Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File:                     wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier:          +vKAb1q7rhxv/c6r7c8vmuEAszcZCOkFTWMCWMkgY1Y=
Subject key identifier:   15:B3:19:C7:45:6A:3C:B9:40:79:11:E6:CE:98:16:05:D1:A6:7A:A0
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer:       /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial:       0197500ED25C09C2F700DAEA218D1882AA9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number:          0A17
Signing time:             Sun 08 Jun 2025 15:00:37 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:37 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:37 +0000
Files and hashes:         1: 5CKcJ3WWdLnxNxA8zS9MSqemGeU.roa (hash: F1W/LYRU/swbDsn7VsjuOlThJoPhjHiHTuqYQgQV4vQ=)
                          2: FZ6_BK0_bbVrJHhN6MfGrD_zBBU.roa (hash: pGJzWgBtcqu+YLCletr5FYBbo/hFDdnErtqiP7qljbk=)
                          3: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=)
                          4: WalhO7K1hj39eQFX6Fsg65lsYZc.roa (hash: TPuLRQcIjhduyALRmIncbUOw8bhZHm8cVLFCDxTFRgw=)
                          5: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=)
                          6: pIvBgTa21ZIrbNAe93h6ywfLfqU.roa (hash: 4TvmPBfwBLS029TBaeYbv9kyWoozw1GEP3VDLEg1dFk=)
                          7: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=)
                          8: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=)
                          9: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: WhJQFAOBZ+0WVkIazgEZqmwqlZzFPNobcB2hmOxIXDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:d2:5c:09:c2:f7:00:da:ea:21:8d:18:82:aa:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
        Validity
            Not Before: Jun  8 15:00:37 2025 GMT
            Not After : Jun  9 15:00:37 2025 GMT
        Subject: CN=15b319c7456a3cb9407911e6ce981605d1a67aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:91:33:94:6b:57:7f:a5:c4:e3:0d:99:2b:
                    ba:48:46:4c:39:b3:58:99:a7:77:26:67:34:03:6f:
                    45:80:29:8f:2b:88:62:d7:9e:4f:0e:22:46:2a:1c:
                    c5:2d:00:25:1b:ca:38:27:7f:34:9b:c9:e1:7e:57:
                    cf:c8:fd:dc:06:fd:84:78:58:ff:b7:34:e2:0c:8a:
                    c8:3d:bf:e3:9f:92:34:7a:52:16:66:5d:71:ce:63:
                    ae:96:12:67:92:0a:bb:63:d5:92:2b:65:fa:19:48:
                    8f:2c:d5:10:46:a4:a0:41:23:8c:19:e2:62:18:d9:
                    a8:20:d4:96:fd:b5:48:50:78:65:1c:45:5f:c7:4c:
                    94:46:ab:0f:50:2c:e9:b8:bf:02:58:ca:dc:f9:e0:
                    05:7c:bf:50:17:61:2e:65:33:9c:9f:ba:ea:e2:7b:
                    b6:00:13:78:65:a9:84:74:f4:75:bc:3b:77:c2:a3:
                    4a:94:4c:15:cf:3f:83:43:fc:12:4e:3a:b5:ac:de:
                    68:af:1e:0b:6f:26:99:c4:a5:72:70:59:64:26:28:
                    3b:6b:67:d7:e9:ed:c8:ed:6a:7a:4f:01:80:56:db:
                    b1:c7:e3:e3:18:87:1f:c0:2c:ee:d2:4e:8d:dc:4d:
                    45:1d:6d:c3:71:e0:ac:a9:3f:33:6a:92:35:01:1d:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B3:19:C7:45:6A:3C:B9:40:79:11:E6:CE:98:16:05:D1:A6:7A:A0
            X509v3 Authority Key Identifier:
                keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:84:03:bc:1e:fc:32:51:3b:74:e9:1e:66:6f:aa:1f:e1:83:
         a1:b1:55:9c:63:a9:9e:10:89:44:b2:24:34:69:29:bd:7f:3a:
         3f:1f:19:47:af:d8:09:f6:be:27:c7:68:64:12:34:51:ac:ba:
         77:35:26:3b:8a:8e:21:bd:06:5f:00:ac:8a:b9:43:85:56:16:
         bc:af:1b:02:ef:53:93:5a:94:ee:a7:d7:94:28:bc:0a:7c:4a:
         a5:e0:a4:e1:80:a2:03:e1:13:75:16:8f:35:e2:19:b0:a0:31:
         7b:5d:00:19:2f:91:27:3c:e1:e1:ed:90:3f:56:fb:1b:50:c6:
         d2:d2:f3:d3:a1:b1:ae:12:f6:ea:f9:12:75:96:f8:c3:83:ff:
         71:38:e6:8c:a1:d7:b4:13:5e:99:ea:41:0b:95:9e:92:04:4e:
         ee:0a:9b:30:32:c4:6b:11:39:f0:df:86:43:35:97:d7:0e:c8:
         b1:a4:73:60:ac:80:ba:21:76:a5:cc:8f:8e:75:d9:e3:ad:22:
         3d:d8:bf:f6:cb:fa:e7:01:89:8c:36:95:e9:cc:af:6c:e1:88:
         2d:06:a0:b7:14:58:59:d0:f6:bf:e5:da:a3:70:a7:5c:fc:d2:
         9a:ed:d0:2f:b9:aa:19:0c:72:15:8e:2d:68:3e:f2:ba:95:22:
         e0:65:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:36:03 2025 by rpki-client