Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File:                     wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier:          tIYh0gdS7j6W53c2nnPzL9OW6R82fRn4YsIHDy6X6SE=
Subject key identifier:   0E:EA:0C:37:8C:49:AB:4B:5D:C4:4F:69:56:1E:49:78:15:ED:F1:3E
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer:       /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial:       01974B8D4C41E8C3F5507953D7B36F4321AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number:          0283
Signing time:             Sat 07 Jun 2025 18:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:40 +0000
Files and hashes:         1: L4zdfpQTMapiD2xjjc9b_8rVphY.roa (hash: X4ulaYGn7ALPkkvP3AdThxBx//teLK+YYJfbh5wE5to=)
                          2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: 1dDjPGDEQYX+U/mvpbi+cp4OTtItKaZfdvsOqMILU5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:4c:41:e8:c3:f5:50:79:53:d7:b3:6f:43:21:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
        Validity
            Not Before: Jun  7 18:00:40 2025 GMT
            Not After : Jun  8 18:00:40 2025 GMT
        Subject: CN=0eea0c378c49ab4b5dc44f69561e497815edf13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:1c:7a:ae:78:f5:af:6a:50:a3:c0:23:34:
                    d6:b0:1d:3f:f2:6d:33:cc:8b:b8:3d:e3:1d:7e:b6:
                    b9:09:a0:51:23:5c:ed:17:b2:53:50:85:d3:bb:71:
                    f9:8e:1f:8f:60:cb:65:bc:58:a0:4d:05:59:ad:77:
                    e7:15:0d:2d:58:a4:d7:a3:42:7d:25:c8:c6:37:2f:
                    c4:21:76:82:4d:30:8e:e1:45:92:75:7e:54:32:f3:
                    e5:d1:7f:d1:dc:c0:76:a2:8f:8f:9e:70:67:65:1f:
                    a0:bb:50:c6:4c:72:ef:9b:41:c2:97:8c:d3:d7:34:
                    2f:3c:e7:07:7f:f2:e2:27:b2:e2:99:5a:4d:cf:b2:
                    01:77:b5:53:dc:a5:3d:cb:e3:11:16:7a:18:71:10:
                    86:3d:f4:f9:7e:82:24:fd:f5:0d:e1:7d:f7:e6:04:
                    13:d6:3c:5d:76:43:6f:17:e1:f9:63:ce:ed:01:17:
                    57:01:07:18:dc:b0:45:f5:70:66:d3:f8:a9:3a:48:
                    30:4b:6f:3e:fe:a1:08:97:08:7b:fc:19:2e:a8:f7:
                    93:06:e2:84:d8:fd:c9:a9:ad:6c:e1:82:22:68:76:
                    62:fd:3a:c3:f6:c8:21:15:9f:50:60:8f:39:dc:c3:
                    d8:e7:9a:c1:54:93:68:27:38:fd:59:79:6c:5e:52:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EA:0C:37:8C:49:AB:4B:5D:C4:4F:69:56:1E:49:78:15:ED:F1:3E
            X509v3 Authority Key Identifier:
                keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:9e:97:f1:ac:e0:1a:f8:b4:9e:be:e8:61:02:04:38:67:
         61:dc:2c:31:b1:dd:1a:2d:99:ec:48:ed:5b:d2:a1:08:9f:a5:
         93:b5:94:a5:12:e8:77:8d:66:bf:8b:9b:be:39:e0:ba:86:4b:
         98:9f:b7:c2:db:22:28:f3:88:b0:ae:b2:63:36:cd:a8:66:0b:
         a2:52:71:a6:a2:d0:af:fe:93:c8:97:a4:8b:ec:8f:61:f7:6d:
         2e:a6:ac:92:d3:7c:83:4e:21:f0:63:af:12:6c:18:e7:61:96:
         f5:6c:15:3b:8f:49:ec:03:56:9b:22:26:9b:da:06:04:ec:37:
         79:f2:85:d1:cb:f9:65:56:08:cf:c8:b1:1f:2d:f4:33:77:12:
         dd:ed:92:cf:d1:07:c1:bb:4f:ef:5e:0f:9c:c5:a2:70:48:47:
         02:87:98:d7:7e:84:bb:3c:0c:f4:76:24:d5:96:fe:99:80:fc:
         2f:3a:e4:72:93:8d:84:a3:58:74:3f:a4:57:2e:1d:7a:c2:8f:
         45:38:8a:ff:57:65:73:08:1b:5f:f9:ed:e5:42:e6:5b:a7:7d:
         98:83:72:0a:0a:90:dd:7c:7b:2a:77:c5:63:b5:81:b6:df:6f:
         7f:09:28:7e:70:15:79:d7:12:83:4e:b3:e2:91:b6:45:df:93:
         9b:6a:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:03 2025 by rpki-client