Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
File:                     wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json)
Hash identifier:          EutcuBynb9rtXJqXh8Qw/TcX+MQ2FBpBO4+Mckq1OVY=
Subject key identifier:   7A:0B:8E:00:EB:C4:23:75:F4:D8:F0:92:7C:BE:B2:C9:F8:2B:F3:DA
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Certificate issuer:       /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial:       01975346C2A10B933A04D0779EF3AD21DBE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
Manifest number:          01F7
Signing time:             Mon 09 Jun 2025 06:00:35 +0000
Manifest this update:     Mon 09 Jun 2025 06:00:35 +0000
Manifest next update:     Tue 10 Jun 2025 06:00:35 +0000
Files and hashes:         1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=)
                          2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: 3dkRq4+QgkzLlOkxdd/UE0z9WkOj4G20Fvg3TLO7Eeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:46:c2:a1:0b:93:3a:04:d0:77:9e:f3:ad:21:db:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
        Validity
            Not Before: Jun  9 06:00:35 2025 GMT
            Not After : Jun 10 06:00:35 2025 GMT
        Subject: CN=7a0b8e00ebc42375f4d8f0927cbeb2c9f82bf3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:13:ba:60:5b:5c:34:f0:fb:12:80:1d:71:83:
                    a5:f9:7b:5d:13:6d:58:51:ac:76:bb:14:96:a6:65:
                    3e:a2:b0:54:bf:1c:4d:06:04:1a:e5:a9:61:5a:e8:
                    17:e7:c1:e8:90:9f:6a:1a:38:30:c5:c4:e4:77:40:
                    95:6b:71:cf:51:2e:ee:de:33:b3:31:0b:6e:42:12:
                    0e:07:47:f1:37:00:58:b3:7a:21:4a:1d:78:0c:00:
                    5a:02:b5:13:ee:a1:50:b2:e3:62:4e:69:45:02:4d:
                    ff:ef:a7:81:af:34:44:e8:55:d3:2f:6d:2d:7d:05:
                    51:56:b4:46:21:82:6c:d1:f7:dc:a1:95:2c:23:cf:
                    9f:f2:af:34:d5:ae:88:d4:7b:ce:85:c4:d2:92:da:
                    fe:96:15:ba:6b:c1:99:8e:79:4c:f6:54:bb:95:dd:
                    63:68:08:75:d9:62:02:4a:d6:fd:da:2b:57:d8:4a:
                    e9:6d:13:9c:8b:78:39:77:01:3b:63:db:7f:e7:2a:
                    10:ab:f8:09:7b:a0:bb:35:75:5b:56:8b:3f:40:7d:
                    e8:4c:8a:8b:69:fa:61:1b:24:ba:a1:8c:7a:1c:26:
                    3c:68:10:4b:be:14:16:4e:56:bd:ad:a8:77:c9:d3:
                    b1:95:f8:93:43:08:26:4e:d6:63:a4:85:ff:71:88:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0B:8E:00:EB:C4:23:75:F4:D8:F0:92:7C:BE:B2:C9:F8:2B:F3:DA
            X509v3 Authority Key Identifier:
                keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:74:49:91:e0:8f:11:e9:9c:9b:3b:21:b8:2b:d2:98:d4:62:
         f9:0a:08:e1:08:35:d7:79:51:25:0b:fb:c5:ba:7f:be:aa:8e:
         4d:ea:b0:86:2a:ab:a2:a8:bf:f8:7b:37:2b:d2:f0:0d:39:d7:
         ce:39:1e:6c:17:49:a8:34:94:c7:76:f8:84:54:24:2b:11:b7:
         b5:a2:87:b6:e9:a8:93:5f:35:58:41:f1:1a:68:01:94:13:70:
         28:47:f2:80:02:d6:ee:de:b5:53:9f:ed:c9:ab:ee:4a:ae:cc:
         d0:6a:78:7a:25:f1:72:0f:5a:d2:bf:4b:ff:99:65:8f:68:37:
         7a:f0:b2:0d:8f:36:f6:1a:2a:09:c7:37:2f:82:d5:97:40:d3:
         47:8a:99:c3:46:a3:3a:ee:82:e0:43:c3:45:15:39:d7:e7:fa:
         5f:e3:df:44:0f:e1:57:4e:c1:31:84:d8:3d:f3:1a:e8:ce:de:
         02:cb:d2:10:ac:c4:bc:ce:d7:fb:11:72:7e:95:9c:71:5d:83:
         01:6d:bf:e8:58:ca:d5:24:e4:9d:91:79:31:5a:54:04:be:91:
         ab:93:65:63:ce:9e:df:58:5f:c4:07:a8:aa:29:63:7f:8a:ec:
         9c:59:09:e0:00:1f:13:21:75:79:ca:a2:a8:60:e7:92:1c:7d:
         b2:04:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:33:58 2025 by rpki-client