Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File:                     wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier:          irvHtdf/9DRj8rIqlrrf8C1GJDzbAwxY8t6F6ecMXgg=
Subject key identifier:   8B:85:1A:2F:D8:90:BC:82:2B:DC:A1:16:16:B5:62:B1:9A:C2:DA:9D
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer:       /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial:       019750EA7D06D5D8414491B2EFEA4CF24A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number:          0C04
Signing time:             Sun 08 Jun 2025 19:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:34 +0000
Files and hashes:         1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=)
                          2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: CcKOq+6enzREAEnjbS/r9PvDzyD+UyFyCXqEnrMGmnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:7d:06:d5:d8:41:44:91:b2:ef:ea:4c:f2:4a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
        Validity
            Not Before: Jun  8 19:00:34 2025 GMT
            Not After : Jun  9 19:00:34 2025 GMT
        Subject: CN=8b851a2fd890bc822bdca11616b562b19ac2da9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:45:ff:3f:d2:bb:84:92:b6:b9:ab:a1:f4:
                    1c:dd:3f:58:0c:d7:3f:dc:13:c9:f5:fa:f2:86:4e:
                    2e:0a:90:96:0b:ed:df:ae:30:f1:a7:26:f6:2e:41:
                    9f:67:70:cc:f2:91:87:92:c1:48:29:7f:dd:df:29:
                    a5:87:e6:eb:7e:7f:ff:86:94:ed:54:e8:33:73:ed:
                    94:56:5c:2f:82:19:23:aa:18:68:ce:01:7e:c8:d1:
                    ed:6a:1b:62:32:64:0a:e2:e8:cb:51:90:8e:58:e1:
                    c0:10:fd:bb:a8:f5:04:e9:2f:51:7f:c7:32:df:22:
                    af:4c:cf:76:fa:56:81:d0:9e:25:a4:f2:ad:fd:49:
                    b4:8b:6f:84:e7:4d:23:95:99:30:b6:f0:c6:44:c9:
                    b2:60:ed:9a:47:70:67:91:c4:b5:9d:08:43:4f:0d:
                    92:d6:10:08:02:07:dd:7c:fe:cf:12:6a:b4:85:ca:
                    5d:64:ce:0f:f1:6e:b9:ca:68:10:ec:71:b6:28:e7:
                    03:a3:bc:bc:8f:4b:00:c7:d4:24:43:a8:1a:2b:7e:
                    46:b0:51:fc:18:ea:0f:c0:e4:80:dd:b0:c8:e2:fc:
                    f8:ac:3f:be:46:49:06:8f:f3:ba:00:29:ff:4c:8a:
                    04:2f:f9:2b:c6:f5:a5:d0:2e:6d:cb:22:81:9a:51:
                    b9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:85:1A:2F:D8:90:BC:82:2B:DC:A1:16:16:B5:62:B1:9A:C2:DA:9D
            X509v3 Authority Key Identifier:
                keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5e:5a:ac:7b:70:a0:3a:d5:34:77:f6:c6:10:62:1c:cb:7a:
         e4:82:21:0a:b7:54:6a:e2:43:ac:33:fd:fd:1f:de:5a:7e:e4:
         b0:d8:75:50:ad:e5:18:cb:bd:b8:c7:59:13:54:55:d6:6c:ee:
         82:8a:08:34:e2:c6:fd:42:23:83:b4:8b:d7:75:93:dc:4e:5b:
         5f:fd:b9:13:37:30:22:53:ea:46:c4:63:5f:82:f8:c6:26:d8:
         cb:82:a3:1b:9e:70:8b:99:2d:41:1f:cf:e7:4a:34:dc:7b:f6:
         13:92:3d:64:0e:30:54:bf:30:e0:78:b5:aa:13:32:f4:b3:8e:
         8e:24:85:82:fd:22:cd:c2:4d:f4:80:dc:db:50:bb:8a:34:63:
         ad:68:a6:f2:54:f6:bb:5e:4d:0f:11:c4:26:5d:c3:d6:c0:18:
         fe:10:ed:f0:1f:c0:a3:fc:01:07:b0:e2:1d:4f:c2:88:b6:13:
         e1:64:53:cb:4e:22:a4:88:47:ac:b7:3e:2d:25:cf:22:15:24:
         da:13:d2:c0:84:7d:21:ad:8d:1e:7f:08:df:4b:83:d5:54:bb:
         f5:ce:11:dc:7a:92:87:8a:6b:78:a7:40:9b:80:0f:2f:0d:42:
         00:aa:7d:69:ca:d9:d4:d2:85:f5:be:19:90:40:cf:0d:ea:5f:
         96:dd:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:19:32 2025 by rpki-client