Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
File:                     WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json)
Hash identifier:          LbZWN9YI99JzskjvEgL3A+jmiVzFYOpDJPRolLTAjdA=
Subject key identifier:   CD:BA:A4:B8:D8:37:DF:7C:2D:70:CA:1C:F9:E8:DE:79:89:EA:11:DF
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Certificate issuer:       /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial:       01976A05B5DCCBBC8D96102FBDF58395A728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
Manifest number:          1C
Signing time:             Fri 13 Jun 2025 16:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:48 +0000
Files and hashes:         1: 5Vle3KGfqnVJEdmvBasCstldoz8.roa (hash: Rl95m9yb5FSNGdnRgF3OQpiAhZ5L8MWgdG8dVfAGWKo=)
                          2: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: lCoKIep9/GZTdKAje4cly/BeOE/xBsOr0dlrX+7Q0so=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:b5:dc:cb:bc:8d:96:10:2f:bd:f5:83:95:a7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
        Validity
            Not Before: Jun 13 16:00:48 2025 GMT
            Not After : Jun 14 16:00:48 2025 GMT
        Subject: CN=cdbaa4b8d837df7c2d70ca1cf9e8de7989ea11df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:39:bd:23:af:a3:db:10:5b:5d:d0:cb:c4:
                    8b:8f:42:e4:dc:2d:75:e7:98:e0:a8:59:34:3f:be:
                    c1:14:b8:7e:7f:a1:05:3b:1f:40:ff:7d:5d:bd:00:
                    32:80:6f:5b:62:5c:8c:66:0d:f0:b4:e2:74:20:ae:
                    74:2e:aa:77:37:48:55:2e:f9:cb:c9:cf:0b:ed:9f:
                    08:43:f1:f2:41:ab:b0:ee:01:71:c8:66:44:d0:7a:
                    ac:d2:5e:a2:e7:5d:95:5d:3a:75:12:bc:02:61:84:
                    a1:91:cb:24:6f:92:a8:c9:63:86:d7:8e:ed:7a:6c:
                    fa:7b:97:82:08:c5:84:e6:1c:ae:26:09:50:6e:00:
                    1c:33:d3:cb:bf:14:74:b9:7b:bc:7b:d0:9b:1a:33:
                    f3:c4:4f:b7:ba:7c:b5:8c:b5:1f:a1:cd:e1:e0:c6:
                    4f:94:c9:fe:09:ed:78:27:56:31:23:36:55:15:42:
                    18:01:7f:c4:eb:6e:4f:56:b6:5d:0d:a5:86:22:28:
                    b8:1c:01:ae:3c:1d:b7:b9:5a:18:3d:36:04:8e:0e:
                    d8:74:de:d7:a8:27:ae:a5:bf:e3:0d:ed:60:fa:bd:
                    3e:13:8e:a5:16:7a:50:3a:bb:2d:a8:54:7b:96:d2:
                    a5:17:61:e7:d6:77:f6:bc:44:0c:ec:4f:af:d8:8f:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:A4:B8:D8:37:DF:7C:2D:70:CA:1C:F9:E8:DE:79:89:EA:11:DF
            X509v3 Authority Key Identifier:
                keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:e5:22:c7:7c:d1:fe:3a:ab:2b:ca:f7:60:39:51:7e:f9:
         65:29:b6:f1:a7:a9:f4:f6:ba:17:e4:c8:07:3f:6b:92:98:9d:
         66:4c:b1:55:9c:07:10:5a:3c:df:d1:62:7b:01:87:8f:52:ac:
         88:de:a9:1a:94:eb:ef:50:75:91:e9:10:32:d2:7b:85:9c:51:
         ca:d7:8f:9f:05:52:dd:e0:97:4d:df:c8:fc:c7:a7:05:ae:e2:
         01:a7:af:f0:77:a2:12:70:58:ef:d3:f9:5a:42:4e:ab:bd:f8:
         9e:9d:21:c2:48:40:2a:27:9c:03:83:62:af:9d:36:c0:69:e4:
         1b:96:59:6e:c6:45:94:e0:1c:49:38:13:47:0f:e6:8c:e8:62:
         e6:aa:12:c9:2c:f2:dc:0a:e9:ff:4c:fb:2a:b8:c8:f0:16:d6:
         5f:fc:21:0f:5c:0a:d7:fe:9d:17:cf:de:76:60:3e:a5:bc:5a:
         50:0f:d0:5b:8a:be:a1:38:48:d6:33:27:44:9c:14:a1:f0:7a:
         cf:a1:28:8d:65:21:1a:af:d9:54:21:55:c9:88:d1:73:fa:af:
         de:8f:24:68:ae:34:5b:af:7f:c9:53:33:ac:63:2b:fd:a7:18:
         43:ef:74:47:51:7d:3d:70:20:ad:bf:84:20:b2:6b:37:8f:21:
         1c:34:2a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:19 2025 by rpki-client