Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File:                     wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier:          ZnOEKXeK7mvZWk+R1Qmme1yU4i1SCKPlsIIqsjkBnS8=
Subject key identifier:   06:B9:46:4F:94:3D:61:E3:CC:CB:F7:3B:A1:93:FE:F1:CE:5A:BB:05
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer:       /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial:       01976AE18E9A317AA5A141DA59DFBFAE2F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number:          0503
Signing time:             Fri 13 Jun 2025 20:00:56 +0000
Manifest this update:     Fri 13 Jun 2025 20:00:56 +0000
Manifest next update:     Sat 14 Jun 2025 20:00:56 +0000
Files and hashes:         1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
                          2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: zOkHpVOJF7vBRvemqa30JVoAGfYo5FMqlWJgdFTKrJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:e1:8e:9a:31:7a:a5:a1:41:da:59:df:bf:ae:2f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
        Validity
            Not Before: Jun 13 20:00:56 2025 GMT
            Not After : Jun 14 20:00:56 2025 GMT
        Subject: CN=06b9464f943d61e3cccbf73ba193fef1ce5abb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:3c:ac:8c:3e:0f:1d:81:c7:09:95:fb:32:
                    66:f1:b4:47:73:6d:83:89:f0:c7:7b:a8:c2:1f:b0:
                    6c:fb:03:b5:9e:9f:2b:71:8e:82:ad:f8:63:bf:67:
                    50:03:f4:1c:78:2a:13:04:6e:b8:ba:3d:bb:e0:ea:
                    4e:ba:ae:ce:01:08:ea:11:3d:e6:44:2a:e5:28:fa:
                    0e:a6:3e:cd:d7:76:a5:7b:41:e8:8e:b5:16:c3:bd:
                    8c:10:48:e1:3e:ca:f7:e2:ba:47:b5:fa:af:fd:b1:
                    30:f4:df:60:b1:fc:94:ab:50:3f:65:9c:56:c0:ea:
                    76:d6:76:2e:ad:93:12:8d:cf:ae:4a:db:b8:84:17:
                    2c:ab:89:4b:c2:d9:a2:f1:c2:58:d9:79:48:25:ca:
                    e3:54:8c:c3:a9:db:fa:d3:5a:b3:a9:dc:60:d9:0b:
                    79:2a:60:0d:31:22:56:ab:1c:f5:dd:94:6a:75:da:
                    de:0b:7f:85:58:b2:0b:aa:5e:25:c1:fb:3d:8d:a1:
                    34:3d:26:48:71:d2:04:44:15:2b:60:7e:54:d4:12:
                    5e:3e:cc:96:c7:c4:19:bc:bb:e7:a5:86:bc:5d:29:
                    82:1e:3d:78:17:d7:63:d9:8b:5e:11:5e:d4:50:27:
                    b0:42:1c:51:64:75:78:58:c3:11:73:de:2f:f5:e5:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B9:46:4F:94:3D:61:E3:CC:CB:F7:3B:A1:93:FE:F1:CE:5A:BB:05
            X509v3 Authority Key Identifier:
                keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:64:fe:89:b8:be:a6:e7:68:18:86:b1:8b:3f:37:74:fa:d6:
         6e:8d:fa:bf:76:9f:2a:e5:27:08:42:d3:d1:03:5d:70:e7:aa:
         60:4e:02:cf:24:f6:1d:8d:6f:63:8c:8a:5d:9b:83:ed:64:ae:
         68:d9:5a:f4:78:f6:0f:98:db:32:07:2c:39:f5:e9:b1:52:2e:
         0a:70:59:99:bc:0d:75:00:d1:b1:2b:ab:e9:c4:ed:0f:c4:1b:
         9b:4d:07:7a:1a:7d:e3:48:ff:f7:e2:d9:db:b7:ea:4d:43:54:
         dc:ad:8d:87:98:fd:5c:7f:36:71:59:7a:d4:7c:27:5c:83:5e:
         f3:1a:1e:1a:31:bf:7d:cb:9e:9e:87:18:08:7e:b8:22:b1:dc:
         f6:21:0c:e0:83:29:96:dc:93:70:9d:5b:8a:ee:e3:b1:de:5a:
         8e:92:61:72:14:7c:c2:4d:d7:1d:f3:13:99:98:68:c0:50:b8:
         ca:29:67:4f:dd:a5:01:ec:52:8c:45:71:26:61:f6:13:5d:ae:
         fb:01:65:8e:af:16:4b:2b:c9:be:ac:9d:87:6b:20:5b:96:6a:
         4d:6f:8a:f8:6b:c5:48:c6:a6:1e:70:c7:89:82:c7:d0:bb:01:
         9e:55:ba:9c:74:38:72:0f:79:53:e9:ab:e0:f1:da:0f:8b:a0:
         98:ab:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 01:31:11 2025 by rpki-client