Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File:                     we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier:          XiCjJAoOAG9MKRPjThbGP6CPL/BGdwGLGLKonp3Eys4=
Subject key identifier:   44:45:F5:00:5C:15:32:67:17:0E:38:D1:94:5A:82:69:66:A3:85:99
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer:       /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial:       019748C2F1E06FB4E242799C76204CEFB030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number:          11F6
Signing time:             Sat 07 Jun 2025 05:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:24 +0000
Files and hashes:         1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
                          2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: +uJSVTdPTJUgAhn039tCqpjJ8UWqub0T+1hBKg1N/hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:f1:e0:6f:b4:e2:42:79:9c:76:20:4c:ef:b0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
        Validity
            Not Before: Jun  7 05:00:24 2025 GMT
            Not After : Jun  8 05:00:24 2025 GMT
        Subject: CN=4445f5005c153267170e38d1945a826966a38599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:cf:10:60:41:bd:9c:66:cc:2e:2f:58:c3:
                    a3:d7:ea:ad:80:d8:28:5a:88:1b:bd:49:20:80:43:
                    6a:19:36:95:59:f9:03:ad:2e:67:8f:58:95:1f:dd:
                    8b:70:1d:d5:c7:c4:df:64:cd:ad:98:b8:75:e7:8d:
                    8c:e1:56:8f:23:82:97:c4:42:2b:26:2b:b0:51:a9:
                    9a:e2:36:5a:18:27:d4:93:9f:b1:7f:4b:55:24:67:
                    a7:58:22:3a:23:3a:67:a5:28:8d:e2:81:d9:75:13:
                    be:4f:f5:d9:1e:7d:79:74:a4:2d:66:64:bb:56:63:
                    f3:38:17:63:6f:55:9e:8d:27:7a:c4:e0:2b:5d:38:
                    f0:0b:c4:4f:fb:ba:ec:d1:fa:16:20:f5:4b:82:13:
                    bb:12:62:60:78:51:24:bc:9e:a7:36:cb:f2:f4:b6:
                    6e:2b:d2:94:c6:46:be:e2:16:27:44:6a:c9:5f:ef:
                    e0:a8:bf:1f:04:9d:b8:5d:cd:c9:e0:99:32:07:fb:
                    75:1e:d2:d8:87:e1:27:29:b3:2b:68:43:49:69:8f:
                    9d:1c:09:f7:fb:b6:6e:e5:86:72:13:c9:e9:d4:ce:
                    45:75:a8:93:a0:4b:06:bb:7e:0b:30:58:4f:cc:35:
                    d1:25:8f:b2:49:1d:2d:b4:41:fb:a6:95:26:7e:e4:
                    d1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:45:F5:00:5C:15:32:67:17:0E:38:D1:94:5A:82:69:66:A3:85:99
            X509v3 Authority Key Identifier:
                keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:af:c5:dc:d1:24:34:64:14:42:91:cd:0d:74:db:d5:f1:2c:
         0e:78:a4:54:f1:51:e6:ab:b2:12:9f:12:1a:fc:ac:d1:ac:b3:
         39:6c:76:f3:9a:db:a3:6b:4e:a8:96:6c:0b:1f:5f:b9:70:17:
         81:68:f8:6c:1e:05:5b:7b:06:45:40:c6:4d:74:6c:48:88:28:
         21:77:76:c3:5e:cd:57:90:76:a7:ed:5e:1f:36:c0:ad:f2:b7:
         01:c9:bf:e2:e7:ce:81:c1:46:31:9d:bf:81:e4:82:4c:0d:94:
         75:28:55:d1:4a:68:19:f2:69:66:af:a3:23:bc:62:cf:8c:0d:
         b9:78:c1:18:06:27:4d:fb:16:09:2f:67:de:e2:53:a3:d4:69:
         6c:3c:ff:ab:fa:41:0d:e9:be:41:8d:80:fd:84:2d:75:9d:49:
         23:57:14:65:29:e7:c3:0c:5c:77:8e:91:32:c2:5c:79:b6:0f:
         0c:32:2a:8c:1c:a1:1f:26:82:9c:b3:71:bf:40:19:50:b2:d7:
         7f:c6:ac:f8:a3:d7:25:0e:15:99:e4:c3:0b:5c:e4:84:c6:f3:
         f6:d7:5b:0d:64:17:66:02:2d:2e:14:74:93:9a:2b:45:7c:63:
         19:2c:5a:c3:fa:d4:97:94:20:c8:9a:8e:09:7b:51:a0:21:b7:
         10:d8:15:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:36:05 2025 by rpki-client