Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File:                     w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier:          1WZQpGbTo6wlyAyHyysYd48Yo9nPpBhdJZDrdzy60bQ=
Subject key identifier:   E0:5E:3D:84:77:09:3F:50:D0:CF:22:2A:36:7C:8B:39:E5:98:94:AF
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer:       /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial:       019748FA94B6E53D3E0EEA51F82A4872107D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number:          0124
Signing time:             Sat 07 Jun 2025 06:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:10 +0000
Files and hashes:         1: qel6ufOI0K0P6RzF02UdBRZmZOs.roa (hash: 0w6Fd2wQlTNYoLFBh1jxH0G1R4nWQ+6pOgjLnjgYDIc=)
                          2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: rl3dwT20qbyxcEhdjKSpDEb4mpCxgfnBIM4lTBkbHZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:94:b6:e5:3d:3e:0e:ea:51:f8:2a:48:72:10:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
        Validity
            Not Before: Jun  7 06:01:10 2025 GMT
            Not After : Jun  8 06:01:10 2025 GMT
        Subject: CN=e05e3d8477093f50d0cf222a367c8b39e59894af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:96:cd:40:c1:10:97:e1:21:d8:62:06:ea:
                    5f:2f:d6:5f:03:f6:36:04:a7:4b:cc:74:74:6a:89:
                    51:c1:3e:fd:e0:6b:85:ee:fb:b2:6f:e7:25:47:18:
                    eb:f0:19:88:b8:e0:f2:7b:26:3e:9e:1d:39:58:bd:
                    c8:5d:e7:42:c5:df:da:0e:87:6e:7e:42:c7:8b:24:
                    fd:0f:a7:06:ba:fb:1f:d1:84:f4:96:03:1f:67:f9:
                    7d:04:f7:67:82:6b:7b:15:de:f7:71:99:42:31:18:
                    82:f2:ec:89:db:87:5e:b1:02:40:16:fa:9a:58:61:
                    a0:0c:4a:44:82:d1:c3:f4:89:e3:e8:de:38:cf:ad:
                    e9:41:07:27:f9:8d:37:2f:3a:cc:85:29:34:96:c0:
                    98:c9:a1:bd:ec:4f:de:ac:c8:0f:5e:83:8b:7c:61:
                    f6:dc:a4:88:11:16:9c:86:4b:40:8b:78:94:0a:7c:
                    97:29:9e:a4:b6:b0:a5:32:43:a3:31:3c:cc:1c:9c:
                    f1:63:2a:1e:71:8c:3b:d9:01:fc:11:a7:b1:9c:d7:
                    4d:d2:ca:97:8b:8a:f7:b3:1e:e4:cf:49:4b:c1:a0:
                    61:f4:00:3e:63:06:76:ba:9e:99:77:bc:b0:f9:41:
                    c1:9b:b6:da:c6:6f:5a:bc:71:50:86:be:58:be:8b:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5E:3D:84:77:09:3F:50:D0:CF:22:2A:36:7C:8B:39:E5:98:94:AF
            X509v3 Authority Key Identifier:
                keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:29:dc:39:1f:12:54:4a:42:1f:72:9f:56:3f:c8:3f:d5:91:
         6e:14:74:cc:9d:b1:ff:b5:e9:80:45:bd:66:c5:72:1f:1f:8a:
         45:fb:b5:f1:d0:36:44:83:50:06:e7:de:45:a8:ec:16:a8:71:
         dd:0c:0f:8a:05:d1:65:41:14:5a:6f:4f:bd:d2:a6:4c:c4:dc:
         72:d3:da:a2:f7:e8:c4:21:10:5a:40:03:4c:a6:06:b7:e5:9f:
         80:1e:26:d2:a4:e2:1c:fa:9d:73:ed:1f:fe:c9:79:44:3d:e3:
         0a:f7:35:b6:c6:db:ee:36:94:7a:6b:3e:c9:94:00:f2:dc:f7:
         33:29:26:0b:a4:1e:5d:91:01:00:7b:72:ce:6a:da:8c:8e:43:
         92:0b:d7:fd:e4:e0:6a:4b:2d:89:0c:b6:9e:c4:3a:75:8c:f2:
         6d:9b:4b:c1:e1:bf:28:f1:c7:21:66:66:3b:a1:a2:5b:c2:df:
         c7:b0:aa:6a:80:07:ee:c2:1c:e9:29:13:1b:de:56:18:64:91:
         fa:a3:e1:32:9c:af:f2:bc:fb:9d:62:cb:c1:80:64:87:61:84:
         1f:55:8a:44:c5:e0:94:3d:33:0c:b5:be:7d:01:d8:11:b8:f9:
         fc:51:18:02:66:9c:e1:5d:58:99:a9:7d:8a:bc:56:0d:db:fb:
         98:94:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:30 2025 by rpki-client