Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
File:                     wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json)
Hash identifier:          9awmzN0JgVG3n+UIMw9K+o/dVYdOkSpd+KgBU97hrdI=
Subject key identifier:   E0:15:0A:80:C3:C4:9E:53:AA:48:6F:C6:9E:83:59:94:2F:40:9D:E6
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Certificate issuer:       /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial:       01977B30CA1214AAC4E9598ED40568CFCD64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
Manifest number:          08DF
Signing time:             Tue 17 Jun 2025 00:01:24 +0000
Manifest this update:     Tue 17 Jun 2025 00:01:24 +0000
Manifest next update:     Wed 18 Jun 2025 00:01:24 +0000
Files and hashes:         1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=)
                          2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: q7cdhOMxLErN924S/3IMFsrJ2clBk/8u/MOmzu6BrTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:30:ca:12:14:aa:c4:e9:59:8e:d4:05:68:cf:cd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
        Validity
            Not Before: Jun 17 00:01:24 2025 GMT
            Not After : Jun 18 00:01:24 2025 GMT
        Subject: CN=e0150a80c3c49e53aa486fc69e8359942f409de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:42:87:ba:a7:fd:cf:f1:07:ba:d2:81:7d:
                    69:09:43:e2:aa:66:ef:ec:d1:a5:68:95:75:de:b9:
                    06:40:de:fa:d9:5d:06:ab:b4:8e:46:bf:81:22:e7:
                    66:1f:b1:6d:57:0a:21:95:d5:d2:57:19:76:a7:32:
                    9e:4b:e5:c7:32:93:29:ee:6d:2b:60:34:78:3d:ed:
                    48:d8:a8:2f:e4:f3:b9:7e:5e:93:10:20:6c:7a:02:
                    00:f6:03:d4:b6:03:71:a3:b6:64:8d:6d:0b:7d:4d:
                    64:b9:f9:d6:93:69:51:6c:92:5b:f4:b1:70:a4:f4:
                    17:46:e3:b8:98:37:d8:63:8f:92:a4:bb:1e:0c:2a:
                    17:71:1f:a2:57:8f:73:3f:0c:d4:44:e4:91:dc:ab:
                    b5:30:c2:d6:bf:5c:f6:63:4c:60:b6:25:64:85:b1:
                    4d:e0:91:6e:44:da:b3:5c:3b:72:61:0c:76:53:1d:
                    cf:80:9d:1e:57:56:f8:0e:ae:49:cf:03:c9:e9:7e:
                    25:58:33:42:c9:6b:59:29:c7:11:12:05:62:15:e6:
                    ac:47:ed:b3:e9:fd:03:59:3e:11:ab:44:70:10:1b:
                    b5:7d:2c:e6:d4:74:22:5c:a0:51:74:ac:40:22:0c:
                    e4:23:5c:b9:37:36:97:b8:b0:75:b8:8e:84:ea:f3:
                    15:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:15:0A:80:C3:C4:9E:53:AA:48:6F:C6:9E:83:59:94:2F:40:9D:E6
            X509v3 Authority Key Identifier:
                keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:29:52:68:63:1d:08:0f:06:9c:4f:c4:82:db:c3:43:25:0a:
         16:d9:5a:9b:f2:e8:22:56:4f:bc:25:bd:c0:e3:e2:28:c3:a2:
         90:a0:42:e4:48:77:e1:73:1c:ae:0f:2e:e7:87:53:11:48:1b:
         36:3c:f1:6c:a0:a0:d5:4e:5a:24:9e:e7:69:0a:84:33:3a:99:
         1f:d2:fe:88:01:cc:35:b9:9c:2f:aa:eb:a4:2f:f4:8f:71:4f:
         cb:d6:3b:77:81:1f:cc:92:28:eb:39:80:01:cb:29:b3:09:55:
         8f:21:d4:16:58:e1:c8:b4:78:68:bf:ec:c7:a0:92:c2:42:f2:
         61:74:9c:bd:2b:18:fa:a8:89:4d:6b:08:37:eb:34:95:5b:44:
         9f:3e:1b:10:0b:63:b0:99:17:86:91:ab:97:84:d0:69:62:c4:
         a5:2b:af:28:18:a6:b6:e1:26:ec:d1:7e:4d:81:0f:71:f8:35:
         13:08:ba:f9:00:f2:07:9c:2b:82:f9:9f:3a:dd:3c:cd:6d:7b:
         6c:39:2a:eb:7e:30:61:20:e6:18:eb:da:72:ef:e8:e0:6c:5d:
         70:9b:e9:08:3e:6a:45:8a:ca:ac:f8:58:9a:96:15:28:0b:69:
         0f:9a:70:ae:8a:4d:bf:c8:24:ea:b1:8b:a4:0d:96:1e:bb:ad:
         a2:41:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:19:19 2025 by rpki-client