Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
File:                     kwpXLBbQxE93Zlh9kth4ujBUHR4.mft (raw, json)
Hash identifier:          eNziQnJPnBZ9z2D/MFfQw4Y3+CgdGD/frxjhHYm09xo=
Subject key identifier:   EE:FF:16:FC:8E:A2:EC:70:18:81:58:EB:3A:D3:8E:83:3D:B2:99:3B
Authority key identifier: 93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E
Certificate issuer:       /CN=930a572c16d0c44f7766587d92d878ba30541d1e
Certificate serial:       0197469EA255501351F0997321FD6D387EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
Manifest number:          0751
Signing time:             Fri 06 Jun 2025 19:01:30 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:30 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:30 +0000
Files and hashes:         1: dDvbinURbnBhghcDsCWr8pNjL-Q.roa (hash: hUZbMhthMOHDXoT8VJO840vVSWFg65GOQ1Sk4GTZvhs=)
                          2: kwpXLBbQxE93Zlh9kth4ujBUHR4.crl (hash: eHQwu3ahrx1Pb4OHvdQm5fUGkFJrueMEMwCNOmfN9oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:a2:55:50:13:51:f0:99:73:21:fd:6d:38:7e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a572c16d0c44f7766587d92d878ba30541d1e
        Validity
            Not Before: Jun  6 19:01:30 2025 GMT
            Not After : Jun  7 19:01:30 2025 GMT
        Subject: CN=eeff16fc8ea2ec70188158eb3ad38e833db2993b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:c2:01:0b:a2:24:7d:ee:87:f2:c7:db:60:
                    0c:51:42:11:80:1e:6c:d4:68:1a:e3:e9:63:4d:2f:
                    44:c9:db:c8:22:84:b3:0e:b4:37:22:64:09:8c:1d:
                    61:22:56:38:6a:7a:61:87:57:bf:cb:a1:ca:a6:7a:
                    f5:35:c7:66:4a:bb:3e:05:80:91:04:cd:da:4f:b6:
                    2b:a5:61:e2:b9:9a:dc:30:9f:67:82:66:32:05:4f:
                    13:27:b2:0f:1a:78:f5:a4:a1:a8:e3:da:93:e9:80:
                    ab:f3:66:f2:ac:c2:fd:13:f2:e3:e9:03:80:1f:0a:
                    e7:e2:d6:ed:54:21:b5:0d:f5:3e:51:f1:b9:00:08:
                    02:22:87:06:11:d6:41:b0:6a:19:90:3c:f6:66:ec:
                    75:e1:91:c6:be:5b:00:9c:81:3a:b1:c2:5b:ba:63:
                    0c:b2:ad:cc:39:78:ee:65:1d:a3:31:73:1c:9e:4e:
                    13:25:73:61:5f:28:3a:6b:01:8f:a7:ca:07:b1:3b:
                    d7:f9:4b:24:2c:a1:3f:b3:c9:3b:98:47:7d:e8:a3:
                    5a:f6:7b:80:2b:97:54:9e:22:2c:b8:23:9b:44:29:
                    b4:19:2f:c3:1e:83:de:37:05:48:53:f7:b8:e2:57:
                    1d:5f:14:9a:5c:39:b3:a4:63:90:65:c7:c2:31:cb:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FF:16:FC:8E:A2:EC:70:18:81:58:EB:3A:D3:8E:83:3D:B2:99:3B
            X509v3 Authority Key Identifier:
                keyid:93:0A:57:2C:16:D0:C4:4F:77:66:58:7D:92:D8:78:BA:30:54:1D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpXLBbQxE93Zlh9kth4ujBUHR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa55a2-e33e-4dc0-9d87-8cc6579415da/1/kwpXLBbQxE93Zlh9kth4ujBUHR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2a:01:6d:50:91:84:fd:be:17:33:2c:b3:61:26:8a:d4:1e:
         11:91:ba:7b:ee:c9:08:9b:63:ae:cf:e4:cd:2d:9d:4d:e4:c9:
         c4:e1:fe:89:a9:9d:23:84:f7:22:d5:92:a9:51:63:49:75:88:
         34:d0:04:1d:ce:d4:68:49:5a:9c:67:3b:d4:27:af:fa:ef:08:
         1f:3d:f5:c9:0a:10:82:90:1d:3d:61:88:4e:2e:0b:c9:7f:8b:
         9b:d7:ad:58:d1:29:04:17:2b:8a:f5:68:cc:2c:1a:3a:b0:44:
         a2:03:d2:5b:34:22:8b:77:84:b9:40:e3:5e:93:c4:07:41:22:
         cb:5a:b8:0c:68:58:6d:f8:eb:c1:ea:eb:ce:c5:ef:08:1b:21:
         c8:b5:11:59:1c:dc:a5:da:88:4c:7c:93:67:64:89:b6:3a:3e:
         5e:20:50:e2:ee:36:af:d4:be:29:1a:46:10:3a:3e:48:df:90:
         58:09:06:dc:50:a7:ff:79:dd:a3:b7:45:75:ef:a6:97:aa:07:
         10:82:79:8e:20:12:59:3f:2e:b8:d2:88:cb:4f:b4:ab:21:5b:
         ab:3a:6f:20:25:86:32:63:ac:d6:c2:6a:d7:5e:a6:4b:74:0a:
         0c:fe:ad:64:f9:cd:9c:c5:02:af:95:b3:91:38:23:3c:fe:c7:
         38:c5:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:30:01 2025 by rpki-client