Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File:                     wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier:          JQSpZFQIv/4P5JmGCa3I85T/SEW53qMB4IT+SB2ACHU=
Subject key identifier:   8E:62:44:7D:56:30:69:97:5D:0F:7E:A6:64:F5:3D:3A:8F:3A:2C:DF
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer:       /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial:       01974967CBA121E90C5B111BA5F7E932AF1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number:          031F
Signing time:             Sat 07 Jun 2025 08:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:28 +0000
Files and hashes:         1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=)
                          2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: VbLF4nfh/Bm9xEXTxuAYy0ONHHsUhv9zyBma/Z2Ba8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:cb:a1:21:e9:0c:5b:11:1b:a5:f7:e9:32:af:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
        Validity
            Not Before: Jun  7 08:00:28 2025 GMT
            Not After : Jun  8 08:00:28 2025 GMT
        Subject: CN=8e62447d563069975d0f7ea664f53d3a8f3a2cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:9b:96:86:b3:4b:99:a1:44:96:e1:9e:12:
                    35:91:72:39:a2:f8:39:a0:ea:1f:bf:20:2f:0d:52:
                    bd:f3:bd:3b:81:a9:1b:73:9a:08:99:cc:d4:d1:42:
                    76:53:26:cc:1a:01:06:b2:7e:66:6d:a8:63:ed:07:
                    43:7c:5b:28:8e:ad:98:db:5b:df:34:91:9d:d8:17:
                    86:3e:93:d8:cc:ab:48:e5:05:66:fe:43:33:a2:c2:
                    77:ab:55:9f:6a:62:30:52:aa:ae:21:6f:72:93:c9:
                    3b:91:fa:72:09:21:d2:84:75:58:08:0d:c7:e6:de:
                    21:ba:03:75:b3:5b:36:87:c4:21:bc:1d:11:56:f1:
                    65:42:40:5a:12:60:9c:16:d0:c7:d8:f2:5e:4a:09:
                    56:52:18:fe:39:3d:10:c1:c7:a2:76:99:35:5c:56:
                    99:45:c9:41:30:fd:0b:5f:b7:7a:37:55:9d:17:c7:
                    5d:2d:21:ee:38:00:fc:3f:39:df:ce:9e:3a:22:ec:
                    8a:cc:0f:65:06:41:e2:1a:5c:5a:96:b1:df:0c:65:
                    2a:29:5f:2a:8b:94:7c:94:f9:ab:d1:d9:05:c3:17:
                    14:7a:ef:a3:8c:d4:8b:86:01:fa:b8:e8:ca:14:58:
                    b5:30:ca:89:04:46:32:45:17:28:ab:bf:0a:81:da:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:62:44:7D:56:30:69:97:5D:0F:7E:A6:64:F5:3D:3A:8F:3A:2C:DF
            X509v3 Authority Key Identifier:
                keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f1:61:1b:76:de:72:5b:8e:e8:be:c2:a4:1c:ed:94:2c:f1:
         61:59:52:9c:3b:28:43:d1:c7:08:3c:70:2e:c3:90:cf:cb:67:
         e1:17:c8:89:e1:4f:cf:91:e7:3f:37:af:20:33:71:e3:96:f5:
         7a:73:c9:17:56:2a:5f:5b:fd:64:b6:01:d6:9a:1c:44:2c:a5:
         69:fa:16:01:43:34:a3:5f:93:6a:f2:28:5d:98:bc:35:77:45:
         fc:fc:fa:8f:62:a6:5d:80:38:71:8a:fe:ea:c7:4c:90:32:87:
         43:cd:75:5e:d5:ec:e6:2e:5c:44:98:e8:a3:5d:bd:d6:b8:18:
         6c:2e:0f:a6:9e:d7:aa:87:4b:0d:1f:fe:e4:61:6f:af:f3:83:
         9e:2d:64:cb:79:b4:55:93:20:cd:95:d3:23:19:11:ac:de:18:
         11:ea:a0:21:53:c7:ba:c4:6b:a0:33:6d:a9:73:21:a6:7f:fa:
         3d:8e:06:34:45:8f:51:67:11:56:ec:e7:95:89:3d:c4:15:bb:
         9e:83:8b:84:6f:ad:cd:96:1b:78:10:36:c0:c6:dc:fa:84:a4:
         26:63:3f:3d:64:85:fc:12:8d:d0:52:b1:f5:8a:ca:b0:11:c3:
         7c:bf:50:c0:d0:5d:d9:f0:7f:87:38:ac:c3:24:0b:72:93:d4:
         b7:f7:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:33 2025 by rpki-client