Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File:                     wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier:          1FznLXJ5kXNqwsURgoLSWmMJ8BHRSVMWJLgnhzT3ows=
Subject key identifier:   29:27:7A:EA:A1:39:D9:DA:A7:37:AB:C8:24:F5:7B:94:77:6C:7C:82
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer:       /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial:       01975045D07C58B42927499B56FDCE0450F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number:          0C62
Signing time:             Sun 08 Jun 2025 16:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:41 +0000
Files and hashes:         1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=)
                          2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: D7VZRX3MqgKWDGie0y20Xuai8mUxd0cOHRhdwbni374=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:d0:7c:58:b4:29:27:49:9b:56:fd:ce:04:50:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
        Validity
            Not Before: Jun  8 16:00:41 2025 GMT
            Not After : Jun  9 16:00:41 2025 GMT
        Subject: CN=29277aeaa139d9daa737abc824f57b94776c7c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:f4:0e:51:43:01:a6:e7:9f:ca:a4:21:2a:
                    d8:00:23:ca:81:53:71:eb:3a:1d:d1:fc:58:a4:5a:
                    23:1e:3d:62:1c:e6:83:8f:d7:47:ef:40:bf:d7:21:
                    d1:ec:ce:31:18:d4:db:31:01:81:6a:01:19:ff:23:
                    c5:c5:a2:b6:1e:9c:b6:b0:a2:05:1b:6d:7a:63:93:
                    95:a4:81:6f:8d:f9:93:70:13:05:f0:0c:4b:d9:ef:
                    2d:cd:3c:0f:cf:b3:cd:7b:ec:6d:ad:98:c6:63:59:
                    64:54:52:f7:f0:03:48:26:73:a4:e6:f7:87:89:2c:
                    60:5b:8a:5c:be:91:17:1c:de:45:f3:53:a9:17:ed:
                    d4:11:b8:b2:2c:5d:fc:5b:0a:61:0b:41:2c:55:70:
                    c3:32:bc:bf:5a:34:eb:cf:45:50:c7:cc:af:ed:6e:
                    cc:0c:d3:06:02:ed:72:eb:da:df:74:f8:58:9a:42:
                    94:b3:22:8f:c5:49:0d:e2:44:ee:93:b0:42:f3:04:
                    00:36:6a:7a:f0:49:85:75:9c:62:3e:4e:5e:33:1c:
                    80:02:ff:0c:71:6a:97:d0:b9:82:0c:0e:e6:41:47:
                    01:8d:68:2e:6e:20:f7:91:93:dc:79:34:22:b3:89:
                    cb:d3:ad:20:00:f7:d6:63:b2:c6:b0:fc:86:99:f3:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:27:7A:EA:A1:39:D9:DA:A7:37:AB:C8:24:F5:7B:94:77:6C:7C:82
            X509v3 Authority Key Identifier:
                keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:0f:d3:8d:31:3d:30:2b:a5:8a:12:11:e4:59:06:7b:1d:
         1c:b2:4d:88:09:75:28:c4:35:68:19:1c:e0:10:81:1d:d4:e9:
         bf:98:0a:da:f1:51:f6:14:50:e3:7d:f2:38:a5:4f:a5:a6:da:
         ef:f5:cd:80:7b:0c:2b:e1:a7:4e:86:95:be:fc:f2:13:f6:2f:
         6d:15:f7:56:8a:de:11:fc:26:0f:e7:dc:71:6e:97:6d:3f:2f:
         44:27:a7:b8:b7:bd:90:3f:3c:9c:88:75:25:f7:f3:44:e3:5b:
         b6:05:38:0d:12:87:24:50:14:98:0e:ea:21:23:5c:bb:03:fe:
         68:fd:7f:05:66:09:c2:ba:ce:f7:cc:bc:af:86:14:ab:b4:96:
         24:70:ee:e5:d8:93:f5:53:25:6d:89:52:44:cf:e8:1c:63:9f:
         f1:3c:92:71:f4:67:f3:ba:32:41:6f:3d:71:e8:f4:2b:4b:56:
         fc:da:1a:40:d2:bf:22:aa:a8:9a:37:25:d7:39:c9:e9:0a:08:
         28:b8:2a:5a:fd:25:e8:b9:61:4d:b0:7a:18:f2:f1:82:aa:82:
         d3:d2:14:3e:0f:2c:1c:6b:4e:31:78:64:05:a2:99:39:22:45:
         9f:2f:9a:7d:cb:b0:40:87:b1:3a:d0:ce:91:e8:60:eb:b1:5f:
         3c:ca:95:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:22:10 2025 by rpki-client