Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File:                     w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier:          bcQS4FZjWtLFDKD1xiwfA8h6IQpI00ID0L3OWtUvg7c=
Subject key identifier:   EB:49:DF:47:A2:EB:91:AD:68:EF:D6:1E:D0:23:9C:89:39:97:23:72
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer:       /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial:       019757C82AB55C1847BCADF161974F009B44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number:          1585
Signing time:             Tue 10 Jun 2025 03:00:25 +0000
Manifest this update:     Tue 10 Jun 2025 03:00:25 +0000
Manifest next update:     Wed 11 Jun 2025 03:00:25 +0000
Files and hashes:         1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
                          2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: /DTLC2JRsRQMAoJkd0SD4tN1DgO2x9ZwxyRuT4UqvmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 03:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:c8:2a:b5:5c:18:47:bc:ad:f1:61:97:4f:00:9b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
        Validity
            Not Before: Jun 10 03:00:25 2025 GMT
            Not After : Jun 11 03:00:25 2025 GMT
        Subject: CN=eb49df47a2eb91ad68efd61ed0239c8939972372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:bc:61:45:3d:89:29:47:e1:c7:f0:a9:8f:
                    69:f9:2f:31:fe:63:fd:0e:b8:da:2e:71:09:34:78:
                    53:aa:68:28:c2:30:f5:f7:1b:4d:d4:56:8b:33:b3:
                    33:a2:cd:02:26:a0:6c:0d:f6:e9:3c:88:c5:c4:6c:
                    82:95:4e:6e:70:68:5c:a8:5b:25:07:a9:91:cb:2e:
                    78:e1:35:9b:68:59:b5:2e:42:75:67:71:ef:30:a6:
                    d0:c3:3d:04:8e:de:fb:5f:d8:df:ab:bf:b7:46:86:
                    e0:2e:65:38:7d:ad:25:b9:64:e0:0d:bb:6b:be:9c:
                    dd:96:49:64:28:43:d8:1a:ae:79:4c:fe:86:2b:29:
                    de:65:a9:bb:79:d4:b3:40:f7:6c:5d:bc:fc:4a:e7:
                    b0:68:b4:fc:3e:8a:cf:fd:63:79:9c:fb:05:22:aa:
                    4f:ee:64:32:f0:84:d6:a3:c5:ef:77:dd:e4:c5:f4:
                    c9:91:ea:9b:39:fa:8b:db:7d:c5:6a:57:da:ec:bf:
                    89:40:7e:e2:18:72:79:39:a3:27:16:9b:28:01:f1:
                    34:61:98:17:2f:02:25:48:02:13:7a:1b:63:df:de:
                    92:32:f1:3b:e8:0d:c5:e6:ab:c7:60:60:b2:87:41:
                    b2:05:e8:a3:9d:38:a4:24:4b:89:62:d3:dd:13:48:
                    5e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:DF:47:A2:EB:91:AD:68:EF:D6:1E:D0:23:9C:89:39:97:23:72
            X509v3 Authority Key Identifier:
                keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:7c:43:2e:41:be:70:32:0d:28:92:8c:7d:0d:66:2a:e3:6d:
         c5:f2:3d:ec:99:13:e3:fa:f9:8c:e9:7d:0d:46:e8:d9:f4:38:
         ab:7b:d2:26:14:ac:04:d4:97:80:a4:9d:41:7b:8b:34:a4:6b:
         dc:86:ee:d6:f8:e4:e7:94:96:8a:59:f5:74:18:fc:c1:39:33:
         9a:a4:6c:e6:5a:0a:f7:30:8a:e3:26:79:9f:36:08:89:f5:40:
         be:95:8b:b0:1b:fe:e9:8c:d2:30:92:d4:d2:df:af:d7:1c:c0:
         fb:3b:58:14:08:cd:93:63:f6:1c:ca:94:b9:a2:d6:22:e2:2b:
         f4:2f:72:f7:f9:c3:a5:be:75:29:d0:2a:6b:e2:f0:9e:4f:4e:
         d2:b4:09:8c:35:19:c4:0c:ef:8f:41:ee:a7:81:49:e1:dd:06:
         df:70:4c:07:26:4a:93:d0:b3:de:73:4d:0a:e6:47:9a:e3:07:
         2d:2f:4c:8c:5b:2d:b2:27:b6:a8:95:98:8d:a9:ad:48:68:57:
         d9:a9:d3:d9:10:2f:be:21:f6:2e:35:b7:d1:4e:f9:29:8b:a2:
         25:ef:80:da:ec:be:5b:b4:5b:df:83:cc:c9:e2:c8:43:2b:6c:
         63:58:a4:19:6e:25:05:72:b4:b6:9d:a5:d4:dd:d4:cc:fc:93:
         64:c8:e7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:23:14 2025 by rpki-client