Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          lIZYVXaMBspjb/fjlgrl5eXQCOf+MzHN/D7mOeI4H0k=
Subject key identifier:   5E:55:4C:9B:57:D2:5C:D1:A9:26:62:5F:B7:CE:1B:F1:F0:46:BC:B0
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       01974666C015590884D18A30D56B058363B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          0714
Signing time:             Fri 06 Jun 2025 18:00:28 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:28 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:28 +0000
Files and hashes:         1: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (hash: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: dDTIiPvCChU0LD4qM7N0oLjizlD8VRf7I/WOBjDdby0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:c0:15:59:08:84:d1:8a:30:d5:6b:05:83:63:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: Jun  6 18:00:28 2025 GMT
            Not After : Jun  7 18:00:28 2025 GMT
        Subject: CN=5e554c9b57d25cd1a926625fb7ce1bf1f046bcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e8:6f:2b:dc:79:8e:c9:7c:db:53:86:42:2c:
                    31:77:22:1d:c4:8a:a7:33:7e:7b:8a:0e:82:94:d3:
                    14:0f:02:8a:2d:38:2f:d3:a1:6a:5d:4e:8c:65:82:
                    4f:bf:f8:47:6e:64:70:de:c9:e3:8b:0b:ca:87:f3:
                    4b:6b:ce:2d:e3:c0:18:5b:04:a4:7e:c4:72:bb:c1:
                    e4:fd:c1:94:7f:aa:80:2c:32:5f:32:3b:3c:81:68:
                    39:a1:f1:18:cb:a0:73:0b:40:96:bd:92:3a:f0:e3:
                    ee:98:2c:93:7f:6f:16:44:c7:e8:9f:ce:38:a1:ac:
                    cf:8d:38:77:cb:ca:ca:71:41:0e:ef:ca:c7:5c:21:
                    a0:f6:a1:6b:56:10:23:db:e3:8d:82:85:1f:d6:c4:
                    00:b1:ff:63:a2:70:a1:ca:5f:f5:87:66:1a:49:3b:
                    f6:8f:18:29:40:3d:c7:c9:f3:db:a9:a6:a4:d6:30:
                    4e:b1:33:a7:4c:e1:44:bd:66:35:d9:3e:47:d2:66:
                    3f:78:26:3a:01:e2:7a:c1:18:6b:d4:18:30:ea:ee:
                    d5:4b:b3:44:79:8f:86:0c:60:9c:07:1c:40:79:46:
                    77:14:a4:d1:f1:5e:de:a6:17:cf:0f:12:ef:13:7e:
                    e8:43:64:c3:5a:ee:12:e7:54:e3:73:d8:04:c9:0b:
                    8c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:55:4C:9B:57:D2:5C:D1:A9:26:62:5F:B7:CE:1B:F1:F0:46:BC:B0
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:41:9c:e5:75:28:1b:a8:72:39:3a:e3:f3:a3:6f:cf:10:55:
         2a:23:89:10:37:6c:1a:0e:44:ed:9c:b5:4a:97:92:33:ca:6e:
         10:68:fb:49:91:d2:b3:e0:25:25:a1:f6:54:b6:65:89:c8:38:
         20:05:b3:0a:69:0c:06:8b:dd:90:84:f2:96:61:2a:05:38:02:
         ea:c2:84:7d:46:84:31:92:f4:9f:60:05:82:fb:cf:21:e6:2a:
         1e:43:a2:12:60:41:69:27:3d:52:7d:b7:c2:45:f0:f4:de:ff:
         e1:09:72:d5:06:23:00:75:15:9e:b4:42:96:3d:74:c6:54:92:
         9c:02:4c:f1:12:62:bc:8d:9f:90:6a:70:7b:7c:f4:33:c5:f5:
         9f:c4:04:1d:a7:64:c9:6e:08:30:98:cd:f9:e8:aa:37:a1:d5:
         04:71:ff:8a:89:f1:a1:c3:b1:a5:8f:30:09:72:a0:fa:66:9a:
         df:af:c2:ba:db:69:7e:bb:2a:e6:91:34:c2:e5:b4:4a:86:7c:
         c2:07:4f:d2:52:94:5c:56:3e:1b:34:c7:4e:1f:3d:51:6c:22:
         7b:cb:9c:48:29:07:06:90:94:5d:7c:77:17:44:9b:a9:cc:e5:
         a3:e8:bb:be:45:14:3c:f5:ea:35:e3:1b:69:04:00:f9:4f:98:
         31:3f:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:52 2025 by rpki-client