Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File:                     wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier:          TxKzNT/QCgJQmrTKduuOelOA89Bl0hMio4hFB7EOg+Q=
Subject key identifier:   C2:9D:10:36:33:7C:95:53:63:F2:36:7E:8D:03:E7:B9:5E:25:0B:EA
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer:       /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial:       0197651633DE34BB48FD96C1B7D78C291CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number:          0371
Signing time:             Thu 12 Jun 2025 17:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 17:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 17:00:43 +0000
Files and hashes:         1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
                          2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: xoNfyJ2UHTyDYHaXzcHIKxj+sobQDMTlnfXNNKX2zAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:16:33:de:34:bb:48:fd:96:c1:b7:d7:8c:29:1c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
        Validity
            Not Before: Jun 12 17:00:43 2025 GMT
            Not After : Jun 13 17:00:43 2025 GMT
        Subject: CN=c29d1036337c955363f2367e8d03e7b95e250bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9d:19:f5:8d:16:55:d4:f1:ea:a8:5b:7f:e0:
                    9d:a1:fb:8a:7a:39:61:c7:67:a3:55:72:40:56:9b:
                    72:23:2b:05:46:4e:5d:53:54:46:d4:d4:82:4f:69:
                    a7:29:35:4e:15:6b:90:ef:93:92:7a:bc:1e:48:fc:
                    a4:3c:40:bf:b6:83:50:a5:95:cf:5e:69:f4:16:bf:
                    e5:c1:d1:5f:61:32:42:60:35:53:0f:fd:c9:ee:11:
                    55:ac:23:76:8f:57:4d:c8:28:41:26:42:fe:e5:31:
                    eb:96:9a:b2:88:28:aa:b2:46:f1:32:d0:6e:7b:da:
                    23:0e:15:a8:0a:78:c5:ff:b7:73:9d:05:84:38:3b:
                    06:ef:b6:0e:4a:40:bf:e1:70:65:ea:d5:a7:bf:af:
                    e0:6c:a2:61:85:76:5b:95:7a:82:60:60:09:d0:cc:
                    97:c1:60:14:91:9e:d1:8d:63:86:69:ed:0c:df:0f:
                    2d:00:d3:f5:e3:ff:ab:8d:6a:e8:aa:b8:7a:1f:05:
                    38:f2:a9:4b:42:e1:7b:12:7e:d4:17:b9:2b:d6:95:
                    59:63:bb:e6:c2:56:e8:21:17:0e:90:01:e6:23:e5:
                    f8:ca:5d:e1:4e:f6:9a:b1:a2:10:c9:42:96:b5:7e:
                    26:ea:ac:9b:b8:5c:a9:fc:db:c6:9f:07:ad:86:53:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9D:10:36:33:7C:95:53:63:F2:36:7E:8D:03:E7:B9:5E:25:0B:EA
            X509v3 Authority Key Identifier:
                keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:ef:76:84:2c:9b:c5:8e:9c:01:2f:33:ee:02:ac:30:43:
         5e:e6:44:ed:47:20:4b:82:db:e0:6d:ff:bc:37:d9:ae:e8:88:
         2a:cc:fa:bb:35:46:3e:f6:85:bb:5e:85:d0:aa:ef:82:31:46:
         24:b9:6b:83:e6:46:48:e0:b6:8f:09:01:71:76:0d:e8:eb:b9:
         34:36:18:f8:13:69:38:2c:f7:ff:a9:c8:26:bd:69:a1:12:f9:
         aa:5e:32:66:57:e7:9c:61:cf:98:c5:cd:ff:cc:be:df:1f:3e:
         5f:de:dd:e9:b7:84:6b:fc:14:3c:08:48:4f:c8:72:e1:ff:7a:
         6a:71:6e:f6:85:0a:c5:e3:86:b1:b7:52:6e:a4:67:4a:9c:c4:
         72:51:46:60:8f:bb:be:6e:e2:ca:9b:d4:63:d4:0d:fd:81:c4:
         27:14:b6:39:a9:8d:52:06:03:79:54:cf:d8:42:4b:3e:96:18:
         2b:b7:47:9e:00:55:21:4a:05:e8:44:ae:68:d5:e0:c4:dd:92:
         39:01:e1:89:17:96:6c:c8:73:c7:d3:85:7b:21:4f:2d:84:21:
         31:13:8f:8e:df:bb:75:4f:fc:ac:58:09:e4:07:a3:1a:ae:9f:
         d3:31:98:c2:24:1f:00:8f:ea:cd:c6:ee:6e:fb:22:32:0b:91:
         37:f8:bc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:03:41 2025 by rpki-client