Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File:                     wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier:          BoCOh2Gd8HWAmlJoRldZ7VvOkOF4jv1xp8XbU+IkVF0=
Subject key identifier:   75:AA:5B:1E:97:11:99:30:4C:51:E6:6F:08:8A:6B:7E:90:A5:9D:C7
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer:       /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial:       01976F2CEBE3F6BB604C32448814502DA222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number:          0D40
Signing time:             Sat 14 Jun 2025 16:01:44 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:44 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:44 +0000
Files and hashes:         1: VaQFkBkaVYjwzbk-d1HfVSqGj30.roa (hash: mgqfVOInqFPvEjCxJre+1kdiyjEUS8UusvaHKwVL6Uo=)
                          2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: l2MwZkW6SzG04dnsGMCoC05qtsonZa6A205qwwTRnq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:eb:e3:f6:bb:60:4c:32:44:88:14:50:2d:a2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
        Validity
            Not Before: Jun 14 16:01:44 2025 GMT
            Not After : Jun 15 16:01:44 2025 GMT
        Subject: CN=75aa5b1e971199304c51e66f088a6b7e90a59dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:2d:e3:73:0a:e8:45:90:75:71:14:b7:63:
                    b9:82:dc:4a:6d:bc:38:7b:9a:91:2a:9d:cf:a1:1b:
                    43:3c:38:54:e2:3c:54:16:5d:d8:67:30:fc:e2:d6:
                    f8:56:14:a8:d7:b7:0a:08:b3:ef:d5:5d:66:b4:b6:
                    d9:c8:f4:cd:36:fd:6d:00:39:8c:cd:10:50:9c:9f:
                    cd:be:b9:12:e6:3a:28:76:0b:33:a0:01:27:be:eb:
                    d9:14:4e:79:8b:24:49:70:8c:2d:21:53:ec:ff:d8:
                    a4:66:42:72:d7:8e:a6:94:66:9a:0f:38:72:c2:9d:
                    ac:68:57:35:1e:26:18:e8:ec:e8:c3:4d:71:e7:40:
                    ee:b8:ca:fd:d9:56:28:dc:f2:ee:fd:3d:c8:9f:3f:
                    ff:a7:5c:fe:96:a9:ac:09:4d:71:2c:3c:59:4b:47:
                    fe:0e:98:7f:e5:9f:54:e7:64:a8:40:9b:bf:29:df:
                    d5:90:28:6f:af:86:08:36:77:f7:f4:d0:f8:52:76:
                    d8:7a:05:ee:94:2e:7c:91:26:bf:89:c2:30:18:6e:
                    6b:2f:e1:c3:be:ca:7e:44:42:31:04:7c:1c:51:d8:
                    7d:a9:6f:f4:32:94:73:f7:1e:96:52:01:a1:28:52:
                    83:7e:52:d6:c3:58:b1:14:da:50:3b:1b:4b:33:30:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AA:5B:1E:97:11:99:30:4C:51:E6:6F:08:8A:6B:7E:90:A5:9D:C7
            X509v3 Authority Key Identifier:
                keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2c:e6:01:09:0e:ba:36:79:21:22:f2:41:f9:fc:c5:19:99:
         2f:28:6e:5c:eb:1e:38:a4:3f:8f:ba:ff:2f:37:6c:d4:86:99:
         07:4e:e5:79:61:2d:7d:ab:e0:1c:2d:2f:c4:53:56:36:85:24:
         51:b7:76:eb:30:e5:6a:f4:55:58:f4:0d:93:87:4f:7f:d5:42:
         36:09:53:e1:26:88:c6:8e:03:58:ba:5a:8b:a6:bc:84:f9:5a:
         00:a0:62:01:04:5b:2b:f6:7b:47:fe:38:2d:5c:0f:a8:aa:de:
         30:25:de:91:3b:6c:43:bb:e2:67:90:13:be:c5:27:82:3e:1c:
         a6:e5:58:5b:9c:eb:14:17:5f:6d:d0:74:8f:a3:4f:b3:2f:1f:
         51:d7:57:cd:21:ed:3c:e6:6b:bf:60:a6:21:14:aa:c7:5e:01:
         82:3c:55:80:9f:e4:71:06:05:e5:9c:6c:ae:7c:42:58:62:10:
         88:a9:92:c3:6c:eb:39:5a:36:31:f6:d2:b2:ee:dc:29:1c:92:
         4a:bc:c6:bc:da:50:fb:98:75:84:8a:5c:a2:66:82:fa:e2:d9:
         87:a2:52:cf:36:da:17:8f:59:94:5a:e0:5f:26:89:c6:a1:e5:
         d8:f4:e1:a7:11:3b:52:8c:cb:86:b7:69:56:f7:e7:db:4d:8d:
         55:ad:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:26 2025 by rpki-client