Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File:                     wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier:          7V+y492BN1BikbyYp0oxv+vpEfaQ68gZtJ3b8XRpxSI=
Subject key identifier:   8C:ED:74:B1:7F:BF:4E:BB:B2:5C:B6:10:EB:F7:D4:5E:A1:52:96:30
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer:       /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial:       019747426A685B7E905B446994F009A89190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number:          1393
Signing time:             Fri 06 Jun 2025 22:00:24 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:24 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:24 +0000
Files and hashes:         1: gZ9Ojc4UNWeqqwMBpp7FrP10wiI.roa (hash: LB2ZQVKXYnVtOl1GjrynJ1NY20hqhQVioGRUarT0MgI=)
                          2: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: IKQE2kIF0b2sXAzVlreZu26G1LTIc1evteM0d6R+srA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:6a:68:5b:7e:90:5b:44:69:94:f0:09:a8:91:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
        Validity
            Not Before: Jun  6 22:00:24 2025 GMT
            Not After : Jun  7 22:00:24 2025 GMT
        Subject: CN=8ced74b17fbf4ebbb25cb610ebf7d45ea1529630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:b3:d0:e1:c7:d6:c0:83:9b:05:7d:32:dd:
                    09:0d:3b:cc:7c:36:37:7b:41:36:7a:5b:86:34:65:
                    e6:94:7e:46:16:13:f6:b7:3b:e4:3a:3a:11:d9:7b:
                    7b:04:6f:8f:69:d0:66:a3:a1:da:78:f0:a2:44:05:
                    0d:7b:7d:90:27:b3:00:aa:62:ac:7b:a3:7f:55:8f:
                    12:e0:4b:c1:89:63:25:6b:22:d3:b9:97:7b:48:8f:
                    18:3a:ed:10:2a:fd:a4:1c:f3:3c:20:29:69:8e:a5:
                    9d:b3:ee:80:0c:20:fb:83:ff:e2:39:16:1e:95:63:
                    b5:91:06:06:b1:7f:e4:3b:5c:d5:9c:36:7c:13:53:
                    3d:92:22:7b:21:72:78:cf:04:05:61:16:f9:13:c3:
                    af:6d:43:29:86:ef:c4:a4:a4:e6:0d:f3:ec:8d:4f:
                    dd:50:cb:e2:f8:65:d8:3d:74:b3:7a:15:49:ca:e4:
                    ff:de:b9:e9:e1:74:79:a6:00:77:1d:3d:29:30:5b:
                    94:da:30:1d:cf:07:e1:ae:c1:73:84:34:c6:6e:c4:
                    62:2f:45:de:2c:06:11:4b:99:35:95:fe:fe:6c:ff:
                    b2:76:f4:28:2b:21:e3:cf:a3:93:29:c9:3e:cf:8d:
                    fd:ae:53:3e:6b:64:20:f9:62:a6:4b:75:9c:f7:4f:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:74:B1:7F:BF:4E:BB:B2:5C:B6:10:EB:F7:D4:5E:A1:52:96:30
            X509v3 Authority Key Identifier:
                keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1a:48:88:14:5d:1b:e7:90:1e:e9:c8:7e:ff:9c:07:63:eb:
         bb:53:fb:4e:b1:7b:6b:87:3f:87:5c:69:b4:32:cf:7b:87:5e:
         68:c1:f2:81:b6:26:1f:56:6d:2c:fd:d0:73:74:f5:ea:c4:9a:
         f9:a1:06:39:e5:b7:ed:df:31:3d:89:aa:c7:1b:30:f4:28:6d:
         9e:e8:2f:51:ca:6b:94:a6:dc:5d:fe:00:a7:7d:45:6c:86:ce:
         2c:96:d0:85:c6:fa:5a:e3:0b:76:b2:e1:1d:16:6c:ec:9f:85:
         99:d3:d8:e4:84:0e:98:cd:6d:a5:e5:21:c8:da:53:84:1d:bf:
         13:40:55:46:4a:d7:12:02:8a:e8:78:b8:03:b2:11:5c:26:4a:
         d0:bf:be:80:9d:3e:b0:03:b8:e9:88:67:3b:2c:a0:64:05:9b:
         60:a8:68:98:76:76:fc:93:1e:e4:df:f2:94:e4:eb:fc:97:8c:
         bc:a6:3a:b5:f0:ce:16:81:fa:5f:0e:10:cc:f6:c7:ba:9e:8a:
         27:95:55:f2:80:ec:5b:09:55:38:57:69:be:5b:2c:96:f4:3c:
         d1:a3:db:ab:ba:0d:0e:f4:bc:0f:63:3f:a6:d4:7e:87:fa:96:
         5b:b5:99:bc:1c:ce:e5:05:87:a5:a1:b8:9a:94:4a:0d:0f:97:
         80:41:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:43 2025 by rpki-client