Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
File:                     mwpFcttA2K06pRQevZHpAo51NjE.mft (raw, json)
Hash identifier:          /R/U7Ec8WrQrS8y7nW4yaK4eBugEx8pPpqQm3bGF54c=
Subject key identifier:   0B:5C:30:4D:F6:E2:36:C5:64:0F:6A:27:77:7E:4F:68:A1:EA:FC:50
Authority key identifier: 9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
Certificate issuer:       /CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Certificate serial:       01974C698B7085A3E5B4E5782525EE1606F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
Manifest number:          0704
Signing time:             Sat 07 Jun 2025 22:01:14 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:14 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:14 +0000
Files and hashes:         1: LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa (hash: 0hquK8SkvqQbNfKEbYjZG0icP/g4QwK+sH8IO5xeaXI=)
                          2: mwpFcttA2K06pRQevZHpAo51NjE.crl (hash: hdtS5Yof7P5aA8JR20u1/2PI1+CoP0xjWn8drNkZly8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:8b:70:85:a3:e5:b4:e5:78:25:25:ee:16:06:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
        Validity
            Not Before: Jun  7 22:01:14 2025 GMT
            Not After : Jun  8 22:01:14 2025 GMT
        Subject: CN=0b5c304df6e236c5640f6a27777e4f68a1eafc50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:40:51:a9:66:3e:f2:6b:54:e8:92:dd:5d:
                    a7:89:d9:e6:3f:fa:cf:d3:2d:c1:69:8d:e8:f2:46:
                    1f:13:bd:34:83:ed:ec:ce:5b:3f:a7:b8:04:b3:a1:
                    8d:79:4d:89:fd:7b:8f:54:6f:1b:6c:65:50:79:13:
                    d5:0d:1d:cf:55:61:56:63:95:89:15:2e:04:38:a1:
                    6d:b3:c9:d7:25:fb:b5:82:cb:14:56:3e:e5:f5:12:
                    db:97:0c:97:65:28:c1:20:59:3f:bd:7b:af:c3:8e:
                    2d:84:95:90:58:90:6e:10:a1:f8:7a:9c:21:4a:0a:
                    e0:a7:01:fc:0e:94:20:8f:0c:32:83:0b:9a:78:59:
                    04:a1:68:77:d8:76:85:e7:00:77:81:68:ee:07:67:
                    c9:1a:f7:e1:a6:7d:2e:c4:5b:8c:ba:3e:f6:f9:7d:
                    94:b6:e2:08:e3:7f:74:e5:2e:4e:a3:ad:cb:06:fb:
                    4a:57:8f:3e:08:86:a7:97:4b:7f:7f:26:f6:bd:01:
                    8f:64:a7:15:62:1c:60:f2:96:0d:f2:65:80:69:d9:
                    cd:f0:eb:54:c3:04:0b:59:fd:b3:d0:7c:da:42:6a:
                    d0:f6:b9:04:d2:3b:aa:56:cf:b7:55:62:da:f8:2f:
                    67:e0:17:59:ba:6d:37:e1:d8:40:e2:2d:3f:9a:73:
                    8e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5C:30:4D:F6:E2:36:C5:64:0F:6A:27:77:7E:4F:68:A1:EA:FC:50
            X509v3 Authority Key Identifier:
                keyid:9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:bd:2b:00:de:1a:b5:17:42:90:bb:85:2c:66:57:13:9a:e8:
         b5:f4:e3:4d:27:5d:d4:02:c4:d5:61:0b:10:88:9f:d7:78:cc:
         f8:89:31:c9:e2:55:41:16:09:e8:3e:f7:5c:bc:fe:e7:ff:d2:
         a7:10:7b:48:9d:f1:cc:91:ce:9d:79:9c:e2:01:93:eb:d5:c0:
         98:72:78:31:d8:00:fa:b9:c3:24:4d:59:8b:cb:8e:1d:8b:f5:
         18:ef:b2:e1:5f:81:28:06:de:cc:88:18:60:de:24:6c:03:2b:
         ec:71:2c:6c:31:52:f4:0b:37:e8:3d:e8:5b:7a:a5:e6:63:fe:
         c9:6d:d7:fd:75:3a:2e:ee:57:b1:69:cf:0e:c1:cf:13:8f:ad:
         36:a0:c1:19:88:71:3e:e3:53:c6:3a:a2:d8:51:70:be:87:18:
         df:2b:80:a9:b1:1d:9c:fb:4b:c4:f7:10:35:68:2a:e4:44:18:
         e7:d9:30:da:73:e4:96:54:56:87:c7:f1:df:71:60:37:59:cf:
         87:70:b9:70:5b:95:1e:25:4d:7c:26:4b:fd:9e:20:ff:bd:ca:
         63:3b:a1:86:5c:ad:11:e6:05:a1:10:ee:08:1d:9a:93:ac:da:
         d7:ce:d2:a5:5c:46:8f:3d:97:9e:ad:5d:fe:61:9f:a8:74:e8:
         c9:64:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:57 2025 by rpki-client