Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File:                     WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier:          g4EL8SESzCVwiN5FsLrjeqdPpUoCv7QiLEzOmuZyt9A=
Subject key identifier:   C4:61:B3:F8:81:6A:40:A7:9D:54:C5:A6:31:78:A9:A5:FB:47:1D:53
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer:       /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial:       0197827C5489CC039BB23E1A11BD0253FCD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number:          08B0
Signing time:             Wed 18 Jun 2025 10:01:15 +0000
Manifest this update:     Wed 18 Jun 2025 10:01:15 +0000
Manifest next update:     Thu 19 Jun 2025 10:01:15 +0000
Files and hashes:         1: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (hash: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=)
                          2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: CB8+XhEShR8djMXVXGBPQBkZnpc8VbEe3AP2bv9f0pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:7c:54:89:cc:03:9b:b2:3e:1a:11:bd:02:53:fc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
        Validity
            Not Before: Jun 18 10:01:15 2025 GMT
            Not After : Jun 19 10:01:15 2025 GMT
        Subject: CN=c461b3f8816a40a79d54c5a63178a9a5fb471d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:f6:33:f2:3b:e4:0a:a4:0f:e9:00:1b:de:
                    fb:54:4a:df:00:15:f9:14:c6:7c:0c:96:cd:4c:f9:
                    37:00:b4:dc:d0:a8:b9:6b:00:2e:86:8a:70:46:5c:
                    34:25:9a:f2:65:21:9e:56:59:30:9e:35:f2:87:4d:
                    36:f0:38:4c:53:50:b2:71:0f:99:7d:fd:a2:d1:3e:
                    3b:c0:37:9e:5c:5f:29:40:90:99:07:57:c3:96:09:
                    54:9d:7f:e6:63:bb:4e:f6:cb:27:87:85:1c:90:59:
                    7e:0e:c5:04:f5:9e:8f:98:f3:bf:6b:58:7d:77:88:
                    0b:64:4a:6b:83:a5:37:31:27:6a:25:49:3d:58:62:
                    f6:a5:26:2e:f8:c1:a7:e8:0b:52:34:ab:94:96:da:
                    67:fe:b0:f5:06:89:5a:a3:44:98:e3:80:94:30:fe:
                    e9:87:03:aa:a6:56:53:9d:5b:31:23:f9:94:aa:9c:
                    4d:13:d6:92:84:66:68:7e:18:73:87:b8:35:d8:75:
                    1e:ea:b3:8b:72:df:7c:c2:ff:ed:cf:dc:97:da:51:
                    4c:62:62:00:e1:d0:bb:4e:d0:dc:0c:33:8a:57:b7:
                    9f:9a:6e:21:a7:c1:77:3c:29:be:77:92:91:de:a2:
                    c7:95:32:47:b5:6e:7f:ba:36:ce:f0:34:39:2c:4f:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:61:B3:F8:81:6A:40:A7:9D:54:C5:A6:31:78:A9:A5:FB:47:1D:53
            X509v3 Authority Key Identifier:
                keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:0c:ff:8c:5b:8d:ce:09:39:be:58:18:16:72:59:85:2d:8d:
         9a:f5:24:2d:97:b8:6a:11:ee:b9:c9:75:53:47:b0:45:9f:58:
         8a:4f:19:07:74:be:98:04:f6:74:87:75:37:6a:b5:23:8b:8c:
         cd:17:e7:25:df:d6:ad:41:06:20:ec:da:9b:6e:ec:a4:04:ba:
         27:06:40:50:15:32:37:f4:e6:aa:aa:22:43:93:66:f0:69:98:
         f9:9f:1c:b8:e2:b0:00:14:de:2d:7b:10:4a:42:c7:d5:ad:f1:
         a2:32:df:dd:e2:4f:ca:85:7f:aa:1c:63:bc:55:09:10:92:92:
         23:4e:cd:87:d3:c7:f3:7e:5a:79:88:75:62:5c:1c:f7:c2:5f:
         f7:ae:00:3b:e7:79:f7:70:f1:7e:20:b2:bc:f9:c2:1f:98:1a:
         8b:88:4a:0e:9a:f3:d1:c6:89:cb:93:24:bb:2b:7d:e6:a2:c2:
         a7:1e:1f:c1:33:b8:02:0f:ef:fb:60:a3:94:98:a0:c5:ea:bd:
         b5:52:64:08:e7:71:73:1b:bb:19:93:60:b5:29:06:21:7d:7d:
         54:e8:ac:f9:7b:e7:80:29:99:8b:81:6f:c0:12:ed:3f:c2:1a:
         8b:f6:bc:5a:e6:85:e9:db:e1:82:e7:e8:86:ce:0a:24:86:dd:
         04:94:17:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:50:07 2025 by rpki-client