Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
File:                     wc2HDWChpsQgZxWK7rzA4_1t2B8.mft (raw, json)
Hash identifier:          DbugjojGht6/3PFWVj18kXeEw1hRHu70k06J+9do2uA=
Subject key identifier:   92:CC:FC:B8:25:D6:BC:C6:0F:98:03:BD:90:D7:8A:FE:09:F1:7A:3E
Authority key identifier: C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F
Certificate issuer:       /CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
Certificate serial:       01974BFB84ADA588168019B2B4350BD6730C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
Manifest number:          0261
Signing time:             Sat 07 Jun 2025 20:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 20:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 20:01:04 +0000
Files and hashes:         1: BqHb_zqnMM3dIgBF_BTfgVY5a5k.roa (hash: uhtJUVXZSGPPQKjYqbLF+Cz5CPTBTCYfz/c5yIRK4Ss=)
                          2: wc2HDWChpsQgZxWK7rzA4_1t2B8.crl (hash: Y+WX8nscxVJBqt3DJPQvkjvGF6xuC6T4kOVn93jfir4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:84:ad:a5:88:16:80:19:b2:b4:35:0b:d6:73:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1cd870d60a1a6c42067158aeebcc0e3fd6dd81f
        Validity
            Not Before: Jun  7 20:01:04 2025 GMT
            Not After : Jun  8 20:01:04 2025 GMT
        Subject: CN=92ccfcb825d6bcc60f9803bd90d78afe09f17a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:12:41:ac:b7:a4:aa:fd:d1:f2:a6:2f:1a:
                    1b:5c:b6:50:6e:2e:1c:1c:1a:e1:2c:f4:30:b1:03:
                    a2:52:e2:6a:b0:e0:39:9d:69:03:41:7e:4c:65:13:
                    3e:e8:21:bb:d0:85:ab:4f:d0:c6:b4:8d:94:04:65:
                    de:ee:8b:e3:11:a1:98:8c:f6:08:b9:3d:8a:b7:f1:
                    e0:3e:60:dc:24:84:22:5f:0f:13:3b:f3:87:ec:2e:
                    8c:23:66:a8:47:8c:ff:e5:6f:a3:da:b5:dc:d3:30:
                    cd:08:9c:b3:46:54:76:6c:11:0b:ca:39:bf:3e:1a:
                    a1:cb:70:9e:b8:21:d2:49:d2:2a:55:3b:ef:85:96:
                    80:0e:d9:6c:01:65:9b:c7:b0:74:91:ce:72:6c:d4:
                    ab:e1:ea:ab:01:81:67:0c:ec:5b:76:b0:25:eb:41:
                    fb:5e:6c:39:87:1e:b3:d4:08:2d:8f:d5:d8:41:c2:
                    d1:68:b2:39:1c:8c:e0:3a:34:54:9c:38:e3:ad:ba:
                    17:21:f8:43:ea:cf:b4:7a:cf:f8:b3:f6:be:fd:f1:
                    35:9e:9a:15:49:f4:eb:fe:e2:64:d4:78:d1:71:f6:
                    92:6d:8a:d3:23:1f:67:ef:cd:af:42:93:98:0c:ef:
                    d1:3c:7b:04:fc:72:fe:a5:6d:4e:ea:b4:31:9f:73:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CC:FC:B8:25:D6:BC:C6:0F:98:03:BD:90:D7:8A:FE:09:F1:7A:3E
            X509v3 Authority Key Identifier:
                keyid:C1:CD:87:0D:60:A1:A6:C4:20:67:15:8A:EE:BC:C0:E3:FD:6D:D8:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc2HDWChpsQgZxWK7rzA4_1t2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/835a82-8bbe-40b2-b2d4-0481c66c2b5a/1/wc2HDWChpsQgZxWK7rzA4_1t2B8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a2:37:ea:9a:ed:a2:1c:c8:51:5b:f3:1b:d0:8c:73:9d:c0:
         e9:7f:20:33:10:59:4e:9d:43:ac:24:90:3a:03:19:ba:b2:ef:
         48:27:b5:06:a8:4b:87:a8:84:42:72:0a:7a:6e:4b:a5:51:64:
         08:cd:f3:e2:c4:7a:c5:e3:00:de:de:c8:e8:6a:15:ac:58:60:
         8a:a5:a6:63:68:61:de:b3:ed:3a:9b:8f:f5:53:9c:7b:a7:f4:
         93:62:a1:58:5f:91:10:d3:58:73:04:1f:f5:8a:57:4f:ff:da:
         8c:c7:ba:c7:13:36:a9:8c:f8:96:29:ef:3b:00:d0:38:4e:4e:
         07:d7:0b:c9:0f:6a:85:09:ac:5a:ab:88:14:23:c6:bf:d5:47:
         b6:65:5d:b2:04:92:4b:34:1e:c7:bb:aa:38:78:0e:ab:5e:dd:
         aa:e9:b0:d5:2e:45:73:53:60:02:40:be:f1:4d:df:37:b1:11:
         14:8d:84:e0:4d:26:ac:9f:21:39:a0:05:c8:01:0a:22:36:58:
         ef:6a:73:7b:ad:9d:ef:21:0e:1e:6a:5b:c6:f8:71:fe:cd:99:
         0e:a8:70:25:1a:b9:03:69:f2:1b:1f:ad:e2:93:72:0e:ee:c6:
         e5:98:c9:b2:d6:2d:08:bd:41:b2:dc:44:d8:b9:e7:22:2d:0d:
         9e:85:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:51:42 2025 by rpki-client