Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File:                     wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier:          7u/eVuGJsBtMZP6fquYrcYwqUz6odq7SwLoUhUApygI=
Subject key identifier:   47:DF:58:FE:19:DE:5D:FF:86:89:78:E5:76:3D:8A:DA:1B:66:A1:9B
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer:       /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial:       01974A7B8100BC30336DD07489347ECC1E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number:          0441
Signing time:             Sat 07 Jun 2025 13:01:37 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:37 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:37 +0000
Files and hashes:         1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=)
                          2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: 3YYaL+HzmnvfGJSlTuAUeuswnS/PGbsgrtQ0JwVjG+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:81:00:bc:30:33:6d:d0:74:89:34:7e:cc:1e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
        Validity
            Not Before: Jun  7 13:01:37 2025 GMT
            Not After : Jun  8 13:01:37 2025 GMT
        Subject: CN=47df58fe19de5dff868978e5763d8ada1b66a19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:85:22:c9:de:7d:75:0e:42:56:fd:c8:11:
                    b5:b3:d5:eb:03:4c:07:fd:f8:94:f4:c4:52:47:1e:
                    5a:ae:28:70:21:d5:a2:24:da:df:42:f5:7b:09:e4:
                    57:69:d1:14:ba:cd:7a:96:19:73:02:c5:b8:dd:64:
                    4f:85:48:65:91:d8:69:5b:ac:52:da:07:4d:e0:8a:
                    ce:ff:b1:01:37:f9:d3:56:b4:89:e5:6f:07:35:fe:
                    7f:7d:f7:d1:f8:0e:20:e8:9e:ad:54:41:df:b9:08:
                    29:a2:3d:67:ea:7b:90:6c:4f:a5:79:49:f2:ea:50:
                    a7:b7:45:bd:7a:93:97:97:1b:79:41:aa:25:40:76:
                    3d:aa:bd:ca:82:84:7c:46:32:86:5c:7d:7d:9d:ab:
                    ad:b6:83:94:4e:4c:6e:b0:7d:54:55:00:56:61:ad:
                    f9:aa:ae:99:eb:7a:7b:86:37:91:1d:d1:4d:eb:4e:
                    d3:61:8c:00:2e:b0:55:71:86:92:8c:4f:7d:ad:68:
                    c1:3e:ea:4d:a8:24:a9:e4:d5:6b:db:ba:fb:f9:a9:
                    1c:d2:0c:77:5d:d8:1b:35:31:6e:be:ba:18:88:3e:
                    cc:8c:e2:00:4d:5d:0b:b2:d5:5a:35:89:03:70:dc:
                    cb:4c:74:5e:a3:9c:50:d2:7e:ac:8f:fb:b0:f0:70:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DF:58:FE:19:DE:5D:FF:86:89:78:E5:76:3D:8A:DA:1B:66:A1:9B
            X509v3 Authority Key Identifier:
                keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6e:12:81:cc:dc:a3:85:67:85:6f:18:cf:e5:c2:c2:9b:03:
         4d:26:e5:32:eb:d2:98:1d:24:02:0e:63:9b:c5:a4:39:3a:85:
         7b:be:82:57:24:7a:a6:d8:28:56:5e:f3:1d:2d:ca:de:43:b2:
         2c:78:31:09:53:f4:dd:39:5d:ec:2d:81:8c:b0:ec:34:51:4e:
         7d:10:8e:89:b4:02:df:d8:af:33:c2:68:a5:76:55:9d:94:01:
         ba:a0:37:49:fc:ea:a7:e8:1f:32:92:b3:8b:22:1e:d8:b1:8a:
         4d:77:4b:b3:94:f0:90:09:58:25:96:3a:4f:ee:67:ab:aa:e4:
         c6:56:34:03:56:b8:eb:9a:54:64:6e:a9:e3:20:19:55:aa:43:
         c7:49:ec:16:5f:17:03:f6:b2:46:6f:e5:52:80:20:37:a8:7a:
         c9:b1:cd:d7:cc:e5:7d:a9:c8:5d:86:49:47:6c:8e:4b:26:01:
         44:f8:1d:32:f0:37:ed:df:9f:19:39:ae:a6:16:f0:8a:9e:4a:
         42:a9:7d:a3:e9:9b:8a:c8:f6:12:32:56:f9:94:60:12:63:cc:
         fc:71:de:91:ba:f6:ff:87:78:56:6b:91:17:86:a1:a8:63:32:
         d0:3b:10:04:db:01:73:64:71:07:2e:4b:fc:17:33:3b:1a:30:
         9c:e8:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:01:31 2025 by rpki-client