Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File:                     w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier:          9sFkYuebYKhbjTJseqPiypGtEdxoRF14GN/49XWAeAE=
Subject key identifier:   21:94:DD:D1:2F:C7:F6:4C:7C:FE:FF:48:11:DE:24:9E:EA:AB:5B:B1
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer:       /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial:       01974B5642CFF6A654980AF7698788DEC18E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number:          0E7E
Signing time:             Sat 07 Jun 2025 17:00:33 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:33 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:33 +0000
Files and hashes:         1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=)
                          2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: 0JAGGkhbZApfdG7KJY/+qidZCwZciiiNT4SYylUgj1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:42:cf:f6:a6:54:98:0a:f7:69:87:88:de:c1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
        Validity
            Not Before: Jun  7 17:00:33 2025 GMT
            Not After : Jun  8 17:00:33 2025 GMT
        Subject: CN=2194ddd12fc7f64c7cfeff4811de249eeaab5bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:04:6c:f4:82:dd:27:36:60:3f:d1:d7:6e:77:
                    ba:b3:ba:0f:1c:6c:1d:7b:5d:1a:ce:2c:82:e3:8e:
                    6d:83:de:ed:ed:68:d0:d9:b5:53:f6:11:b3:85:4b:
                    34:0a:57:31:b7:9e:24:17:f6:75:de:47:4a:48:f9:
                    e8:6f:63:de:60:2b:60:26:68:81:8c:12:91:e9:e1:
                    81:44:04:db:05:3c:91:b4:36:c2:b2:60:7e:57:f1:
                    71:dd:e2:90:f3:e2:a4:da:d9:8c:2d:57:8f:07:89:
                    9b:60:4a:6a:e7:aa:a6:5e:a3:11:61:96:74:78:df:
                    a5:40:fe:a4:03:ad:3d:65:2f:1a:c2:2c:ad:98:2a:
                    b9:89:20:04:f4:a6:7b:b1:1b:75:be:db:2d:9e:5d:
                    81:9e:33:89:66:07:70:de:2f:a1:6c:52:2e:aa:95:
                    51:d4:d6:df:0e:af:61:6e:ca:86:a1:93:97:03:4b:
                    aa:5c:59:71:d8:86:f3:f4:d8:bd:ae:91:a2:a2:11:
                    19:49:37:43:be:25:74:41:f1:89:34:50:a4:5a:cf:
                    49:b5:4d:e9:1d:1e:e1:ce:a1:e3:e1:56:36:44:78:
                    9a:5f:c8:e9:b8:fe:13:50:b9:7a:72:6f:92:99:ed:
                    2e:eb:dc:aa:6f:fd:e0:61:8e:4e:38:3b:f3:6f:27:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:94:DD:D1:2F:C7:F6:4C:7C:FE:FF:48:11:DE:24:9E:EA:AB:5B:B1
            X509v3 Authority Key Identifier:
                keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:d1:28:dc:a4:a9:4d:98:f4:c1:a4:cc:6f:bf:87:1f:86:
         5a:d7:39:25:72:b6:6a:95:de:38:83:37:5f:3b:70:14:1c:90:
         11:4b:08:35:59:a2:5e:e2:e9:2a:a2:42:aa:b8:32:f7:58:c4:
         f3:1d:84:01:b6:61:8d:db:97:cb:e0:14:d9:f5:4b:26:46:8e:
         bb:4f:5d:b3:78:ca:ac:5a:08:bd:e6:b7:d2:b6:ac:3c:19:f5:
         2a:46:4a:b8:5a:ed:b8:0a:ee:19:3b:b7:62:5d:b2:f6:7b:27:
         54:26:af:a5:4b:06:41:c9:1b:77:81:26:63:91:17:10:03:67:
         07:92:70:ec:b8:16:9b:77:a8:eb:1a:12:4f:3e:bf:2c:cf:43:
         31:b2:ec:13:1c:62:a1:11:a6:7f:ae:fc:13:eb:3b:42:66:75:
         36:0b:10:19:4e:4a:22:c7:af:d3:aa:2d:9b:60:af:37:26:b3:
         dd:e3:9b:9e:33:85:69:a9:d0:a9:f7:c9:1b:e4:db:63:67:b9:
         d1:ca:e8:e7:f9:05:eb:b4:8e:63:6d:66:2f:5c:d2:54:51:44:
         14:f1:6c:ee:af:82:82:48:3f:5d:42:36:fc:5f:1f:ff:02:16:
         24:b1:ed:ea:4a:8b:f8:2f:b4:01:ca:9d:48:2a:7e:d1:a9:70:
         e7:67:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:35:49 2025 by rpki-client