Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
File:                     wqkR1pxPZFehCd53scdSSdxTDhc.mft (raw, json)
Hash identifier:          6BgcZ32lSOEj/RSLfrpCPs78kbV7SXJLbIaaVknL2DY=
Subject key identifier:   5D:B1:89:EB:3F:8D:AF:58:C7:E8:8F:27:13:78:3E:0F:0A:F7:F4:D0
Authority key identifier: C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17
Certificate issuer:       /CN=c2a911d69c4f6457a109de77b1c75249dc530e17
Certificate serial:       0197499F37CFDAF925ED0B1ACAC3E8D6091D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
Manifest number:          07EF
Signing time:             Sat 07 Jun 2025 09:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:00 +0000
Files and hashes:         1: JlMTszQ0SriAWERqlr9FMnp6WvU.roa (hash: M6WDGwhPPqHvkOqSI6cVPu36gkAbrulfoDxAqaGV7po=)
                          2: wqkR1pxPZFehCd53scdSSdxTDhc.crl (hash: 8XHvZ6USL7q6dKaDJcoKAVNG3TO++hKDaLbjqhQVTZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:37:cf:da:f9:25:ed:0b:1a:ca:c3:e8:d6:09:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a911d69c4f6457a109de77b1c75249dc530e17
        Validity
            Not Before: Jun  7 09:01:00 2025 GMT
            Not After : Jun  8 09:01:00 2025 GMT
        Subject: CN=5db189eb3f8daf58c7e88f2713783e0f0af7f4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:fd:fb:9d:c5:33:90:ed:c6:33:22:6b:16:
                    03:42:3d:e9:ff:be:9c:fb:5d:34:82:98:2e:88:8b:
                    27:8f:39:ab:ed:65:38:79:d8:f3:01:73:39:ca:9a:
                    58:81:af:a4:ce:20:3d:a8:35:60:17:a3:00:b1:ed:
                    a6:aa:9c:eb:df:3c:9f:2f:b2:11:6c:7b:1a:a3:8b:
                    41:41:53:cc:16:ce:bf:22:a6:1f:20:77:be:fe:71:
                    b9:63:72:39:d1:cd:6f:1d:13:c2:b5:76:3b:87:b5:
                    10:d9:75:58:9e:b9:11:30:5b:50:88:a6:fc:f2:05:
                    6c:2f:9a:90:de:40:a4:d8:54:86:ed:46:26:b3:9d:
                    ed:08:ec:50:d8:da:f7:b9:8d:56:36:99:3e:e2:37:
                    d8:ec:12:6d:3f:f8:8b:6f:bd:f4:5e:f8:70:d5:16:
                    05:97:79:24:60:55:54:b0:05:44:bc:fb:22:97:94:
                    23:50:49:63:3f:8b:c4:9b:52:11:b3:e2:69:09:d1:
                    44:db:18:00:fa:6d:97:02:00:ce:22:b1:e2:50:6a:
                    01:35:57:e3:f7:cf:29:f0:20:51:f1:41:ee:15:d1:
                    03:c6:b2:8c:d2:b6:82:66:02:85:36:b9:26:a6:f2:
                    20:4d:01:a9:b6:63:9d:18:35:be:fe:7d:25:8f:45:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:89:EB:3F:8D:AF:58:C7:E8:8F:27:13:78:3E:0F:0A:F7:F4:D0
            X509v3 Authority Key Identifier:
                keyid:C2:A9:11:D6:9C:4F:64:57:A1:09:DE:77:B1:C7:52:49:DC:53:0E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqkR1pxPZFehCd53scdSSdxTDhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c6535d-721f-4301-9d89-fcdad2b5656b/1/wqkR1pxPZFehCd53scdSSdxTDhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:94:14:63:29:9f:02:8f:41:d3:f3:b7:d7:65:f8:da:b1:95:
         1d:e2:61:5b:af:cc:37:dc:69:48:70:df:0f:22:7c:24:38:06:
         c5:e5:4c:1d:03:de:33:ac:5e:3f:9e:fc:2c:c0:af:74:5c:f4:
         04:00:a3:28:01:99:58:c8:fc:59:7d:b9:95:af:e8:a3:e5:ba:
         8f:61:cd:29:73:9e:6f:25:21:93:87:75:bd:35:fc:1c:e8:af:
         9c:95:f3:00:78:f7:0e:39:73:2b:e8:e4:ff:4f:94:00:4e:f6:
         2a:47:42:ab:54:80:46:49:12:63:c6:b4:18:90:f7:c6:3d:d7:
         6c:b3:c4:58:a7:b9:3b:03:89:66:42:6d:56:bc:f9:88:4f:42:
         b6:29:f6:15:64:37:58:94:c6:a8:f8:97:7a:9c:f1:5d:6c:11:
         52:74:bc:14:11:03:b4:45:cb:89:ac:5a:c4:95:d3:97:b9:a1:
         ff:a3:55:c9:db:fe:4b:0a:ff:db:f7:83:7a:19:fc:c5:cb:32:
         11:0e:d4:98:3d:f0:44:be:c5:9e:6c:e7:3c:c9:70:55:d0:b5:
         41:a7:13:9b:b9:f1:af:4c:51:49:89:27:76:77:4d:c1:1d:ae:
         cd:6f:0b:a1:ab:bb:7f:06:72:3a:c9:76:2d:da:90:e9:b4:ba:
         57:08:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:23 2025 by rpki-client