Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
File:                     Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft (raw, json)
Hash identifier:          XmWHyVOEKpeI0hCCCOBdergzuATIIxX6dgdKQxno5Ew=
Subject key identifier:   58:45:D1:48:3D:B4:03:01:50:42:E4:44:5D:CE:24:36:73:D9:7D:10
Authority key identifier: 5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41
Certificate issuer:       /CN=5b06f746e549ec9763e07cd766fea14e2866d341
Certificate serial:       01976F62E50973294F4BE320DF301A90090C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
Manifest number:          01DE
Signing time:             Sat 14 Jun 2025 17:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 17:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 17:00:41 +0000
Files and hashes:         1: Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl (hash: RyLsq5CM0GFuJq1C8+0adnqSTq/90joHRGskB84KwUc=)
                          2: bW1NhmGBTwYgPPg4roDWhoM3_yw.roa (hash: JPmmBhJ0tN9Tg+cz1OMedHqMeYz4nB4Qc7iEbdz/1O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:62:e5:09:73:29:4f:4b:e3:20:df:30:1a:90:09:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b06f746e549ec9763e07cd766fea14e2866d341
        Validity
            Not Before: Jun 14 17:00:41 2025 GMT
            Not After : Jun 15 17:00:41 2025 GMT
        Subject: CN=5845d1483db403015042e4445dce243673d97d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:73:b4:37:ca:d0:a9:cc:27:24:11:1c:a1:
                    cd:99:e1:4d:77:b9:d7:3a:9a:a0:39:58:ef:68:59:
                    e5:66:5f:d3:b4:bc:81:2c:55:03:6f:69:4d:0d:74:
                    5d:af:a4:ea:c0:bd:74:0f:d5:c9:7b:e2:02:71:7b:
                    55:06:2c:f0:61:51:16:7a:ab:ab:3e:ae:d8:22:06:
                    c4:74:ab:46:94:69:48:48:d4:62:7f:f4:20:21:c3:
                    ca:fd:c7:80:4f:6c:c3:50:ce:9d:53:56:bd:55:2b:
                    08:0c:88:01:87:ae:cf:fd:7b:6e:43:19:56:33:c2:
                    f1:34:14:a2:b6:28:18:38:ff:6f:1a:45:92:93:68:
                    05:88:66:b7:61:8b:79:08:84:00:79:7d:48:64:71:
                    f0:d2:d7:0c:34:a0:41:a3:9e:71:d1:5f:10:0a:02:
                    ff:93:9a:f5:ca:34:fb:07:8c:dc:09:d8:20:fb:e0:
                    52:b0:1f:db:e0:8a:9e:70:61:30:25:d9:9c:38:e5:
                    af:38:dc:c2:11:c9:04:39:01:f7:9b:7d:a3:ae:a7:
                    97:a3:e1:ee:c0:19:b9:e8:5b:10:e0:c4:3f:4d:1b:
                    fa:43:d5:af:af:2f:ba:cc:d8:35:f3:31:c3:6b:c4:
                    43:9d:8b:3b:df:cd:0b:b9:b4:36:e8:f6:b8:b3:4b:
                    d7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:45:D1:48:3D:B4:03:01:50:42:E4:44:5D:CE:24:36:73:D9:7D:10
            X509v3 Authority Key Identifier:
                keyid:5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:14:e0:c9:da:23:30:f2:80:a0:00:c8:53:d2:dd:58:4a:ce:
         40:b8:28:21:73:d9:bd:ba:9f:bf:cb:81:3c:d4:4a:29:4f:1b:
         68:8d:30:1b:ee:99:2c:a3:db:d6:03:2f:45:9c:82:89:c4:be:
         83:be:6a:51:4a:16:bd:c5:8d:56:43:06:31:aa:79:79:8a:bf:
         14:27:13:50:a0:ef:8e:fd:a2:d5:a9:c5:7d:51:25:ad:18:a4:
         a7:60:0a:7f:dd:53:e1:75:2d:58:93:0f:6e:70:4f:74:92:7d:
         92:e6:d6:dc:99:90:8f:51:38:14:6d:73:77:cb:60:a9:d0:e3:
         00:c8:ac:fc:7b:cc:3e:04:ae:e4:5e:d3:a5:b5:06:fe:1a:be:
         d7:84:34:30:b4:ae:08:9f:c9:c2:aa:40:55:77:a2:03:62:0b:
         69:1a:db:ae:bc:a2:00:e3:c4:d6:98:68:05:e5:6c:09:1f:5d:
         f5:cc:0a:0d:54:e9:57:d9:e4:13:c1:21:b2:83:15:cf:46:79:
         b5:95:b0:93:ef:ac:0f:a8:1c:35:dd:70:25:b5:9b:0c:b2:8b:
         93:7b:ca:ec:1d:68:90:b6:2e:dd:9a:57:eb:17:25:70:79:95:
         00:96:9f:9c:69:50:31:94:89:48:79:0b:bd:a7:d0:fc:20:94:
         76:88:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:37:09 2025 by rpki-client