Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File:                     wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier:          joAJcVftf7U4+OEUSMgL+kqW8OmYWmkcsXTWjw1l2mc=
Subject key identifier:   71:D5:A6:64:5D:50:9B:B8:3F:2A:F4:5D:A5:C0:D0:3E:C8:40:8D:9D
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer:       /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial:       01976A05E3611695F5C40352EF2192E2B805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number:          0EC9
Signing time:             Fri 13 Jun 2025 16:01:00 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:00 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:00 +0000
Files and hashes:         1: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
                          2: llJ6liNS1pumqjPV_Jv49wbPcyA.roa (hash: 8yXr4/k0VmsJ3fSG9IZQB1mAPItrWTFszMy9LsJzJdk=)
                          3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
                          4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: mWp/tay/QQIVJTbzApMOc4X/eHevfrqBwOX1OyqMu7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:e3:61:16:95:f5:c4:03:52:ef:21:92:e2:b8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
        Validity
            Not Before: Jun 13 16:01:00 2025 GMT
            Not After : Jun 14 16:01:00 2025 GMT
        Subject: CN=71d5a6645d509bb83f2af45da5c0d03ec8408d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:36:d5:fc:ec:2c:4a:dd:bd:62:2a:95:d1:
                    26:54:32:1a:b1:c2:a8:da:a1:00:0c:ed:55:3f:8a:
                    6b:13:c5:10:d6:8d:c3:29:71:22:c0:1b:d5:d7:c5:
                    44:01:3b:ac:18:16:e9:c4:a9:a1:70:70:93:ab:73:
                    15:a9:42:99:60:8d:a9:77:d6:f0:f4:5c:b1:c0:14:
                    ea:cb:98:71:15:46:e1:7a:89:44:e7:4b:e5:89:21:
                    4c:15:ab:58:41:b3:f8:e1:66:d4:6e:89:ba:cc:2b:
                    99:e8:eb:f4:e3:c4:8c:e6:39:b6:76:04:06:8d:5d:
                    18:17:33:fe:ea:fa:e9:15:36:33:d6:1b:48:44:0e:
                    bf:18:ab:eb:ab:84:d6:14:26:6c:1b:74:0a:23:3f:
                    60:0d:63:40:66:ec:7e:4e:81:7e:50:68:05:31:bc:
                    3f:d9:59:b4:4b:bd:36:49:50:1e:bc:c8:8f:11:8d:
                    37:be:a8:71:bd:85:75:58:6c:fd:0d:fb:8f:f3:27:
                    62:95:7b:59:15:0b:64:f2:c4:f4:2f:72:d2:3f:53:
                    63:2e:ea:f7:b1:fa:0b:70:6e:30:ae:1d:d6:a0:9a:
                    90:e6:8d:13:4c:e5:b8:77:80:bb:bc:a5:d4:69:8c:
                    eb:3d:b0:87:4a:00:76:a1:c2:21:16:be:66:77:24:
                    f4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D5:A6:64:5D:50:9B:B8:3F:2A:F4:5D:A5:C0:D0:3E:C8:40:8D:9D
            X509v3 Authority Key Identifier:
                keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9f:cd:f8:33:d9:8a:ba:dc:1c:c5:4c:16:aa:09:39:99:1a:
         ae:71:f7:6a:8e:cf:20:54:88:e0:e6:0c:c3:1c:8f:59:85:90:
         d2:84:bc:5c:22:37:c3:36:f0:1d:d8:41:4e:e2:86:d6:7e:33:
         9d:56:56:b9:fb:23:be:53:f5:55:fa:4b:9f:c0:24:68:ee:c9:
         53:d7:85:53:16:34:cc:1f:51:4b:bc:5c:85:32:09:0f:fa:60:
         0c:28:5f:db:1e:b6:dc:d3:d1:e3:a3:78:78:8a:17:37:45:c6:
         f0:14:c6:42:3c:e0:4f:68:39:94:8a:66:9d:13:ee:b3:d4:51:
         02:cf:f3:de:9a:7c:52:72:8b:d6:08:21:e5:13:06:1f:34:c8:
         cd:56:43:9d:6c:a9:9e:81:7e:ca:e7:0d:a1:95:13:87:a5:4e:
         60:38:8e:73:c1:2a:44:58:ad:59:a8:c4:81:38:db:cf:18:e9:
         2d:81:2a:cd:1b:07:1d:96:fa:62:24:f6:ee:47:47:f9:84:04:
         0f:5f:2f:7a:5a:39:cb:39:62:46:bd:6c:28:7a:23:f6:9b:cf:
         62:3e:c1:0d:8e:e0:81:f2:29:69:15:fd:90:7d:cb:8b:02:f2:
         2a:e3:01:8e:58:49:1a:33:9c:c5:7f:86:a9:e5:c7:f5:2e:d6:
         d9:c0:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:41 2025 by rpki-client