Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File:                     wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier:          qjMSdzG+GReixW84owAAOeaaurZUi3EOaTssFxaSUIE=
Subject key identifier:   02:92:33:A8:D1:66:D5:34:EC:5F:41:84:70:A8:4E:D6:1E:86:9B:C1
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer:       /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial:       0197759C1FBA944E32E6EE95E700B6CA8ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number:          0C17
Signing time:             Sun 15 Jun 2025 22:00:55 +0000
Manifest this update:     Sun 15 Jun 2025 22:00:55 +0000
Manifest next update:     Mon 16 Jun 2025 22:00:55 +0000
Files and hashes:         1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=)
                          2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: 7pNh2xruLsgrYN/OTB5O4139z86brL+UuUtMs4WAtJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:9c:1f:ba:94:4e:32:e6:ee:95:e7:00:b6:ca:8a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
        Validity
            Not Before: Jun 15 22:00:55 2025 GMT
            Not After : Jun 16 22:00:55 2025 GMT
        Subject: CN=029233a8d166d534ec5f418470a84ed61e869bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:49:56:aa:bf:c1:9c:87:36:f1:44:df:28:
                    83:af:ea:05:fe:d9:c6:cd:20:81:f8:6e:19:f6:a1:
                    8b:1f:f0:35:08:dc:cb:2a:08:44:35:b6:45:79:0f:
                    a1:73:63:7f:84:44:2b:6c:eb:a8:bd:81:9f:ac:3d:
                    0e:25:7f:47:f0:36:b6:55:20:92:23:96:3c:4b:00:
                    72:c2:e3:88:7c:dc:a3:6b:4b:ca:0d:a9:3a:45:c0:
                    a5:ab:3e:05:84:37:6f:fd:e6:b8:f6:1f:db:c1:38:
                    63:2a:f6:d5:87:ed:cc:79:db:c0:c9:f5:20:bd:7a:
                    a9:94:9b:1f:4a:dc:1f:63:83:de:7b:b2:7b:85:2e:
                    b9:43:61:b0:a7:45:bf:16:ad:19:1b:7a:4c:9f:6a:
                    8a:7f:68:68:36:6a:f6:4c:08:f0:ee:c2:9b:30:42:
                    85:42:dd:47:04:19:78:75:a3:c6:42:53:4c:72:24:
                    e0:c5:60:ba:34:8f:c5:8b:61:e3:90:64:cc:f8:47:
                    f5:2e:01:46:12:1f:30:9d:da:11:dd:e3:f2:af:55:
                    0b:94:f4:05:a4:53:b3:af:19:20:cd:37:6e:37:2f:
                    5e:f5:2c:b2:66:3d:ec:9e:cd:f5:b9:1b:ac:81:03:
                    5e:41:5e:54:34:ae:7d:e4:47:de:cc:ea:74:a4:bf:
                    5e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:92:33:A8:D1:66:D5:34:EC:5F:41:84:70:A8:4E:D6:1E:86:9B:C1
            X509v3 Authority Key Identifier:
                keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:22:87:3c:f4:87:15:2d:54:22:a2:70:16:c6:c7:2f:95:e6:
         64:6f:c2:ca:38:a2:96:16:6f:71:c5:d9:fb:c9:02:29:af:0c:
         48:8b:13:c1:0b:42:85:ea:ad:86:6d:f0:ee:ff:38:ec:d2:47:
         05:64:04:b6:6c:ce:ae:5b:f5:05:c0:95:72:e3:fe:1b:2c:e3:
         17:bf:c9:45:b7:87:5a:ec:d8:c7:26:2f:63:0c:49:7d:c6:6c:
         28:b3:b6:f9:e9:c1:8a:ea:f1:3e:ff:f3:ec:90:05:7a:46:ad:
         d8:b4:b6:85:80:71:b3:36:72:09:c1:02:f8:b1:b2:00:49:cd:
         9d:e3:fd:cb:cb:6e:59:0b:cf:95:1a:b2:32:1e:79:94:38:c6:
         37:f9:e4:e6:5b:e8:b4:b6:22:1d:05:9f:bb:90:42:a5:95:e0:
         cd:a3:bf:4c:fd:9a:26:89:2e:97:59:48:5d:03:07:22:0b:04:
         8d:b4:b3:d6:8f:2c:63:12:f8:e7:ea:6e:29:15:a7:47:ee:49:
         ca:9a:4f:64:a0:33:74:ba:a5:6b:da:02:a5:07:88:e4:07:74:
         6f:99:98:e5:18:00:14:a5:46:0d:e9:d0:fa:82:22:f5:26:ed:
         a7:81:8d:72:a5:f8:f4:c5:ce:20:d0:2c:61:59:96:17:ee:7d:
         5e:b2:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:32:45 2025 by rpki-client