Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          xdqWIY4KQZ6NnHINpkAbo+HqEhnFZHWdmKDvuw3z4fE=
Subject key identifier:   2E:F8:66:5F:D1:D2:01:8B:38:B1:DA:C4:17:82:A8:5D:4D:85:0D:F3
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       019751219941D01E39ECEA09206280FB61D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          1581
Signing time:             Sun 08 Jun 2025 20:00:45 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:45 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:45 +0000
Files and hashes:         1: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: oao2Tv/5T8GJMGDipj4WtK3+3loMLUS7BNaD9SmrqtY=)
                          2: xBCmHDQdfHeyTzhklHfbHAtEjac.roa (hash: v4hxG9/eDV05pt8qFpOVheOZJs0ehEmajsKsd5Fgmbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:99:41:d0:1e:39:ec:ea:09:20:62:80:fb:61:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: Jun  8 20:00:45 2025 GMT
            Not After : Jun  9 20:00:45 2025 GMT
        Subject: CN=2ef8665fd1d2018b38b1dac41782a85d4d850df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:f1:11:f5:56:a1:ce:68:26:1f:e6:d7:c4:
                    d1:31:dc:9d:94:c2:b7:a1:7f:85:97:8a:6c:5e:f9:
                    27:0a:b4:32:fa:25:72:33:1c:a1:89:2f:7a:38:a3:
                    00:87:fe:5a:c3:1d:28:46:d2:f0:79:20:2c:b3:e5:
                    6c:4c:34:3f:e5:91:87:d2:86:78:d7:83:67:77:86:
                    18:b8:38:36:c9:d8:3b:7a:67:97:8c:c7:0d:67:f0:
                    c3:b9:6a:16:24:de:d2:4e:2e:32:59:b7:00:8f:1a:
                    82:f8:f7:ad:e0:17:69:98:f0:0d:c6:3c:60:b2:64:
                    6e:f3:58:89:b2:b7:c9:ab:ed:f8:18:42:46:47:64:
                    21:54:71:6b:14:ff:d6:70:ee:4a:d2:72:b6:e6:33:
                    64:a8:b6:cf:e2:30:18:67:92:42:de:52:a2:6c:fe:
                    56:60:40:16:8f:c7:49:16:13:3a:9c:78:a6:74:14:
                    a1:e7:60:fb:82:01:8e:cb:6b:c6:c2:e7:b6:51:13:
                    2e:b9:56:c9:20:0f:7f:11:e3:87:6f:fa:44:a1:d9:
                    75:fd:95:36:f0:e2:5d:b0:f7:e7:55:4d:97:ec:12:
                    7b:ae:15:dd:48:c6:1e:5e:4c:fc:20:e5:83:8f:5b:
                    22:0c:64:3c:12:70:1c:de:df:d1:c0:9d:ff:83:8a:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F8:66:5F:D1:D2:01:8B:38:B1:DA:C4:17:82:A8:5D:4D:85:0D:F3
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:97:60:f4:a7:76:32:59:c0:9e:58:dc:25:22:82:11:13:f8:
         07:83:23:85:24:bc:ac:2c:97:bf:d8:ab:b5:d3:91:6f:cb:21:
         32:21:65:19:cf:5d:76:16:2e:2b:0c:56:77:bb:6c:87:40:e3:
         4d:4a:9a:31:fb:c2:69:be:5d:70:a8:90:a9:3a:da:b9:93:64:
         4a:32:7e:2a:3c:8e:1a:94:fc:3c:df:2a:f4:ee:b0:ec:35:7e:
         0d:10:fa:6e:9d:e5:55:4e:24:a0:b4:e8:c7:dc:96:2e:97:c9:
         c9:37:c4:c6:94:1a:72:38:9a:ae:66:88:e0:27:d5:ed:6c:f9:
         45:13:b3:6d:bb:44:0e:12:81:f1:6c:cd:7e:dc:7d:2d:24:1f:
         5e:2d:26:d7:9e:9d:86:4b:68:42:0b:fc:3f:60:c1:9b:9d:c0:
         8a:2e:21:0e:ac:18:77:0f:bc:f5:d0:1c:d7:95:d0:02:df:d3:
         c7:8c:06:c9:58:6a:fe:11:cc:d2:75:03:55:36:4e:30:82:da:
         27:7a:07:90:85:ef:15:50:26:f2:06:7c:1c:8f:fe:e8:39:6d:
         06:25:a5:1f:0f:ed:b7:a2:22:7a:79:42:fa:0f:8c:13:5f:3c:
         d2:e1:c3:df:f2:ea:a4:e5:21:d0:7b:65:88:95:35:2f:fa:9a:
         7f:b4:83:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:35:18 2025 by rpki-client