Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File:                     wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier:          t1h4VrwEcI+WCTnY+oRo/FyLYi5NT8C+xOazW/M8P4A=
Subject key identifier:   57:A2:FD:FE:4F:D3:A2:EA:B2:AD:57:A1:BF:12:0F:5E:D5:88:5A:2D
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer:       /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial:       01975911F9237A301E8F5601452177D12426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number:          0BEB
Signing time:             Tue 10 Jun 2025 09:00:39 +0000
Manifest this update:     Tue 10 Jun 2025 09:00:39 +0000
Manifest next update:     Wed 11 Jun 2025 09:00:39 +0000
Files and hashes:         1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=)
                          2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: lGg4QhE9qpnzfr5ER1p9q3Oh7b7vZN+WMKS0Metm2FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:11:f9:23:7a:30:1e:8f:56:01:45:21:77:d1:24:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
        Validity
            Not Before: Jun 10 09:00:39 2025 GMT
            Not After : Jun 11 09:00:39 2025 GMT
        Subject: CN=57a2fdfe4fd3a2eab2ad57a1bf120f5ed5885a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:0a:21:0b:99:f9:ea:68:b3:7a:19:e6:71:
                    32:27:e9:ab:67:49:46:a7:b6:8d:aa:6f:82:b2:23:
                    fe:d3:60:e7:0c:f0:de:81:46:f4:02:8e:6e:51:69:
                    98:73:d0:02:86:1e:c3:d4:8b:2e:b4:c5:c9:85:ee:
                    7d:de:38:84:6d:87:20:73:2b:86:7b:a2:82:f1:86:
                    6f:0e:ac:1b:66:8c:7e:fd:bf:82:d1:21:6b:3f:af:
                    8e:a8:fd:c5:49:b9:1a:0b:74:f9:ca:36:66:16:b6:
                    f6:5d:6c:70:f4:b3:51:02:db:7b:ee:37:de:0d:41:
                    99:08:4b:df:f4:08:d4:ee:9a:37:d9:36:83:ae:76:
                    df:a2:87:c1:c4:6a:73:9d:85:40:3a:d8:16:ef:d4:
                    bd:43:bc:64:b6:c7:86:ba:ac:eb:c1:f9:0f:e1:53:
                    4c:08:8e:f9:87:1c:5b:c6:01:d9:e2:31:4a:d6:48:
                    b0:3f:a2:dd:e5:ef:8f:c8:f9:1c:30:09:87:dc:18:
                    a3:37:43:ba:76:ef:2d:4b:36:22:44:27:99:9d:80:
                    1b:43:e8:ae:5b:19:75:b0:f0:80:ff:54:9e:14:5c:
                    73:97:a3:98:6a:cc:ce:0d:1f:33:85:44:5d:44:2c:
                    91:6a:47:e5:38:f2:1e:c3:aa:6d:f8:9f:4d:9d:ea:
                    31:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A2:FD:FE:4F:D3:A2:EA:B2:AD:57:A1:BF:12:0F:5E:D5:88:5A:2D
            X509v3 Authority Key Identifier:
                keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:78:8d:a4:a6:15:47:91:d2:5a:43:43:1f:f4:a4:03:b8:05:
         77:b5:43:22:e1:cf:f0:49:fb:ea:de:05:db:10:74:66:2c:63:
         e7:7e:9b:bb:11:d1:54:24:0c:aa:4a:49:c9:7b:26:93:2c:74:
         b9:50:5d:ec:90:37:4e:b6:d7:61:86:ea:66:80:95:bd:7a:50:
         fd:1b:d7:3b:4f:9f:b5:27:30:dd:b6:53:ad:4f:39:cd:9d:d8:
         63:04:8f:15:28:83:2b:63:6f:ac:37:d9:ec:d8:c0:75:20:aa:
         19:5a:e2:d3:db:3a:f5:c2:7f:eb:5c:51:c2:9d:a4:ae:bd:45:
         6c:3d:32:ce:e0:ac:b9:d5:0d:2e:aa:31:5b:4a:2f:c9:96:61:
         2d:5c:8e:0e:47:0a:22:df:d6:bd:e8:90:3a:b6:2b:cb:ea:c0:
         09:7c:ea:16:6a:30:5f:8b:e5:b5:05:d0:d7:b3:ab:da:93:94:
         aa:1f:85:90:be:3a:31:70:15:69:39:07:c3:8a:d4:2b:6a:c8:
         48:5a:b6:fa:88:e8:82:a0:f8:e5:1b:e5:39:48:ca:f9:26:27:
         f4:54:9b:88:79:82:ca:42:99:83:d0:a0:ba:59:20:07:f2:0d:
         7d:b5:fe:46:a8:a6:42:29:4a:57:a9:99:a4:42:ed:9a:d3:52:
         61:97:ce:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:49:04 2025 by rpki-client