Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
File:                     wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json)
Hash identifier:          N9Y2tlwOkljQVYdufWXiJk2yda64TEEN52Q/b5V9sFQ=
Subject key identifier:   FE:B4:62:31:CC:23:46:79:A3:22:B8:11:10:47:EB:99:4D:89:A3:FB
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Certificate issuer:       /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial:       01974C3265B6625F952B6B87F8CD3C968642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
Manifest number:          1399
Signing time:             Sat 07 Jun 2025 21:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 21:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 21:01:00 +0000
Files and hashes:         1: fS3aIp_dstilOoZpsHs2fT3hEwI.roa (hash: ekL2u08a8PJkCPy3xwuS3H8hi/HVcBEIiMkXY+L534U=)
                          2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: 0iWO3cQbEatTftVwSxVOs88aoHwP5rx3YJ+ASejU9j8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:65:b6:62:5f:95:2b:6b:87:f8:cd:3c:96:86:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
        Validity
            Not Before: Jun  7 21:01:00 2025 GMT
            Not After : Jun  8 21:01:00 2025 GMT
        Subject: CN=feb46231cc234679a322b8111047eb994d89a3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:40:93:d1:da:17:ae:d1:dd:ae:12:e1:41:39:
                    45:77:d7:01:db:37:3d:90:79:18:89:51:f7:33:54:
                    65:f4:4a:d5:f4:a5:ee:7f:94:17:e7:1c:29:9c:80:
                    1d:fc:6e:96:04:70:98:8b:d8:50:8e:79:a8:4d:1b:
                    a0:ff:b0:25:4f:1c:85:25:19:fd:09:e1:e0:42:46:
                    5d:c6:98:5f:50:7b:31:75:70:5d:7d:03:3c:6d:f5:
                    18:34:ba:5a:ea:19:44:6d:2e:bc:ae:34:94:89:33:
                    f8:ab:49:ce:5a:91:71:d2:61:e3:ea:d0:15:f6:a1:
                    b4:ac:12:ca:43:60:95:7a:d9:71:87:81:6c:57:08:
                    b3:34:c4:8a:61:c6:d7:a6:04:87:b5:e8:59:80:ac:
                    a6:29:0d:86:e4:d4:24:3f:bf:e3:4e:0d:8b:cc:98:
                    16:4b:36:12:61:9b:2f:8d:ca:cb:49:7d:ff:b2:14:
                    fe:d3:0e:de:82:3d:d9:60:9f:53:a8:21:f4:10:46:
                    f4:61:59:09:51:e1:3a:83:37:82:50:0f:e5:05:3c:
                    80:ff:bf:1c:ff:25:69:4f:83:95:cd:d9:be:6c:c9:
                    c5:b9:77:42:04:f7:95:31:b2:f4:f8:79:9b:06:ff:
                    dd:06:48:ed:96:6a:a9:49:0a:a6:20:8b:59:f4:e9:
                    9a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:62:31:CC:23:46:79:A3:22:B8:11:10:47:EB:99:4D:89:A3:FB
            X509v3 Authority Key Identifier:
                keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:19:c3:dc:19:a6:82:b5:8b:2e:98:96:92:29:ec:01:4d:
         77:38:93:08:92:e3:a5:fc:6b:76:f4:4a:7a:ce:46:2c:62:4c:
         9f:f4:07:b9:80:7c:ca:ca:60:8a:65:61:4d:d1:21:e0:dd:9d:
         f1:ad:3e:2d:fe:19:7a:8f:f7:b9:05:fe:e9:ce:46:83:f6:03:
         13:04:66:8f:1b:86:6d:99:7e:97:31:73:18:35:f3:9d:45:8f:
         b0:ad:8a:d7:ad:7a:2a:c0:c1:5f:6d:be:03:86:87:e2:dc:fb:
         a2:a5:dc:14:0f:9c:97:3b:0a:78:ba:cd:3f:bc:42:a0:69:e4:
         cb:f5:7b:c6:05:c3:48:49:f1:9d:02:4a:09:b4:9e:b3:28:8b:
         43:c7:b2:6a:9d:fb:da:37:5e:1b:ac:13:3d:07:5b:15:5a:3f:
         2a:4d:9f:0e:b7:c2:73:d4:b3:6c:42:1c:5e:be:58:c2:8b:f1:
         a4:d8:33:6c:d3:5b:8c:0e:be:ac:90:3b:57:d4:03:be:95:88:
         99:dc:60:49:44:68:4e:8a:02:fb:20:4b:59:d5:3b:c2:1d:26:
         75:3e:0a:6f:48:d4:59:aa:aa:9f:46:17:d5:01:09:6e:cd:7e:
         72:d3:bc:bd:24:07:3b:fb:cd:48:a1:2a:6b:4c:ee:fc:8a:e1:
         51:ef:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:14:56 2025 by rpki-client