Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          2D59x5pBZ+IVs9ggfkPyffvRdZDMbco7/81jdmlL75k=
Subject key identifier:   56:52:2A:82:8C:7B:BF:CD:DD:94:15:75:A5:A3:E0:4A:CA:ED:A4:42
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       01974BC49F263DC01758743E4F01D5609315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          0E50
Signing time:             Sat 07 Jun 2025 19:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 19:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 19:01:06 +0000
Files and hashes:         1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: bhs6EBPuZIiriLpAq1yp/44ZifSnlG0qkoiyVp+vNxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:9f:26:3d:c0:17:58:74:3e:4f:01:d5:60:93:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Jun  7 19:01:06 2025 GMT
            Not After : Jun  8 19:01:06 2025 GMT
        Subject: CN=56522a828c7bbfcddd941575a5a3e04acaeda442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:58:b8:f3:6e:fb:5e:b7:d1:f4:a5:9a:c3:46:
                    e5:43:3b:61:1b:00:40:f5:e1:3d:87:01:3b:5b:7c:
                    e1:34:f5:29:08:58:2f:cd:bf:96:77:00:67:26:44:
                    3a:f0:c1:24:6a:da:12:20:ec:37:6d:a3:d3:0a:11:
                    27:f0:03:38:5c:8a:13:2f:f7:9d:c7:86:59:c9:72:
                    26:59:86:12:e9:5d:d1:0e:ed:d2:d5:b6:45:52:ce:
                    08:3c:70:e5:16:76:46:7e:1e:b4:75:ce:e9:84:00:
                    a9:cb:99:56:c8:76:50:7b:91:7c:03:f1:51:5a:b6:
                    12:32:a1:9c:43:97:bd:3e:b4:0e:94:4a:08:12:df:
                    4a:56:27:92:00:31:1f:b7:39:f5:ce:9a:82:f6:ce:
                    82:0e:f0:5d:18:ac:0e:b0:0a:5c:80:56:e2:05:a0:
                    a4:81:a9:ef:41:3b:3d:bc:71:8b:27:0b:bc:01:b9:
                    c6:0d:e7:8e:61:3b:3e:e3:f4:05:82:ed:b8:ba:77:
                    18:d4:38:46:5c:76:2a:7b:61:11:08:d6:19:7b:18:
                    75:cd:c5:0d:10:1b:9c:c2:95:da:e3:9e:d1:f1:1b:
                    99:b6:41:76:21:2f:33:35:fb:b6:9d:c0:46:af:92:
                    ea:37:2b:02:a9:e9:c2:17:45:8f:0e:c7:3f:b0:81:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:2A:82:8C:7B:BF:CD:DD:94:15:75:A5:A3:E0:4A:CA:ED:A4:42
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:30:69:93:06:f1:ed:7f:65:3f:c3:c0:d4:e4:65:d0:1a:e7:
         2b:36:71:9d:57:51:98:a6:86:bc:65:f7:6c:02:a2:79:0b:00:
         04:b5:94:f5:6a:08:de:9d:48:4e:15:55:45:79:82:63:3a:12:
         ff:75:87:97:03:7a:9d:8a:a5:2a:41:d1:f6:06:5f:bb:df:ee:
         00:cf:f4:a1:4f:0d:4d:69:1e:3d:59:2a:4b:3d:1a:72:03:42:
         cf:eb:0c:2f:c1:70:eb:19:15:90:75:f8:02:8f:09:38:93:74:
         8f:6e:5b:57:f7:84:ed:4c:89:bd:b5:86:15:4c:73:e0:32:ce:
         74:3a:11:99:a9:d0:ae:4e:ef:1f:40:77:09:f5:c4:18:95:e5:
         5e:55:1c:74:bd:08:ea:eb:4d:b0:af:79:b2:5e:98:1c:9f:40:
         87:d8:dc:3c:7e:17:47:4b:c0:04:ba:05:33:c9:b4:1e:5d:37:
         32:22:75:29:ee:76:24:b7:0a:d9:e6:c6:c8:4d:80:20:81:c1:
         5f:4b:20:d0:70:fc:59:9f:5d:e4:8f:d0:21:e9:cd:8c:ba:a1:
         f0:5b:d2:95:e6:25:1c:d7:43:60:06:91:34:02:49:82:02:fa:
         9b:f6:6c:1f:33:ac:27:c3:23:df:8f:22:96:18:4b:04:df:f5:
         88:b2:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:06 2025 by rpki-client