Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File:                     1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier:          Tf4B4UW7+oxqNKmLnKpBtmFwBjcDdgZ8C4f2nOJFezs=
Subject key identifier:   CC:26:7B:CD:AD:99:F1:07:54:C2:D4:E2:DF:27:D9:E9:EE:C3:C6:0D
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer:       /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial:       019749D5EF46D17C1D693FC493B1D27A8C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number:          1598
Signing time:             Sat 07 Jun 2025 10:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:46 +0000
Files and hashes:         1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
                          2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: JAx0dWJVYaSDqq7QKuRB/KHrniklecZSlMweTle1nog=)
                          3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
                          4: Mj33PSIVDFEMWJHgu59FVh30wBE.roa (hash: LnMHKUsXF7KzdF90MCgfrbR5YbM5UFpQOfqwvOjdFkc=)
                          5: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
                          6: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
                          7: y219uopaZvXSdvuyVN0z8hSAj3g.roa (hash: yOxEDrbHVzQ3D4oMaRFodYyQEbnpgrKDN1hHuSZgDh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:ef:46:d1:7c:1d:69:3f:c4:93:b1:d2:7a:8c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
        Validity
            Not Before: Jun  7 10:00:46 2025 GMT
            Not After : Jun  8 10:00:46 2025 GMT
        Subject: CN=cc267bcdad99f10754c2d4e2df27d9e9eec3c60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:95:2a:1c:6c:b1:c2:7b:34:4d:91:03:00:
                    d8:c6:6d:13:55:b6:6e:81:4d:7d:70:39:76:f3:7b:
                    5a:73:a0:08:c2:ae:d1:77:31:b2:75:cb:0c:fc:c1:
                    f9:99:cc:19:0c:32:14:52:f6:19:dd:36:d0:0b:ac:
                    e8:a1:4d:ff:e8:cc:da:c2:b0:98:b6:34:f1:7d:d1:
                    c1:24:b1:8c:54:60:f0:73:6e:5f:db:11:c4:5f:14:
                    88:84:b7:d1:9d:48:b4:cf:42:3b:0c:72:4c:a4:4a:
                    8e:34:97:cf:a0:d3:af:a8:20:1f:a2:28:1f:04:ec:
                    16:57:28:80:4f:58:e1:86:4a:ee:83:5c:67:32:c0:
                    61:9a:90:31:1b:b2:46:8e:f1:61:23:8a:d5:ef:5a:
                    ca:91:92:3a:b3:45:1e:a6:1e:09:15:e1:72:9b:ee:
                    e9:f0:45:95:d5:0d:bc:22:f8:53:6c:fe:6c:0a:e0:
                    bc:a2:25:12:73:2e:0b:30:e2:99:1a:15:06:e3:82:
                    6b:77:33:20:77:bf:9f:59:7d:c2:8b:dc:cb:c4:1c:
                    e0:d8:29:fb:b4:20:c1:7d:22:9f:b6:05:46:d9:8b:
                    e1:a8:57:43:a1:e2:54:e3:0a:7f:99:26:e1:9c:a3:
                    eb:a6:28:80:80:bf:35:d3:e0:c0:5f:a8:5e:bc:ef:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:26:7B:CD:AD:99:F1:07:54:C2:D4:E2:DF:27:D9:E9:EE:C3:C6:0D
            X509v3 Authority Key Identifier:
                keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:9b:f8:8f:db:3b:17:eb:0a:ae:3c:3f:4c:9e:44:a7:b6:
         7e:b0:7e:97:51:5f:3d:d7:70:56:64:ba:e0:55:73:8e:1d:1a:
         ea:0c:41:14:58:31:43:ac:1b:6b:24:12:ed:d7:63:3d:1d:ea:
         6c:92:97:e5:08:65:07:c6:0c:82:e1:22:7e:fd:71:bb:27:38:
         8d:13:b8:2a:3d:b9:84:01:bf:0b:c9:f1:00:ea:32:fc:b1:96:
         82:9f:01:9a:aa:b3:a8:97:37:e0:ca:bf:8c:ee:f9:69:f2:5f:
         3f:a0:c7:dc:09:ee:f7:27:f0:05:da:c5:4c:09:16:e4:77:cb:
         7e:c4:a9:13:34:27:06:75:2b:76:42:4b:76:1d:2f:df:07:a3:
         a7:02:e7:9e:6d:aa:b2:e8:16:f5:c7:cf:47:1c:10:ae:0e:8c:
         37:68:b1:bb:2f:dd:bb:4a:95:34:ee:81:de:0c:47:8b:0f:69:
         f5:00:ce:2b:37:83:ee:69:b3:18:4d:29:97:40:82:1e:ac:1d:
         af:09:ee:45:af:3c:4a:8b:57:a6:11:36:ba:7c:21:38:67:8f:
         4a:c2:39:a9:33:e9:7a:45:11:cc:3c:a8:0c:cd:7f:e1:82:f1:
         4a:2f:42:d9:2c:77:c8:ee:af:b2:dd:56:94:6c:b6:e0:a1:09:
         3c:4f:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:14 2025 by rpki-client