Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File:                     wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier:          Xa7hzCibyWcaCvTqPzBOGySRuqwmVMpN9TCVoIFw7KQ=
Subject key identifier:   1A:58:80:FD:62:A3:0C:AB:3E:43:CB:0F:78:31:8C:54:D0:E3:EE:D0
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer:       /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial:       01976704A4C51020520A033C3F1C4F63A479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number:          0BEC
Signing time:             Fri 13 Jun 2025 02:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 02:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 02:00:46 +0000
Files and hashes:         1: nV-HLk-vNtMZyXYUE8luuJv4468.roa (hash: 02+QZOjgpDh+SF+gzgnBzWxE50MSq+IOFGGOIUAQpsk=)
                          2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: mY+DOokRcIerVIYEfHIngmCGwjJixTm3BnbQ7seGwWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:04:a4:c5:10:20:52:0a:03:3c:3f:1c:4f:63:a4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
        Validity
            Not Before: Jun 13 02:00:46 2025 GMT
            Not After : Jun 14 02:00:46 2025 GMT
        Subject: CN=1a5880fd62a30cab3e43cb0f78318c54d0e3eed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:15:0e:5c:63:83:06:d2:c8:19:a6:c8:7d:53:
                    55:d4:6c:71:cc:0e:ae:05:cf:d9:24:73:67:ea:da:
                    24:a4:db:27:b7:67:05:98:66:1b:79:9f:4f:48:7a:
                    da:61:ff:a9:62:a3:c6:75:ef:b3:4e:5e:7f:ee:a4:
                    37:27:e1:a8:d1:bd:b4:8b:a0:67:7c:75:e5:9c:7c:
                    19:de:fa:70:6c:52:cc:e1:66:b6:a0:1f:0b:e6:d3:
                    ae:69:9d:45:ee:f3:24:6b:d7:9b:aa:5f:07:4d:b6:
                    fb:5d:68:7b:1c:b1:8b:a2:83:ed:e7:19:ef:72:90:
                    61:30:5c:58:26:a6:db:b7:f2:d3:3e:29:67:29:3d:
                    0b:3c:7f:29:00:d0:41:c4:49:e9:af:64:cf:84:26:
                    88:a6:bd:8c:fe:15:ae:d6:47:15:ae:3a:94:3f:71:
                    0c:ca:00:fd:f3:60:85:5e:5f:e0:bd:13:db:25:f3:
                    16:a1:4b:42:9a:94:d4:20:f0:d5:a5:3f:91:88:3e:
                    2e:f9:ba:20:e6:72:c6:66:9a:7f:d5:89:93:ce:0e:
                    91:d6:27:9e:85:07:54:d0:6a:40:9a:3f:59:a1:d3:
                    13:8c:2c:ae:e9:1d:9b:d1:a7:27:c9:2b:b5:09:93:
                    32:84:f8:46:b7:ae:16:db:da:da:7a:c2:ea:87:03:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:80:FD:62:A3:0C:AB:3E:43:CB:0F:78:31:8C:54:D0:E3:EE:D0
            X509v3 Authority Key Identifier:
                keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:98:85:0d:4f:0c:ae:bf:98:11:33:1e:b7:7f:dc:0a:31:36:
         f5:d2:50:cf:d3:13:61:d2:a5:55:83:0e:29:e2:7f:8e:90:c2:
         4d:46:cd:9a:33:ea:f0:05:35:af:3e:c6:fd:fb:fa:48:bc:e7:
         44:52:6b:5c:54:ce:f2:4b:a7:b4:ed:f2:65:16:47:fd:5c:a1:
         d8:8e:24:35:be:33:6f:82:dc:94:af:b9:41:69:01:c9:c2:76:
         33:81:27:f0:d5:a9:c8:2e:eb:63:86:01:67:47:e0:33:6a:e2:
         93:88:87:ab:cc:4a:10:d0:5e:3b:0f:1f:8b:2e:fd:35:04:6a:
         95:74:dd:65:94:9c:26:ed:4b:17:e6:da:af:b4:55:88:c0:66:
         3b:8d:25:e7:c6:8e:2f:ab:2b:ac:c2:be:b0:3b:cf:3b:9d:6f:
         5a:ec:8a:59:d7:7c:82:f9:e9:d7:b7:3f:89:ee:61:b8:8b:98:
         e7:14:5c:7c:9e:d0:a6:93:66:46:ee:64:b9:65:11:19:5a:16:
         f5:22:e9:25:b7:94:c5:05:8c:33:40:ea:46:63:3f:ec:46:80:
         b3:17:57:6b:95:76:45:3d:88:20:10:9f:d8:aa:cc:c7:4d:06:
         0a:97:58:12:9f:52:55:ae:97:20:f7:82:a1:58:b2:7f:c1:c5:
         a4:ed:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:00:06 2025 by rpki-client