Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
File:                     wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json)
Hash identifier:          2u4rfaE6J4WIuTs7lp/ojoOu7zYXJTJeOqjHj0rRuLE=
Subject key identifier:   0F:58:52:FC:5A:5B:67:EE:B3:89:60:03:01:70:30:45:C6:7D:F5:A2
Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84
Certificate issuer:       /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
Certificate serial:       0197556C1101D888B5A3110B494550CF1FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
Manifest number:          1514
Signing time:             Mon 09 Jun 2025 16:00:34 +0000
Manifest this update:     Mon 09 Jun 2025 16:00:34 +0000
Manifest next update:     Tue 10 Jun 2025 16:00:34 +0000
Files and hashes:         1: 1-sPggFgoLgEYQ3a9DEa-ikM_oT0.roa (hash: aDnt2VZtITmENjGl4t0nf2cwLhZtXyAhYwK+dLEZq10=)
                          2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: i+eE3zz2HoCzBEbRg2/wdIeXs806u/iyZgT9R0LEONI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:55:6c:11:01:d8:88:b5:a3:11:0b:49:45:50:cf:1f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
        Validity
            Not Before: Jun  9 16:00:34 2025 GMT
            Not After : Jun 10 16:00:34 2025 GMT
        Subject: CN=0f5852fc5a5b67eeb389600301703045c67df5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:ef:00:33:0a:1c:d6:7d:d0:0f:36:b9:de:
                    af:68:69:1b:31:ba:ac:a1:2a:3b:9c:7f:0d:34:f1:
                    42:cd:09:25:77:0f:bc:82:ad:17:86:2e:1d:3c:d1:
                    9a:49:59:63:7e:08:a4:5a:f4:62:fb:ef:31:a8:e9:
                    ff:47:c9:11:f6:ad:dc:45:3c:80:44:06:72:9d:d9:
                    4a:e8:b1:b4:1d:68:73:d9:51:1c:ef:b2:be:24:ff:
                    8a:26:78:19:81:78:9c:a6:ed:1a:f7:e3:7e:cc:46:
                    93:fa:86:12:dd:40:99:45:1b:3c:3b:15:41:8b:80:
                    33:83:96:26:20:61:ed:b3:41:86:c8:36:79:14:05:
                    5c:46:3a:45:38:a2:01:e7:fa:ad:d3:e6:48:99:fd:
                    b4:79:eb:53:fe:94:64:9c:d2:95:84:65:03:10:3a:
                    1b:50:10:b8:b7:7e:e6:1e:59:16:4d:c3:56:9d:b5:
                    04:31:55:6b:59:5b:5a:0d:e4:ba:5b:8d:f7:c1:92:
                    9c:50:b8:8e:cd:8e:17:45:2b:c8:1f:fa:00:2f:65:
                    f0:86:37:13:7a:96:ba:a8:1b:8d:f3:6c:6b:88:72:
                    65:89:99:8f:91:c1:a0:45:96:27:a4:2c:02:d0:ef:
                    b0:55:91:15:f4:39:3c:a8:c0:b4:9a:35:69:a9:6d:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:58:52:FC:5A:5B:67:EE:B3:89:60:03:01:70:30:45:C6:7D:F5:A2
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:72:ae:de:6b:84:4f:e9:3f:d1:27:f8:16:1e:96:d0:b9:c0:
         9b:c3:63:b1:9f:f4:bd:15:7d:9d:af:86:3b:de:b8:23:b9:90:
         a8:c9:59:95:93:f2:04:f5:e0:d9:a7:cb:3f:c2:21:49:94:0a:
         24:41:c5:48:89:ea:69:4e:a5:c6:89:84:7d:f1:e2:68:80:df:
         d0:92:21:98:07:36:a5:e1:ae:4d:13:41:25:22:64:66:4e:cb:
         ab:80:73:9b:6e:49:c8:b5:a1:5d:b5:35:61:e1:40:e0:20:3f:
         29:d8:f7:10:5e:b6:bd:36:e7:b0:e5:39:27:f5:58:e6:ba:c9:
         4f:59:d5:0c:cb:3a:71:f1:d2:0f:2d:84:09:6c:d2:c7:e6:e5:
         15:0b:9f:d0:22:e7:11:db:be:30:f1:6b:ee:a9:b5:6c:1e:d3:
         1f:19:bf:45:a0:a3:db:02:64:ed:b6:4a:ba:4a:ba:a4:4e:fd:
         ec:4e:f5:af:a2:fe:3c:6c:a0:db:e2:b1:a5:55:b8:d6:40:a7:
         ff:97:09:bc:a2:78:72:5c:71:54:0e:9c:b1:0f:0f:e8:6a:5d:
         0d:c0:db:07:1f:b5:03:ce:0d:c3:b4:39:7d:57:75:89:1a:0b:
         d2:88:ec:90:03:62:38:d4:0d:79:34:40:57:1a:b6:cc:cc:ae:
         39:27:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:04:45 2025 by rpki-client