Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
File:                     wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json)
Hash identifier:          u/69T7KE3bfk4c/CB3JRYe93LGB1LKOPZWH3a8C8zW4=
Subject key identifier:   CB:84:C8:E6:72:EB:40:96:11:24:DC:A7:9C:7F:C9:70:1D:C2:BF:FE
Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
Certificate issuer:       /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Certificate serial:       019748C2FCB4EEC76B1ADEB25C138F70BC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
Manifest number:          023E
Signing time:             Sat 07 Jun 2025 05:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:27 +0000
Files and hashes:         1: nEKK32oFQy3X2Yzvdv8fEhGcazg.roa (hash: LMYqTrguswdi0QtX9F4iCp/SyY8hGayYOolliB1rgCg=)
                          2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: MdFTD4bWe7UJi2Dl5TJ/ld6QsTWHrbh59AZX31U0i0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:fc:b4:ee:c7:6b:1a:de:b2:5c:13:8f:70:bc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
        Validity
            Not Before: Jun  7 05:00:27 2025 GMT
            Not After : Jun  8 05:00:27 2025 GMT
        Subject: CN=cb84c8e672eb40961124dca79c7fc9701dc2bffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:2f:fe:52:fe:41:4a:8d:1e:a7:30:6e:ca:
                    86:0d:22:ea:3c:61:2f:51:e4:13:82:f0:d3:a4:89:
                    fc:4c:83:b5:55:81:ba:36:3a:fe:45:9a:32:0f:90:
                    8c:26:b0:d1:42:a5:88:64:63:ea:9e:6d:94:25:69:
                    8b:be:a0:cf:4f:b0:15:92:36:8a:f0:cc:95:b2:1e:
                    71:72:6e:d1:ea:3a:7f:7a:5e:2c:38:c0:7f:47:0f:
                    66:49:96:f3:8f:d7:7c:72:9d:1c:50:28:9e:07:97:
                    14:bf:db:31:7e:29:dd:4a:3a:70:65:db:a8:a5:3e:
                    93:bc:58:09:cc:2d:47:be:fc:0a:7b:19:b6:de:b8:
                    d9:b1:d2:31:01:5e:ba:1b:70:6c:a3:32:75:99:4e:
                    eb:99:76:6f:e0:62:f8:e5:ab:65:64:97:fb:7b:fb:
                    2e:37:97:26:93:a9:62:52:5b:a8:e7:a0:81:c3:f6:
                    85:6d:3e:16:69:8b:5e:52:ed:ed:d0:bb:50:b9:13:
                    89:d8:5e:e0:7d:2e:31:67:39:07:be:e1:0f:ec:d4:
                    2f:32:1a:74:d9:5f:39:43:20:10:5f:dd:39:1b:cd:
                    2a:e5:61:09:50:27:82:fb:15:1a:55:7d:aa:93:94:
                    cb:86:0c:42:53:76:5e:fd:6d:65:a5:17:2c:4c:b1:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:84:C8:E6:72:EB:40:96:11:24:DC:A7:9C:7F:C9:70:1D:C2:BF:FE
            X509v3 Authority Key Identifier:
                keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:2d:b0:20:8f:db:df:1e:8d:e9:4b:72:3a:ff:eb:6b:b2:
         1c:ca:fd:5f:75:58:63:dd:c4:d5:fa:cf:29:db:a3:57:2a:f1:
         2f:6e:6e:de:4d:36:f4:f4:fe:3b:68:f3:b5:ee:60:2f:cb:dc:
         b4:93:ac:43:15:43:0c:9f:d7:6b:a5:1b:eb:2b:e9:de:66:50:
         9c:65:e2:0f:25:75:22:7b:77:bd:35:21:1c:1f:56:79:3c:26:
         80:b4:d3:15:a1:d1:73:5e:5d:35:e9:10:7a:f8:d6:05:fd:8a:
         64:07:79:87:0a:95:eb:5f:bb:bb:b4:65:68:c7:46:ec:62:0e:
         91:57:7a:5a:40:7a:20:52:8c:32:27:1b:91:92:72:93:97:95:
         28:cc:08:37:e9:dd:d0:a2:73:a0:82:90:90:c5:a0:72:5a:47:
         0e:38:2a:f6:1a:0c:d5:65:aa:53:d7:d2:c2:90:d4:d7:a1:15:
         cc:a5:b5:b8:6e:02:63:89:8e:90:e0:1f:ad:07:4c:e5:0d:de:
         c0:09:c6:83:4f:48:b6:d2:4d:32:ff:95:84:d8:97:50:53:ba:
         33:c4:ae:c8:a5:98:40:8b:79:21:0d:7d:d5:0c:a9:61:96:57:
         e8:dd:79:87:6e:85:8c:88:ae:b5:51:46:85:86:5e:83:fd:ba:
         a7:8c:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:23 2025 by rpki-client