Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File:                     wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier:          ypB4WnCKbqyCUgyvkyS8klkAp23DEVRyg7mTdbo5swA=
Subject key identifier:   AE:1B:06:28:EB:E2:AF:E0:F6:B5:24:1B:11:B0:B9:1A:C1:03:D8:01
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer:       /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial:       019774C0578FC21E965ABC7B99D40541AB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number:          1524
Signing time:             Sun 15 Jun 2025 18:00:51 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:51 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:51 +0000
Files and hashes:         1: NO4AW5Gi5epvfnutXf6m_pLoKDw.roa (hash: 1o2hUp8Qay3eqTXCqBb3VcdpmxjfDTdYSgYdj2A3ZP8=)
                          2: hsaReoXY2mR3_oCjpG4j-yPGtgE.roa (hash: cnraCmQfKTDWUgiiK98Z/023EXxjG/JmIpzpFMXqbwQ=)
                          3: nChyDb158g4ETV6S1h4UKmIWYw8.roa (hash: nll+aElSurSjLSWtf0Qc8rCb0mOo9oC+4mUSWL5RZno=)
                          4: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: dLQmVPMnyrf/AgR4i2NvmkXt4iZqhixfm8E8x2wniDA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:c0:57:8f:c2:1e:96:5a:bc:7b:99:d4:05:41:ab:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
        Validity
            Not Before: Jun 15 18:00:51 2025 GMT
            Not After : Jun 16 18:00:51 2025 GMT
        Subject: CN=ae1b0628ebe2afe0f6b5241b11b0b91ac103d801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:b0:93:bf:89:3f:5a:47:fe:92:6f:b9:d7:
                    b8:7c:74:99:ef:a0:2f:18:dc:cc:32:a6:5a:a8:14:
                    22:1a:40:e0:ea:82:24:c8:25:5f:b7:fd:e1:10:b9:
                    71:cc:11:09:6c:cd:2f:d7:30:c5:c3:64:d2:66:bc:
                    be:c5:60:35:cb:56:6d:e4:f4:89:be:92:1e:69:be:
                    87:3c:25:6b:8a:3a:b8:e1:5b:58:1c:2e:73:18:75:
                    21:0e:c1:a8:69:65:03:6b:0e:9f:42:b9:5a:3f:46:
                    9e:48:a0:78:18:a6:09:0b:cf:42:fa:14:00:ae:71:
                    92:ee:44:ce:15:92:d8:cf:66:28:d2:c7:e0:f4:d3:
                    d9:f4:86:fe:fe:25:ea:06:4c:4b:45:4c:0a:fe:f4:
                    12:5c:20:25:33:fd:dd:6c:a3:7a:9f:d3:14:8b:f9:
                    5f:80:ff:b1:c4:77:85:1c:2c:be:ad:f8:6a:63:22:
                    ab:ed:e5:de:74:af:36:83:c0:a8:bb:d3:c1:06:50:
                    59:8f:71:6c:6f:ab:c3:6b:d1:32:06:80:02:9a:b3:
                    2b:f3:12:68:52:f0:15:2d:08:24:a1:46:26:26:17:
                    af:ea:67:43:07:50:cb:f7:1d:8b:b3:88:7d:46:37:
                    3b:b3:dc:6e:f2:b5:f9:b5:6e:5f:13:af:6f:5a:4b:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1B:06:28:EB:E2:AF:E0:F6:B5:24:1B:11:B0:B9:1A:C1:03:D8:01
            X509v3 Authority Key Identifier:
                keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:dc:c4:99:21:56:73:af:5f:1f:74:83:39:81:8f:c7:a9:00:
         f8:f9:d4:49:d4:e8:77:5c:57:fc:c2:05:38:a3:bf:ba:02:91:
         d7:af:ee:f2:51:8e:59:7a:05:22:a6:98:fc:f9:cb:fc:a9:d7:
         8e:e2:59:0d:49:89:44:8c:b2:6c:8e:ad:48:a1:17:f1:50:9f:
         d7:8f:64:d0:aa:be:82:21:ac:55:5d:21:8d:21:1b:ac:bc:50:
         b7:5c:32:20:6d:f2:50:da:53:14:b5:42:e4:56:50:ac:39:18:
         57:11:84:bd:97:a1:fc:55:fd:0d:ca:dd:cb:f9:65:b8:b2:90:
         1f:2a:dc:ef:01:b9:eb:12:09:30:3f:83:08:bd:ae:9c:22:24:
         01:15:84:4a:94:c3:aa:56:15:c5:21:64:5f:03:86:e3:d1:df:
         11:25:c2:13:74:f5:fb:8b:40:46:86:41:b2:9b:c5:c0:d3:95:
         1e:f4:a6:84:c4:38:1a:83:67:89:1a:83:fc:2f:bf:72:db:0f:
         9c:a6:02:24:40:ae:b1:59:9e:68:99:a9:a1:97:e9:bb:9e:c6:
         1f:04:19:bc:47:c8:ba:9a:54:77:6f:c3:f9:86:d3:c6:3e:aa:
         cc:41:cd:20:00:a8:5d:9c:29:b6:bf:98:fd:1c:21:18:49:a7:
         48:58:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:04 2025 by rpki-client