Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File:                     wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier:          8QwNgcUKyk5dT9GQMAoCC7Qs6CHhaTMKXaTVgma/1HU=
Subject key identifier:   89:33:F2:28:42:9C:5A:23:8A:3F:6F:85:92:7C:76:BE:3D:8D:9F:05
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer:       /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial:       019750B3A5FE460CC7BE9D9CAA20E18AF0A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 18:00:40 +0000
Manifest this update:     Sun 08 Jun 2025 18:00:40 +0000
Manifest next update:     Mon 09 Jun 2025 18:00:40 +0000
Files and hashes:         1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=)
                          2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: jvTCMFNyH6IETlRK5T3CdYkEgSFQYWjzuyN7FgKVDic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b3:a5:fe:46:0c:c7:be:9d:9c:aa:20:e1:8a:f0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
        Validity
            Not Before: Jun  8 18:00:40 2025 GMT
            Not After : Jun  9 18:00:40 2025 GMT
        Subject: CN=8933f228429c5a238a3f6f85927c76be3d8d9f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:87:d1:d8:2d:d5:84:f6:82:cd:99:11:4c:
                    49:92:55:a0:3d:64:df:32:e8:04:41:f3:41:7d:26:
                    2b:4e:d7:05:dc:44:09:25:44:ff:b9:2e:35:62:f1:
                    08:43:35:18:e8:dd:ea:a1:71:58:1c:8b:72:ae:46:
                    47:9b:b3:87:53:ed:aa:0c:04:ce:72:b9:84:15:68:
                    23:f2:57:8f:f5:a4:e3:6e:d8:8c:0e:f1:e2:cd:8d:
                    24:d3:f8:c6:be:4c:cb:00:60:6e:ae:36:cd:e4:a9:
                    32:03:75:b6:7d:20:ac:0e:cf:95:c7:2b:df:29:9d:
                    33:98:be:b4:46:f3:5d:8f:af:c5:82:e3:cd:b7:b8:
                    61:cf:92:d5:31:16:73:27:35:e7:03:09:ed:a6:83:
                    39:4d:85:f3:f8:b5:fb:dd:f1:a0:22:2f:e1:4a:8c:
                    cb:fd:0e:8a:8e:af:1a:ea:da:20:85:dc:d0:60:8a:
                    fd:1e:18:91:a0:fe:d7:92:2b:89:9b:06:ec:c7:8d:
                    6d:cc:4f:ab:bd:76:19:f2:21:82:df:86:d5:a5:6f:
                    94:52:cf:23:32:51:3f:9e:8e:66:69:de:0e:ce:17:
                    b1:d2:1f:9c:1b:5a:2a:57:7e:dd:c7:b2:ff:a8:35:
                    24:de:de:7a:36:bf:68:32:60:d4:96:ca:25:fb:dc:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:33:F2:28:42:9C:5A:23:8A:3F:6F:85:92:7C:76:BE:3D:8D:9F:05
            X509v3 Authority Key Identifier:
                keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:13:74:e9:52:ff:ee:71:33:7a:48:ad:96:cd:b9:da:b5:73:
         1a:bd:22:32:d6:cf:c3:b1:1d:26:77:06:8a:da:fa:2a:98:55:
         d1:9c:3e:d9:33:28:0e:ee:53:b9:39:5e:9a:9a:5e:57:dd:9d:
         7a:e8:87:21:3e:88:5e:18:a0:22:03:f0:f8:44:32:4b:82:c2:
         4f:e8:87:6b:d0:c4:2b:84:43:c4:1c:09:56:7a:b4:d8:75:d8:
         8d:07:c6:68:ad:cb:90:ac:e2:34:df:47:f5:7b:33:84:be:34:
         b8:8c:e9:b7:dd:b1:1e:18:5c:ba:33:ea:c4:ba:20:6e:12:0d:
         e5:6a:72:fb:8a:cb:bd:7f:3c:0f:99:40:ba:4a:2c:05:0e:af:
         e9:f9:83:4e:8c:f6:b0:24:49:7f:ef:ff:0e:a3:76:19:8b:18:
         56:27:6f:af:e9:27:c8:9d:39:d0:8d:33:35:86:9c:f3:4e:a2:
         8b:34:f5:16:25:a5:c7:72:30:07:59:92:d5:34:44:fb:b0:1f:
         f7:1c:8e:8e:d0:1a:ec:99:f3:08:38:d7:a8:66:70:cf:09:fa:
         25:ea:2d:21:6d:34:26:a6:33:23:de:bb:89:19:8a:1e:f8:89:
         3b:6b:46:16:98:0e:ff:8c:23:5b:bd:3d:d8:a0:42:e8:4d:6a:
         59:22:91:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:28:19 2025 by rpki-client