Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File:                     fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier:          omrIRflZ7a5DLtF8JYb/5lw/Fmd4rn43XhrJ+2ec6Os=
Subject key identifier:   F3:94:24:C3:45:D6:8C:78:86:00:53:28:DC:78:5D:89:01:54:51:56
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer:       /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial:       01977D557526D84BE7FCD15AC75EBBB4FFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number:          0505
Signing time:             Tue 17 Jun 2025 10:00:41 +0000
Manifest this update:     Tue 17 Jun 2025 10:00:41 +0000
Manifest next update:     Wed 18 Jun 2025 10:00:41 +0000
Files and hashes:         1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: KpVMBkUIGb5tJY3x0tRtTlvpxe48y0rM8qRiya3I9DA=)
                          2: mDBp1oBkdS9R1kWQaeI8ZMPDoX8.roa (hash: A++zVXL1KytgjPo0U8Uvn5ms+5UtCdFa04StDMBXv54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:55:75:26:d8:4b:e7:fc:d1:5a:c7:5e:bb:b4:ff:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
        Validity
            Not Before: Jun 17 10:00:41 2025 GMT
            Not After : Jun 18 10:00:41 2025 GMT
        Subject: CN=f39424c345d68c7886005328dc785d8901545156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:c2:97:74:e5:4d:61:f3:f3:b5:aa:59:56:
                    63:56:a5:a3:31:5c:2d:53:24:4d:be:aa:f0:65:d9:
                    40:85:9c:8b:81:f2:3d:94:9b:82:c9:10:65:99:cd:
                    e6:f4:74:bb:92:1e:37:fa:a3:52:e8:5d:f5:f3:a7:
                    d6:28:84:10:a1:a9:b9:09:7c:ac:db:ca:a2:22:f1:
                    02:7d:ab:af:4a:60:c6:5f:84:64:b6:97:7f:eb:1c:
                    7a:cc:40:8c:06:a2:0a:0c:fa:12:0a:aa:e6:9b:4b:
                    30:40:d5:57:5b:8c:51:4f:f3:9e:81:b8:4b:ba:ae:
                    2f:3a:44:aa:9a:de:4c:17:02:3a:ea:06:62:69:e1:
                    ee:dc:6e:56:75:23:80:c7:05:42:79:c6:79:05:cb:
                    97:55:7f:76:db:7d:cd:c8:be:b4:b1:fb:c6:bb:b3:
                    54:1a:96:56:c2:94:c6:56:a1:92:5b:d3:be:39:ef:
                    be:c5:e2:0a:f9:2d:eb:98:28:f3:13:0e:17:a4:c2:
                    e0:8f:6c:7b:08:27:0c:9e:18:d5:51:77:e2:e4:a4:
                    94:f6:e8:86:87:df:5f:41:5d:44:11:c7:02:02:ec:
                    16:59:2a:cf:7e:8c:22:52:18:51:89:2f:28:01:c1:
                    58:dc:25:66:f0:3c:f9:2e:2d:57:82:5b:f2:80:87:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:94:24:C3:45:D6:8C:78:86:00:53:28:DC:78:5D:89:01:54:51:56
            X509v3 Authority Key Identifier:
                keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2d:71:99:a6:d0:ea:6c:f3:75:48:16:b7:c1:ee:81:3a:53:
         c1:54:3d:8c:cf:c1:cd:f2:59:36:05:90:21:dc:f7:3e:87:45:
         e2:1f:a7:77:85:29:63:c3:84:ba:b6:d3:79:c6:35:5c:32:b8:
         69:43:28:22:02:28:b5:7e:bd:e1:65:73:bc:8e:3a:d1:8b:5c:
         37:ac:d4:f6:d0:73:0b:29:a1:60:7a:59:6b:cc:b3:ba:47:eb:
         e8:7e:d7:9d:eb:14:39:3b:1c:22:78:cf:c3:88:f6:50:56:8a:
         87:8f:88:bd:58:25:c1:87:d9:30:be:a2:07:eb:da:39:21:33:
         80:af:1d:98:48:25:25:09:93:f1:76:31:55:35:b1:5c:63:79:
         0b:52:f1:6a:53:00:ac:d5:c8:4a:50:83:e8:11:2d:b0:e3:80:
         19:42:1e:65:d8:0a:8c:75:48:ac:3e:94:e7:b3:f1:a6:30:f4:
         35:5e:b2:bc:65:e4:d5:49:ad:b1:b5:22:f9:99:cb:9d:c2:e6:
         2c:39:6c:b7:64:22:ae:82:d1:62:00:75:41:61:5b:c2:2d:79:
         cd:a4:c9:21:92:f3:1c:81:38:ef:84:20:6e:21:28:94:90:d7:
         00:59:74:7f:35:75:0c:eb:b7:c7:72:0d:ad:71:e0:8d:02:87:
         30:26:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:13:13 2025 by rpki-client