Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File:                     wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier:          8jSZEyXU8T5Q12X07AbatAp833AZBr0BPG3YUTG7NBg=
Subject key identifier:   32:CA:F1:BA:F7:8F:AD:F9:14:B5:BF:F8:2B:EF:AB:BB:00:5F:A8:44
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer:       /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial:       0197466710D8B3D65385B841E933322D6C74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number:          0F96
Signing time:             Fri 06 Jun 2025 18:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:48 +0000
Files and hashes:         1: lXUonjcSHCnymM91YbnZZiIsRN8.roa (hash: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=)
                          2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: 2NPcXHDVU97NgDka7S2JX6Dz5nfLc3dlnKn9mGuOtwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:10:d8:b3:d6:53:85:b8:41:e9:33:32:2d:6c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
        Validity
            Not Before: Jun  6 18:00:48 2025 GMT
            Not After : Jun  7 18:00:48 2025 GMT
        Subject: CN=32caf1baf78fadf914b5bff82befabbb005fa844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:27:3e:66:9c:3b:2a:27:4b:c8:f7:41:02:
                    3e:ae:70:ee:ad:ef:01:e4:db:23:7c:8f:a5:f5:c6:
                    b6:c0:c2:24:4a:cf:7d:fc:70:a4:7d:8a:4e:fc:63:
                    3e:d1:e4:4f:26:c3:92:0f:77:36:d0:46:21:05:ff:
                    3d:68:ff:ae:df:08:bb:8d:36:3a:94:1f:74:17:55:
                    95:ef:59:27:8d:47:58:a8:12:06:ea:ff:d6:5b:c8:
                    8a:14:d9:6d:c9:5c:3a:98:74:01:66:50:33:3e:73:
                    b5:91:2d:a8:8a:f5:e0:0e:59:95:6d:b2:5e:52:99:
                    b2:4a:b6:76:33:d8:29:0f:21:2e:95:76:ab:d0:3c:
                    2c:e5:49:64:7a:f1:7a:3d:57:7c:79:fa:93:2e:49:
                    3a:e5:21:d4:d5:c3:5c:df:ee:6f:15:72:73:93:ae:
                    e9:da:78:f8:eb:52:9c:61:c7:d0:be:18:62:51:3e:
                    c7:05:33:5d:19:a0:ae:9a:15:a2:69:82:b6:9b:c8:
                    6e:9c:16:a5:39:de:f8:d3:66:dc:48:45:78:e7:9c:
                    fc:55:1c:b0:99:15:60:d0:b7:81:dc:a2:c5:df:23:
                    71:ca:ec:93:18:44:fb:4f:a0:32:9b:9d:3c:1b:f2:
                    32:2b:52:da:71:7c:b0:fc:cc:f6:81:d5:57:26:46:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CA:F1:BA:F7:8F:AD:F9:14:B5:BF:F8:2B:EF:AB:BB:00:5F:A8:44
            X509v3 Authority Key Identifier:
                keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:81:29:28:77:c5:f2:59:e0:8f:34:fd:65:ee:b0:fe:17:66:
         a9:9f:41:e1:04:39:51:5e:9c:29:a7:3a:80:0c:d4:dd:4b:4c:
         d0:9f:c5:a1:8f:72:d0:ac:98:b2:f7:1b:61:74:53:2c:91:4e:
         46:70:94:50:38:97:16:3c:79:fe:eb:39:e9:12:16:d4:ec:8c:
         7f:43:51:f6:c5:50:eb:ec:43:f8:15:a5:7b:71:ec:ae:87:84:
         3d:93:6a:1d:fe:18:ef:b0:14:3f:99:2e:09:46:fd:fe:08:33:
         46:c0:d0:6b:50:9c:8c:f1:de:6a:36:14:df:e8:fa:b2:44:59:
         27:7e:f1:f8:ab:4e:8e:c7:62:84:ce:c0:b6:92:e4:e7:30:3f:
         8b:ec:66:79:f7:e6:88:2b:1c:bf:07:a9:d3:8b:f9:c3:1e:49:
         d8:dd:fb:30:0b:8b:0b:29:74:42:5a:49:d6:f4:52:bd:67:5e:
         57:bf:6b:34:00:5d:57:c0:97:b9:6d:d1:0e:56:7a:c7:d2:61:
         59:6a:3c:dc:52:c9:a9:59:a8:f7:6a:e3:a3:82:78:91:d9:3c:
         ee:3e:7f:0b:b4:a9:b8:4e:cb:3e:08:4c:eb:90:45:b2:b4:05:
         0e:79:6a:8e:10:72:37:99:b6:80:bf:9e:2f:a9:29:93:4e:08:
         da:ec:2b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:37:35 2025 by rpki-client