Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File:                     WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier:          CWLS7d091W2kqCQXZwOutzAYKw9dT7C68urqBvl1tVc=
Subject key identifier:   66:85:20:C4:A8:4B:29:0E:82:27:74:DB:C9:8E:64:43:67:66:7A:EA
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer:       /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial:       01974BFB9855456D95FEBC6419B7EBBA54D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number:          12D8
Signing time:             Sat 07 Jun 2025 20:01:09 +0000
Manifest this update:     Sat 07 Jun 2025 20:01:09 +0000
Manifest next update:     Sun 08 Jun 2025 20:01:09 +0000
Files and hashes:         1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=)
                          2: 42BmTsViJXz2WqlV4_io6K3VIjk.roa (hash: 2MyAlESNR6eqmGKBHGCnds8446wWXVt2CWU4C9xt8MM=)
                          3: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=)
                          4: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: Q/I6UEYNmOTTYdfaI+OIGQ0SVq//fgM6sbHLbXwz7UI=)
                          5: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=)
                          6: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=)
                          7: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:98:55:45:6d:95:fe:bc:64:19:b7:eb:ba:54:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597a01de87e011803f890ae17749020f995f140c
        Validity
            Not Before: Jun  7 20:01:09 2025 GMT
            Not After : Jun  8 20:01:09 2025 GMT
        Subject: CN=668520c4a84b290e822774dbc98e644367667aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:fd:05:6b:db:e9:b6:4c:49:56:6b:2e:b7:
                    e5:2d:87:62:e1:1a:f9:07:f0:84:a5:84:a0:e5:07:
                    0d:13:e8:dc:c7:3c:98:c4:60:97:34:24:f9:53:52:
                    fb:66:9e:01:63:68:88:2a:5d:58:67:8a:f4:69:a8:
                    6b:c0:97:87:28:10:70:fd:19:4a:c2:41:a9:44:cc:
                    fc:b1:7e:92:03:bd:bf:7f:29:5b:b2:c6:02:64:10:
                    47:62:f6:5e:7c:ec:52:c3:fe:7a:02:db:b5:1c:4e:
                    98:f5:a4:5f:96:8f:db:bb:91:e3:af:8b:24:15:32:
                    84:6a:dd:83:78:6f:1c:7c:3f:93:cd:3b:07:b4:0c:
                    e8:66:0a:f1:93:37:c8:0a:c1:78:83:6f:c4:0f:60:
                    60:3d:ed:ee:ce:11:ec:bb:84:8f:30:b6:94:c3:74:
                    3f:79:dc:0b:44:27:3d:53:08:ef:ee:81:0f:55:ba:
                    57:18:6d:bd:d2:3a:8e:a7:1b:ec:eb:8a:cb:49:3b:
                    65:73:ae:18:d7:ab:49:61:73:72:e1:33:fb:27:4e:
                    6c:da:ef:55:0a:b5:42:43:32:80:f6:50:d3:1f:c7:
                    05:ae:63:dd:a7:1a:3b:bf:9b:0d:82:53:14:80:57:
                    95:2d:23:b3:e7:1c:bb:5c:f9:f7:95:9b:ec:55:37:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:85:20:C4:A8:4B:29:0E:82:27:74:DB:C9:8E:64:43:67:66:7A:EA
            X509v3 Authority Key Identifier:
                keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fc:3d:2c:57:a7:be:9d:da:44:c0:d3:99:9c:dd:2d:73:7d:
         bb:bb:99:84:78:d9:54:32:89:8c:37:c9:b9:fb:4d:40:74:5f:
         92:d1:f6:a4:3d:af:97:5e:84:4e:fd:ff:21:38:7c:fb:ed:9f:
         f1:58:c7:dc:93:6a:a2:54:a5:09:da:6d:f7:05:70:aa:32:f8:
         70:5e:4b:c7:05:04:3f:bd:06:0c:07:a8:b0:62:d1:13:bf:7e:
         44:79:4d:47:86:3f:99:6e:73:b8:a3:c3:f8:55:6f:58:3c:9e:
         ab:fd:3d:7c:97:1a:b5:71:4a:8d:7b:37:d2:25:7f:e7:75:0e:
         90:58:16:c2:ef:1d:e3:81:91:11:4a:1f:d3:f8:31:c8:a5:8b:
         77:e9:8f:a3:c2:3a:e9:13:2d:76:79:52:de:ce:c8:17:07:a2:
         2d:44:4f:e1:57:41:e7:5b:7c:e1:7d:23:03:48:d5:7e:ce:2c:
         a3:c3:36:d9:fa:fe:98:97:1e:39:7e:3c:22:7c:65:87:0d:36:
         d1:93:17:e4:76:84:6c:96:f4:2d:23:b0:64:ca:65:c0:28:7b:
         d0:1f:71:bc:88:41:70:5c:45:f0:88:88:ae:1f:3d:39:83:13:
         38:ae:b2:3e:a8:80:5c:df:3b:60:2a:ba:01:52:a6:07:59:ec:
         f8:a9:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:11:35 2025 by rpki-client