Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File:                     wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier:          kYL0Zot4e8oFMIr/MZI+oMXjgKr7XRZOgmibgR11Ino=
Subject key identifier:   87:1F:DB:F1:82:5B:FA:AC:EC:4F:3D:37:CD:00:AD:74:DC:BA:FF:69
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer:       /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial:       019760CB43B8F4BD838670B73749BD8A4712
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number:          01FE
Signing time:             Wed 11 Jun 2025 21:00:23 +0000
Manifest this update:     Wed 11 Jun 2025 21:00:23 +0000
Manifest next update:     Thu 12 Jun 2025 21:00:23 +0000
Files and hashes:         1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
                          2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: TWC6F7ptFhOto2dB+nTy6pz1X/3WY38Ga9hKufQrcxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:cb:43:b8:f4:bd:83:86:70:b7:37:49:bd:8a:47:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
        Validity
            Not Before: Jun 11 21:00:23 2025 GMT
            Not After : Jun 12 21:00:23 2025 GMT
        Subject: CN=871fdbf1825bfaacec4f3d37cd00ad74dcbaff69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:df:e1:61:78:d8:0d:96:b4:3a:c2:63:99:03:
                    18:43:f8:c8:d5:42:b9:4f:8e:30:97:3f:4b:ed:ab:
                    a2:07:8d:91:84:1d:c3:7f:1c:b9:e5:81:24:b8:f8:
                    3c:9b:d0:0d:1a:99:e5:b5:ae:05:f1:1d:95:2e:67:
                    76:a7:cc:ad:78:b4:25:09:66:94:f4:17:35:4c:d8:
                    d0:f8:d8:38:33:65:26:30:1c:50:ba:bd:12:d0:aa:
                    45:5e:e4:e0:66:0c:53:81:22:7d:a5:74:7a:30:50:
                    4d:0b:bc:d6:46:ef:8e:15:76:b1:e3:d4:df:6b:60:
                    7b:09:cb:69:aa:88:6c:eb:c3:cc:aa:10:d3:5b:44:
                    c4:30:62:3e:91:75:26:51:7a:f3:6d:a0:98:85:9a:
                    75:9b:a2:1a:64:06:75:a8:21:09:d6:83:48:d2:c3:
                    ae:f7:21:18:af:d0:fd:76:2b:f6:0f:96:ac:17:bd:
                    19:68:93:68:25:f2:5e:57:96:7b:23:6b:20:97:f5:
                    5a:81:74:b4:68:36:88:2f:c6:cf:bb:4e:66:07:e1:
                    cf:13:5c:bf:d7:30:8b:d3:3a:92:9e:d6:02:b5:2c:
                    f6:4f:a3:a7:40:04:cb:af:5a:6d:ea:cb:06:5c:88:
                    61:24:ca:c7:98:1a:93:83:fa:69:c6:e5:2a:1f:9d:
                    19:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:DB:F1:82:5B:FA:AC:EC:4F:3D:37:CD:00:AD:74:DC:BA:FF:69
            X509v3 Authority Key Identifier:
                keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4d:32:4e:2d:f4:68:08:a4:ba:ce:10:4b:bf:ad:85:5c:5a:
         02:d5:5d:43:ec:81:08:43:ce:57:c8:f5:fa:f5:58:f3:f5:5a:
         96:c0:f4:f8:0d:66:58:56:3c:16:e3:c7:af:21:db:20:df:2b:
         16:4f:ba:3c:b3:c7:07:c8:13:48:ff:a5:4f:3a:53:e9:25:ea:
         51:c9:51:da:9d:81:05:05:7a:79:cc:db:e6:c5:56:19:cd:57:
         a9:bc:36:fb:00:ea:f6:64:f6:01:f6:67:34:48:ea:00:ee:13:
         ed:cc:c4:61:9e:72:3b:3f:7d:b1:3b:80:9c:96:01:a7:23:24:
         22:4c:eb:b1:eb:ea:0a:0c:35:0c:a3:ca:a0:5a:2d:0f:33:0e:
         75:df:e3:25:d9:da:cd:11:6f:b2:c9:21:49:c5:6c:f9:11:b4:
         30:41:52:59:bd:91:57:00:bb:b8:c7:9b:f2:ca:89:0e:df:a2:
         24:a3:44:e6:51:16:39:55:42:6b:c8:ef:18:46:d9:a5:1e:2f:
         9d:18:b8:19:07:94:50:33:55:8e:9e:b2:d0:fa:d1:17:3a:a5:
         ed:66:de:4d:2a:4f:f3:9b:c9:66:a9:a2:aa:e7:c7:89:b2:65:
         ab:08:e2:a4:33:dc:98:e3:75:3e:7a:fe:7f:36:39:ac:44:a4:
         57:71:52:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:23:35 2025 by rpki-client