Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File:                     WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier:          bLRBn+fDT3TOVvJfSovDZlk2K+u96EBq9YCUlNb9g08=
Subject key identifier:   05:0C:EC:6C:5F:76:1D:15:CE:41:32:10:5E:B3:D3:79:A7:B8:55:89
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer:       /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial:       0197481E0D6A1CA30F2073EE016E452E0175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number:          0A9E
Signing time:             Sat 07 Jun 2025 02:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:18 +0000
Files and hashes:         1: THjGQAeNJPBtPCUTy4-J94YQkPc.roa (hash: F+YBL5AUhg2W6omBaT2Kp3w7xlj8utNYDQNQuh7FdXU=)
                          2: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: jE1VZ01+hZz/RnGdABvBgupWUh7Y+U+O82uCIxqDpz4=)
                          3: bHWPrUheTISW_XZwqIKxaRaFivE.roa (hash: ek7H7pyvxLeP4/K0w5pzvcUQRE5xOhHM0k+4ZCxv0OA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:0d:6a:1c:a3:0f:20:73:ee:01:6e:45:2e:01:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
        Validity
            Not Before: Jun  7 02:00:18 2025 GMT
            Not After : Jun  8 02:00:18 2025 GMT
        Subject: CN=050cec6c5f761d15ce4132105eb3d379a7b85589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:7c:60:0a:58:79:4d:38:72:02:42:1d:a2:
                    71:a4:a1:37:ab:49:ed:22:8f:83:d7:05:35:ee:7e:
                    85:5e:fb:57:27:f3:f9:14:84:7f:86:e4:9a:13:67:
                    e6:d1:84:0a:51:f5:bb:83:af:6a:2b:9b:19:3f:02:
                    20:cb:cf:ad:25:05:1f:6d:61:30:1e:e5:f6:4a:d2:
                    df:05:42:d2:85:d1:d1:36:b0:88:b8:ea:7b:ea:83:
                    3d:0f:f2:74:c2:b7:29:52:39:ad:7a:70:49:fd:87:
                    12:5f:a7:03:9a:31:f6:af:86:bc:5b:25:99:f7:3f:
                    b8:d7:a0:cc:25:3f:99:3f:d6:dd:5f:a1:09:6b:a7:
                    17:4e:db:4e:16:fd:1a:ad:54:0f:ce:90:39:c7:cb:
                    5f:eb:03:81:bd:15:50:7a:13:18:e2:d4:1f:15:d7:
                    ae:d0:6c:d4:36:8c:c2:09:d4:f2:1c:4c:83:3d:76:
                    8d:39:3b:ba:61:00:24:48:12:cb:75:6d:7e:bb:29:
                    3b:30:05:97:7b:0f:1a:a3:15:fd:e4:25:db:f9:89:
                    a9:15:59:d8:70:ac:48:39:34:d2:46:bf:97:43:c7:
                    63:39:b9:b5:78:45:64:88:6b:67:e1:26:3a:a4:c6:
                    fe:cf:d8:ea:98:c6:95:d2:a2:9b:5c:51:34:b0:db:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0C:EC:6C:5F:76:1D:15:CE:41:32:10:5E:B3:D3:79:A7:B8:55:89
            X509v3 Authority Key Identifier:
                keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3a:0d:ca:9f:41:18:7a:d5:27:92:c2:a3:52:02:9d:7c:93:
         45:61:12:44:6b:6d:e1:bc:bf:c6:5e:cb:42:f6:1a:d3:96:54:
         01:34:a6:6a:35:3c:77:c5:f7:47:91:22:aa:32:c3:f9:51:34:
         bd:c6:73:03:19:3b:29:7e:44:bf:be:f9:15:f3:07:2b:a2:05:
         7c:47:b5:74:30:e0:9a:a6:6d:3d:c3:7f:9d:ea:b6:6f:c4:70:
         93:bc:f5:88:26:1f:03:2f:26:68:61:dc:92:0f:12:08:8e:75:
         90:44:ba:e4:40:c0:51:93:9f:77:8d:58:67:d0:1a:3a:c1:08:
         e1:9d:b4:36:49:e5:8d:90:bc:39:84:f6:2d:e4:e0:31:2b:0f:
         8e:87:a7:ff:8f:d4:b2:d8:dd:31:b5:32:2d:09:7c:61:2e:0a:
         59:be:06:0f:18:ae:d0:60:0c:1a:07:6f:db:29:cc:26:9c:c8:
         94:12:5e:d4:01:1c:70:aa:6b:bc:d9:61:94:a9:9b:a1:d9:0a:
         19:2d:c5:44:b1:86:98:b7:af:78:30:c1:b7:d1:fa:83:a4:4b:
         4a:85:f0:81:af:ab:7d:38:f7:73:43:84:2b:e5:3e:98:fb:3b:
         bd:cf:dd:0c:63:d6:b2:12:73:f4:28:3d:47:98:68:05:76:70:
         32:f1:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:35 2025 by rpki-client