Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File:                     wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier:          vNqHypmeyAsn6dx6vhfQB7hvdSCzMZdODLgCoRe9hLo=
Subject key identifier:   B6:1B:ED:D4:A4:4A:81:28:FB:B8:5D:0A:65:09:DD:70:5D:09:46:71
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer:       /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial:       01976D3E0F17E03F1AE95D2F4B01948A14AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number:          0C71
Signing time:             Sat 14 Jun 2025 07:01:12 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:12 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:12 +0000
Files and hashes:         1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=)
                          2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: Cx+c15RTjKTORrR84vayuPaQb2UilEGRfZNK7PMAjVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:0f:17:e0:3f:1a:e9:5d:2f:4b:01:94:8a:14:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
        Validity
            Not Before: Jun 14 07:01:12 2025 GMT
            Not After : Jun 15 07:01:12 2025 GMT
        Subject: CN=b61bedd4a44a8128fbb85d0a6509dd705d094671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bc:76:1a:d9:d3:6f:1b:a4:a2:4d:72:2c:3a:
                    5d:3b:00:a2:24:16:c5:11:41:bc:fd:4c:0e:f9:cb:
                    5e:18:45:d9:c6:34:b1:66:49:5b:95:f5:01:f6:eb:
                    22:79:f3:1a:7b:cf:78:88:ce:b0:ff:80:60:0c:53:
                    45:64:ff:40:42:27:74:4e:e4:ca:73:fc:69:1e:33:
                    30:d1:a1:21:a5:28:7c:80:91:6a:18:a5:aa:1d:ad:
                    96:c2:05:78:91:6f:79:a3:55:3d:ce:f7:20:fd:98:
                    31:1f:ef:a2:35:b0:6e:39:bd:ca:6b:61:d1:56:e5:
                    62:58:15:84:85:8b:5c:3e:56:28:ac:17:0b:8f:f3:
                    96:89:89:8c:6c:ae:7e:8f:fe:9b:e9:80:59:ad:87:
                    b6:38:ff:2d:43:6d:98:58:4d:02:28:aa:65:5f:fb:
                    a1:09:04:31:4b:b1:29:cd:15:1c:b6:54:b6:b5:3f:
                    4d:cf:d9:86:f9:39:2a:b5:92:89:d6:38:a1:f4:b2:
                    58:9b:87:f7:8f:20:34:05:9f:f2:3a:93:57:80:cd:
                    25:0a:a5:6b:e2:9a:4e:26:9a:af:4b:10:8f:ad:3c:
                    72:9d:42:c3:70:f7:74:fa:e2:45:06:b4:3f:30:b0:
                    8c:1a:eb:c3:81:5d:3a:ad:03:c0:cd:4b:65:39:d5:
                    01:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1B:ED:D4:A4:4A:81:28:FB:B8:5D:0A:65:09:DD:70:5D:09:46:71
            X509v3 Authority Key Identifier:
                keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:be:4e:c9:cc:26:da:9b:30:b3:60:e1:74:92:b2:5c:28:c8:
         2e:c7:76:7c:0d:d4:49:09:92:40:84:90:17:96:b7:2c:e3:cc:
         ff:f7:34:b7:4a:95:34:42:98:a0:7d:ab:6d:38:a8:fd:d6:99:
         b1:1a:f0:d3:bd:29:a6:f1:b1:d8:f0:6f:fe:72:34:92:45:fc:
         64:9c:ef:c7:d0:8b:05:da:13:08:e7:f2:6b:5c:86:2a:47:df:
         02:b5:16:c1:81:85:46:fe:73:3f:a7:d5:2f:00:4d:0e:b9:88:
         dd:25:57:e3:a2:4e:46:74:9a:a4:62:29:0c:4e:0c:47:7c:5c:
         27:2e:c3:d8:6d:38:1e:ed:6c:8e:2a:be:5d:be:be:15:4b:15:
         e4:62:d6:0d:72:fd:ca:69:03:9b:17:e8:0e:2c:f1:31:6b:71:
         71:7e:7b:97:eb:02:6e:24:f0:43:95:71:c2:43:46:57:d6:cb:
         d1:e4:c7:06:65:ee:d5:28:8e:39:f3:e3:7a:90:c9:00:ec:de:
         63:43:00:0c:98:3e:6f:8e:22:32:55:6f:4b:9b:f6:d8:74:28:
         b4:35:26:db:f3:e3:c4:f5:0d:09:56:22:47:a2:10:47:a1:53:
         65:23:a5:1c:4b:1d:1e:c8:60:0a:6e:10:9f:b7:b0:a4:de:6a:
         27:79:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:35 2025 by rpki-client