Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          5HaVvWB746Jdy7zfXSBxXublD5DQtTQbQtU2povSsq8=
Subject key identifier:   C1:20:7D:65:25:B7:51:2D:40:AF:32:ED:DA:AF:12:7D:B9:3C:67:69
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       01974D0E2938FECBA5F88EABF018D59F0499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          1582
Signing time:             Sun 08 Jun 2025 01:01:03 +0000
Manifest this update:     Sun 08 Jun 2025 01:01:03 +0000
Manifest next update:     Mon 09 Jun 2025 01:01:03 +0000
Files and hashes:         1: aU__37kt8ckO_YJQdDxx1zfJXr4.roa (hash: G2q1R6crWsWgIzSolrfZ7On3iNyzuy0vug1zXtUIFQY=)
                          2: ahMDGxNyecqlZxcgrlYmGrrq9pU.roa (hash: h30GXSYF139afkSTNjFaEpPAUr9XbrAvQRMhITWnZY8=)
                          3: mIknYG3WTBISQkb0avBlTMQBHO0.roa (hash: iFjLxQXc/Bjp4mKvj7ItM6hlDfEhly4nMW0gLz+f1Fc=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: pDWgkIjX7TyKvadGff5VXnXXJRGe0OfcoEr5XsWXtVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:29:38:fe:cb:a5:f8:8e:ab:f0:18:d5:9f:04:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: Jun  8 01:01:03 2025 GMT
            Not After : Jun  9 01:01:03 2025 GMT
        Subject: CN=c1207d6525b7512d40af32eddaaf127db93c6769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:01:9f:a6:0b:2f:e6:4f:8f:3d:3b:c5:0c:0f:
                    c2:0f:5b:8f:fe:1e:8e:48:30:3d:94:59:64:a3:ca:
                    2a:c8:8f:cd:ff:4c:db:87:87:8e:70:db:69:f6:f1:
                    39:da:b4:3b:c3:4f:79:ff:e9:40:2d:e6:54:f2:1f:
                    fa:5e:ce:b5:19:35:76:e2:bc:7e:26:62:e9:d4:ea:
                    5a:ea:1e:22:e4:1c:72:71:3c:04:a6:17:88:69:57:
                    bd:65:74:e3:cd:f0:ea:6c:84:bc:4b:99:c7:67:64:
                    26:82:1d:72:d4:08:86:9f:e3:87:9e:f4:39:ea:69:
                    9c:f9:f4:18:3a:f2:e6:9a:5d:58:b7:93:62:68:7a:
                    39:49:93:bc:c4:0b:95:79:bd:3e:57:5f:d6:8e:6a:
                    94:51:e4:ec:e6:f7:f0:fb:e3:c1:94:62:46:dc:66:
                    c0:c3:89:85:bd:99:e0:5f:fa:0a:03:ce:6d:03:63:
                    1a:80:e8:6c:3d:37:b4:c5:e7:c3:31:78:aa:f4:66:
                    e4:35:64:80:fb:72:14:1e:3e:36:4f:5b:22:32:15:
                    a5:b1:6e:08:ca:c4:9b:fb:0b:72:75:3e:33:a9:91:
                    9c:6e:18:b2:cb:05:2d:a0:c2:7b:ec:7a:42:20:3d:
                    19:62:c8:27:29:61:b4:56:50:c7:0a:5b:84:48:35:
                    c4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:20:7D:65:25:B7:51:2D:40:AF:32:ED:DA:AF:12:7D:B9:3C:67:69
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b3:3e:84:f0:80:3c:ee:09:3e:a0:c6:3f:ad:eb:a0:0f:54:
         b5:ae:47:9c:bb:b7:6e:46:d3:a7:c6:af:21:94:be:dd:79:be:
         73:88:e4:21:be:16:1c:3e:7e:33:e2:ec:42:63:98:fe:73:6c:
         50:c0:a9:9e:6a:2c:07:e3:51:97:a4:ec:cc:f5:d8:55:b2:7c:
         9a:24:d5:2a:8c:a2:e7:57:52:87:bd:38:dd:b3:a6:f2:33:a1:
         54:7e:83:16:79:18:83:49:7b:7f:59:c6:3a:90:39:b4:49:29:
         9e:94:8a:ae:c0:4f:57:29:9f:c5:c4:42:10:32:8a:91:c4:36:
         25:93:38:da:2a:b3:d1:32:46:39:35:30:a7:6a:d4:c6:cf:a8:
         bf:6b:72:18:75:fd:d6:52:35:69:e2:5f:62:f8:2a:2f:f3:fe:
         ed:9b:29:31:ac:02:25:d5:fe:6a:35:8c:d1:0e:4b:5c:53:6f:
         98:d6:8d:6f:16:93:87:c1:5c:1f:7b:4f:6c:bb:24:cd:3a:3d:
         bb:c7:6b:eb:41:69:0b:81:2f:c2:07:67:df:75:7f:fc:25:8f:
         8a:e5:16:c2:c3:d5:41:2c:3a:93:f6:95:e9:7d:3e:4a:bd:7f:
         d5:79:11:a0:d9:2a:31:3d:86:06:1d:08:f4:53:3c:8d:5e:f6:
         18:76:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:27 2025 by rpki-client