Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File:                     wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier:          ZgHx6DC+tUEaZo1xMISYN3yy45tB7qtIDv+5U4NJy5Y=
Subject key identifier:   6A:B3:4B:A6:56:5B:F4:C4:5E:97:74:3A:70:AF:B7:02:8A:F4:ED:C8
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer:       /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial:       01976A7369780DF6CD331C379298E6A333EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number:          0BF4
Signing time:             Fri 13 Jun 2025 18:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 18:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 18:00:37 +0000
Files and hashes:         1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=)
                          2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: a6oG7aQDBRJOuXd1FOwsiVzDSPB28a1H2mxhQbW0zrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:73:69:78:0d:f6:cd:33:1c:37:92:98:e6:a3:33:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
        Validity
            Not Before: Jun 13 18:00:37 2025 GMT
            Not After : Jun 14 18:00:37 2025 GMT
        Subject: CN=6ab34ba6565bf4c45e97743a70afb7028af4edc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:82:b8:e5:44:c8:bb:a8:0f:f3:37:09:00:
                    18:46:3e:96:f5:a0:79:35:88:b6:ed:07:ed:1a:b7:
                    de:33:3d:ed:e7:82:d1:59:f2:0f:a4:b8:66:b2:c5:
                    23:e5:39:ca:d8:b5:c5:63:92:e1:e5:92:55:d5:a2:
                    23:8c:41:35:12:17:60:b5:5f:ad:bc:51:31:fa:b6:
                    c0:d1:54:6a:27:68:c6:7a:e7:12:37:0e:65:ba:23:
                    50:2a:7f:94:59:01:2d:eb:f6:80:03:73:ae:8f:21:
                    5f:63:7f:a8:07:0c:48:ec:f9:25:e5:ad:41:4f:2c:
                    62:5a:de:cb:82:ef:88:ba:74:2a:d5:94:ef:eb:f7:
                    af:29:11:4d:c4:cd:58:b6:72:90:04:6d:ec:3a:84:
                    b4:9a:05:34:f6:dc:5f:96:c5:8f:46:e0:1f:1c:c0:
                    66:f6:2e:d7:10:2c:ab:19:5a:cc:69:29:e0:6f:93:
                    d1:03:c8:e5:6e:52:c8:8f:fc:4d:7c:4c:07:ee:5f:
                    65:09:e3:40:91:9b:8a:0a:bc:1c:96:e4:ce:5d:da:
                    4b:e3:a6:ce:6f:64:73:19:1e:e8:49:58:58:6a:d5:
                    d8:32:b1:f3:d3:c2:33:e4:60:e2:bb:e3:a3:c3:4a:
                    75:75:6e:31:b7:f2:bb:0d:e3:ac:4c:9f:42:a5:35:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B3:4B:A6:56:5B:F4:C4:5E:97:74:3A:70:AF:B7:02:8A:F4:ED:C8
            X509v3 Authority Key Identifier:
                keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:18:81:be:df:56:59:c1:26:23:d7:29:ef:96:8c:02:99:e1:
         cb:e2:d8:d9:55:c6:77:5f:e9:a5:7c:54:f5:ed:ec:89:96:26:
         67:22:e4:d2:e7:20:f3:16:28:4d:89:8e:21:42:0a:96:b3:92:
         56:5d:c8:d9:e4:16:2d:42:47:23:7d:d8:a6:22:43:ef:4a:4a:
         0d:ac:3a:1a:56:3b:ac:89:ba:9a:c0:ae:4c:28:33:1e:8c:27:
         b0:61:dc:d2:e9:c8:37:0a:93:49:0b:b3:f8:fa:7a:54:e6:15:
         84:40:56:2f:c6:7c:f2:4f:40:2f:e3:dd:86:7c:c9:68:18:21:
         9f:42:b4:d6:32:c0:69:10:f3:56:cb:d7:94:7d:64:3c:eb:f0:
         76:57:b0:48:f0:3d:6e:0f:00:58:fa:02:2b:92:3f:4f:93:8b:
         12:29:e2:ef:bb:b3:d6:b5:1a:07:65:c1:49:5d:12:ef:f1:52:
         3e:6e:5e:7f:5e:b8:04:8f:21:66:19:52:a7:7b:5c:96:5d:b2:
         54:19:4e:8d:21:b2:c6:85:6d:f0:d7:19:0a:d7:bb:2b:2c:09:
         25:34:18:99:ff:2f:bb:18:fa:c2:1f:9e:8e:1e:04:98:d1:63:
         cf:68:b5:10:90:6a:3c:dd:35:66:1a:1d:03:2a:00:67:55:f2:
         83:64:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:09:32 2025 by rpki-client