Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
File:                     w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json)
Hash identifier:          nHPKWIgYdH6W9QKD9BZ2Ok3xMI8LKqFPJBSYgKTpz0A=
Subject key identifier:   D9:D8:76:2B:FF:11:75:15:EA:A6:8B:76:85:BB:83:6B:62:C6:84:32
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Certificate issuer:       /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial:       019769CEDEA1267F7DDD8FE2056DE426362F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
Manifest number:          0652
Signing time:             Fri 13 Jun 2025 15:00:54 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:54 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:54 +0000
Files and hashes:         1: ovuoYv_IY6H5VWP7UVhFEyUvZR8.roa (hash: tGIGMmrAiBAVPdoPhNgWbiaEcKncDLBEr0fehIJsIkA=)
                          2: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: R2tnbZwW1fvjAjGMyGsq1PCCcn12FzqeNZze1qj8IWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:de:a1:26:7f:7d:dd:8f:e2:05:6d:e4:26:36:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
        Validity
            Not Before: Jun 13 15:00:54 2025 GMT
            Not After : Jun 14 15:00:54 2025 GMT
        Subject: CN=d9d8762bff117515eaa68b7685bb836b62c68432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:07:a7:4a:a9:b5:f3:b5:a5:08:fe:27:65:
                    41:67:05:93:f1:3f:d1:f0:98:86:b9:0a:a6:a6:61:
                    fc:c6:1c:51:5c:3c:39:7b:b3:15:97:69:2b:7e:c1:
                    fd:bb:40:4c:61:2d:49:68:b7:6e:a6:96:fe:0e:2d:
                    15:20:96:e7:36:37:73:80:77:16:75:dd:85:3a:1b:
                    e5:37:18:9a:b3:08:05:d8:57:17:ec:c0:dd:42:63:
                    19:38:e9:92:7c:eb:f9:96:bf:53:69:39:e7:6b:38:
                    86:50:45:c1:5a:50:4e:e5:71:c4:20:4c:d7:ec:b7:
                    3e:6f:a7:bc:eb:8d:de:9f:ed:62:ac:1d:8f:b6:42:
                    ea:c9:c6:a3:99:09:c5:20:c2:f5:3e:bf:9b:90:38:
                    fb:89:67:fa:86:af:d5:c5:93:76:a9:e6:7d:f1:cc:
                    5c:cc:b3:d9:3b:cc:8a:e6:60:3a:fa:6f:ae:af:e2:
                    b3:41:ec:f6:3e:ab:f5:ab:12:c4:95:be:4e:6b:33:
                    de:06:12:91:7a:ce:98:24:f7:cc:2e:96:00:27:e6:
                    7b:35:45:bf:cd:79:68:4d:87:14:a3:9d:31:0d:e7:
                    eb:1a:69:8e:db:0f:77:8b:a6:bf:c3:12:46:30:68:
                    08:11:4f:ec:b0:04:f5:35:6e:43:44:0b:ad:2c:da:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D8:76:2B:FF:11:75:15:EA:A6:8B:76:85:BB:83:6B:62:C6:84:32
            X509v3 Authority Key Identifier:
                keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:72:cd:71:00:9b:30:3d:5c:e3:b9:52:d9:68:16:37:c8:e2:
         0b:c6:28:de:a3:7c:8a:19:27:8c:2b:54:be:82:c9:ed:7f:db:
         a5:53:f2:7d:41:7a:e2:57:03:1d:eb:3e:b4:6e:1b:55:9d:66:
         54:10:5f:26:b2:83:a4:30:94:88:e9:e1:d6:df:73:0c:6a:0f:
         21:87:ed:f4:43:16:77:3a:7c:cc:e7:07:7a:2e:a6:db:de:bf:
         72:fc:56:40:88:7d:d6:ac:3c:70:ec:04:0f:6d:cb:4e:c6:a9:
         ea:25:4d:10:6b:95:cd:89:01:bc:f7:90:5a:e1:07:02:6b:c4:
         92:37:03:cc:84:b2:08:a1:ff:e9:8e:ae:8e:4c:9a:85:28:89:
         39:de:0f:a8:3b:4b:c0:64:39:51:d7:20:d9:3e:fb:fc:71:d8:
         32:f4:19:54:eb:91:2e:03:c2:ac:b9:34:e4:4b:87:d5:98:04:
         97:73:ca:a3:1e:6b:0e:0a:16:a5:75:d4:6d:10:cd:9b:d4:f0:
         04:67:e5:42:60:0b:11:89:dd:c9:2c:20:49:89:72:ed:0c:28:
         b2:7a:11:29:7b:c3:55:11:e8:14:5e:4b:0b:80:d1:3c:2c:0a:
         4e:0d:fd:c9:52:a5:59:53:68:39:43:7a:db:40:c8:89:37:b5:
         35:15:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:29 2025 by rpki-client