files and hashes:         1: 7BY2Il5MQLxppADVL6UF8_ajsQA.roa (hash: l7Kov6RxqewCUOOJkbe9fRRYdDk1EYYz6xC9Vf7eE0k=)
                          2: BMAYKoufU7pujnEDum3l-Sh7Jm0.roa (hash: JCA/TWQlrOJKd5IE/d0Yfz64No5Tx1ptBD9+mN0UFqs=)
                          3: WLuO46dH7YtXhlfN1HN1hvX9uTE.crl (hash: /u8HvjX06e3MKMm7O59lEq7VeW0twQdZ6pXHjOFNutE=)
                          4: iP8tkc04d0icUEokihMRUC5rwT4.roa (hash: 5/Iqdr1UvAnjLWd8y1HWmURDX4laReyrD4iFzOipf+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:58:ec:00:2a:90:90:65:42:07:44:63:85:48:7d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
        Validity
            Not Before: Jun  8 21:01:11 2025 GMT
            Not After : Jun  9 21:01:11 2025 GMT
        Subject: CN=a155e76443809074c1b26a1122bde13a7f2a8d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:ca:f1:89:4f:6a:d0:9f:e4:ee:aa:e7:a9:
                    14:9f:00:35:21:44:31:ad:02:75:d8:c1:44:5b:42:
                    ad:22:19:49:43:29:fd:f0:6e:a2:00:c6:8d:6d:64:
                    be:4e:47:c4:1a:f7:19:b5:50:52:10:17:44:58:93:
                    9b:a5:48:0a:ff:8f:39:db:7e:d6:dc:19:70:8f:ee:
                    be:bd:c9:89:88:8f:11:08:ca:cd:23:36:77:83:84:
                    db:f0:68:e7:e6:d0:15:a8:63:d7:53:2a:5e:5d:18:
                    35:a7:e5:a5:4c:8f:ce:63:2c:72:df:3d:06:8c:ec:
                    d7:d7:a0:27:85:7f:2f:bd:da:b8:48:c8:65:26:3f:
                    7f:ec:b0:67:ba:40:37:60:a0:ae:a2:08:ff:fb:2a:
                    64:5e:84:fe:24:73:c1:54:c6:d4:5c:bd:22:83:72:
                    a4:d9:07:0d:d0:a0:a9:38:58:0f:6a:9d:f7:8d:6a:
                    d1:1a:e1:53:8d:03:a8:e6:f8:9c:41:67:38:ad:27:
                    a4:ed:ad:f7:1e:56:c6:8d:60:aa:ba:da:7b:ec:24:
                    ab:45:50:a5:71:21:1b:69:95:89:db:63:87:bc:48:
                    2d:01:fe:6b:3a:95:df:77:13:46:3e:3a:79:c9:8c:
                    bd:43:b8:9f:06:2d:36:71:58:6f:bb:77:a0:10:57:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:55:E7:64:43:80:90:74:C1:B2:6A:11:22:BD:E1:3A:7F:2A:8D:5B
            X509v3 Authority Key Identifier:
                keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:57:25:d2:ea:be:38:a9:71:75:f6:ec:48:66:35:74:2c:eb:
         fc:23:60:f9:68:37:c3:e0:28:0a:ff:57:ab:b0:5d:f1:e4:91:
         5e:e1:09:11:a8:0f:57:96:93:ae:28:05:fc:67:39:20:b1:9d:
         bf:35:98:e7:89:a2:b1:69:44:bc:2b:96:f6:c5:38:50:06:16:
         66:74:b6:ab:04:de:55:f1:3f:b2:39:a8:4e:5a:23:d4:7f:95:
         88:55:a3:6f:0c:94:5f:00:49:aa:9c:f2:f8:47:b6:8b:5e:2f:
         79:c4:cb:91:63:12:48:b0:e6:39:c4:b6:77:c1:b2:a9:1c:f2:
         62:82:62:47:e6:27:a5:d5:a7:ce:be:26:55:69:bb:f8:90:3a:
         cc:ec:33:24:c0:5e:cc:33:3b:f0:5c:16:15:f1:c7:49:93:89:
         92:d2:da:ce:c6:0b:e7:5d:5a:95:bf:bf:fd:04:54:25:4f:b7:
         f5:6d:52:b7:d2:50:5e:c4:64:bb:94:16:38:5d:c5:57:48:8c:
         58:d1:6b:28:58:01:41:06:68:95:2e:ae:3e:6e:e7:a1:9c:ad:
         9d:e1:62:69:03:bd:00:3b:f2:ea:0b:cb:fe:5b:71:6f:45:1e:
         c7:7d:ae:f4:3e:b9:2e:c4:7d:be:94:10:2e:c9:6d:e2:c3:44:
         ca:ea:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:58 2025 by rpki-client