Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File:                     wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier:          TG5//x3bjWkiOu/JrA2qGbJcs8YmYRPmRXzif9W4TMk=
Subject key identifier:   00:90:22:FB:65:6D:52:5E:9B:8A:27:77:FB:AF:0C:DB:25:4A:36:B9
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer:       /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial:       019770E3C3D770D280BEC9C7493EDBDF9652
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number:          0C73
Signing time:             Sun 15 Jun 2025 00:01:04 +0000
Manifest this update:     Sun 15 Jun 2025 00:01:04 +0000
Manifest next update:     Mon 16 Jun 2025 00:01:04 +0000
Files and hashes:         1: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (hash: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=)
                          2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: +P6Pe49ne6Szl9GYKlFEF6QTI/y6WNvOuUoNAp+DJiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:c3:d7:70:d2:80:be:c9:c7:49:3e:db:df:96:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
        Validity
            Not Before: Jun 15 00:01:04 2025 GMT
            Not After : Jun 16 00:01:04 2025 GMT
        Subject: CN=009022fb656d525e9b8a2777fbaf0cdb254a36b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:f1:26:93:27:22:89:a1:43:62:21:74:09:
                    6c:2b:0a:b0:d3:66:2f:a7:b4:e6:ea:12:6a:3b:47:
                    5d:23:fc:b1:05:5f:3f:8b:9d:2f:7b:9f:7f:ed:f1:
                    52:e9:5b:bb:53:d5:6a:b0:0c:ff:7c:40:48:0b:a1:
                    be:02:36:dd:e3:b9:8a:d8:9d:ef:2c:2e:52:48:c4:
                    24:dc:8f:8b:94:c3:87:e2:b3:da:58:35:e1:60:b5:
                    05:e3:b1:ba:1f:b2:b3:d8:02:76:4b:36:76:d0:9c:
                    38:22:ca:8b:76:08:91:9c:41:c9:77:0b:80:ac:3b:
                    fd:5d:09:61:7f:74:6f:a3:e3:c5:af:68:c7:bc:b7:
                    af:dd:38:eb:b1:96:ea:48:48:a4:1b:73:c9:aa:02:
                    dc:24:e9:66:41:65:79:42:58:5d:80:2e:b1:98:15:
                    17:7d:96:8e:5d:99:91:d9:22:97:77:1d:34:00:e5:
                    cd:f7:76:15:2f:57:47:2f:1c:b3:f4:5d:d6:36:30:
                    94:5c:3c:04:07:60:fb:97:d9:af:9b:3f:cc:75:0e:
                    d6:32:b1:92:6a:dc:3f:46:95:15:ea:42:91:1f:73:
                    ab:3e:d8:00:e7:11:02:35:46:e1:fd:81:e8:64:e1:
                    08:d1:f8:0b:c9:88:14:30:c2:08:60:18:26:ff:4a:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:90:22:FB:65:6D:52:5E:9B:8A:27:77:FB:AF:0C:DB:25:4A:36:B9
            X509v3 Authority Key Identifier:
                keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:b7:ce:c9:3d:51:88:e5:b2:7d:c1:1c:4f:ec:c6:0b:67:
         fd:3d:19:ae:ec:c3:75:45:2e:a5:9a:18:7b:16:2c:dc:04:56:
         d0:7e:3c:55:62:34:5c:52:63:57:fb:b9:3f:61:83:13:f4:e1:
         11:84:ae:5d:6f:4c:56:32:67:38:ea:8b:fc:82:95:85:b9:bb:
         7e:0e:c0:35:58:8a:da:a2:7d:4d:19:d5:18:56:0a:95:e9:f8:
         3d:48:4e:39:64:49:a8:a7:bf:05:32:9a:2e:c9:13:76:14:6f:
         68:5e:64:6a:a3:a6:35:00:20:3a:91:01:96:5f:b7:6c:8e:52:
         33:cb:51:a0:f8:ae:ce:db:cb:cb:98:73:5e:7c:c3:6f:f3:51:
         71:88:8c:f3:34:09:19:ad:85:91:8e:68:ce:ea:1c:86:65:44:
         38:2b:85:5c:e5:30:99:21:e5:5e:fa:ea:81:ce:6b:ac:51:2e:
         a0:49:3f:05:03:65:16:68:56:38:6c:62:91:03:6b:c5:a5:48:
         86:36:53:b4:05:cc:8a:d3:93:50:17:c9:7d:a7:02:42:52:f6:
         ab:1d:bf:43:80:b9:be:23:dd:38:f5:57:29:76:b4:27:6f:db:
         71:53:82:ce:a6:08:51:c0:8e:02:94:71:df:cd:82:55:c2:44:
         c4:b5:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:59 2025 by rpki-client