Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
File:                     wPvVh2YT7cVuD13kaMzl6yiF_yk.mft (raw, json)
Hash identifier:          QmbGAOnqCkl92O/a6nHi2BuLQhxIR4RwIQUPwp+fLtA=
Subject key identifier:   B1:99:BB:B0:82:87:40:5A:29:C6:A7:7B:9E:DF:F6:14:E9:14:30:31
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       0197684E4C01AF19891821613F27652C6D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
Manifest number:          1596
Signing time:             Fri 13 Jun 2025 08:00:51 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:51 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:51 +0000
Files and hashes:         1: EFxSU25sGdE7ReGZ4hQCxcL1EQo.roa (hash: uR14mG4VrYUKqqD3TGgmTlLEojfMxYMgFQs/N0rSPIw=)
                          2: J4eDOx5SJHSihuh2E2EdDHS1FZg.roa (hash: AX1DVLfXHqcPxw4MGiaVf7TNJa9XXou7rNBSUIsHkkI=)
                          3: djNdVQcmVTrF_ImkfBTW1TEQZN4.roa (hash: DtPfbxjdA+NH1bgRX93+QdhSVAdl+yD2XBVTnWNlO4A=)
                          4: fbcFhpzULC3EEWBNByMVqkv4COk.roa (hash: IqZFwEwAMsXDTRbFGgHZteBrOxKZIky7zYKYfP8PcME=)
                          5: mgkhzfFw4ufuprRiBTlmBaPgwFM.roa (hash: dz3CImHP1M7gcq3PLY9DQc36du2KECW9tVbHZAcIciw=)
                          6: wPvVh2YT7cVuD13kaMzl6yiF_yk.crl (hash: Hg9G9ATWEB1xuY8uD7FYPx96aKlJ159ECJgvEvdV6Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:4c:01:af:19:89:18:21:61:3f:27:65:2c:6d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Jun 13 08:00:51 2025 GMT
            Not After : Jun 14 08:00:51 2025 GMT
        Subject: CN=b199bbb08287405a29c6a77b9edff614e9143031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:4a:d8:4d:0d:ba:1e:83:f3:b6:e7:98:3c:
                    9d:47:2a:80:f2:e9:2b:51:79:f8:45:70:7a:78:3d:
                    49:88:43:12:40:de:28:e7:51:13:43:0a:a4:f8:61:
                    72:b2:8c:fe:f7:56:bf:5d:55:b6:3e:3f:bc:57:25:
                    96:ff:6e:f6:75:b7:e3:b6:1e:23:6c:53:e3:21:e3:
                    dc:3e:32:e0:9b:44:14:b1:3d:d4:7a:3f:76:26:1a:
                    4e:49:95:0a:8b:8e:32:b6:12:94:2a:73:81:89:cb:
                    72:45:0c:99:6f:7f:97:e5:35:6a:15:b5:64:8d:1e:
                    00:09:85:6c:ea:bb:c1:8f:74:07:ed:da:b0:a6:fd:
                    31:41:34:dc:be:78:9e:d3:e9:8c:2b:a2:01:eb:ce:
                    b1:0f:d2:72:6a:3c:3e:47:d2:d5:9b:14:2b:6b:83:
                    41:02:93:6c:a1:5e:fb:ed:e3:f9:2f:51:3e:2b:41:
                    79:de:9e:b7:b1:74:6e:12:fe:a2:dd:52:8c:57:28:
                    56:f2:44:16:f7:10:70:a3:8c:fd:18:8c:23:77:6d:
                    18:23:54:87:43:87:da:77:7c:1e:73:89:32:c1:85:
                    75:5f:45:85:1f:7b:37:66:27:2e:49:d4:9c:cf:68:
                    4d:ea:f3:bb:81:cc:30:1d:59:c1:7f:72:59:53:61:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:BB:B0:82:87:40:5A:29:C6:A7:7B:9E:DF:F6:14:E9:14:30:31
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:61:da:c3:4a:7f:74:f9:1e:be:3c:ff:11:e2:79:07:06:9a:
         66:a9:25:31:fc:93:a5:13:54:e2:fe:5a:dc:de:bb:f9:43:34:
         00:f6:78:e4:6e:5e:2b:93:6b:98:31:1c:3f:3f:a7:2a:37:0d:
         42:4a:0a:8d:43:6f:fa:35:a6:b0:b4:1a:b6:34:6a:57:2f:e0:
         d7:a5:06:4c:6f:10:bd:b6:6e:36:b1:a4:75:32:85:e0:98:0b:
         8a:58:1b:cf:f2:91:1e:ed:bf:82:48:28:a3:21:f4:c5:6f:24:
         e6:d4:cf:e0:99:85:d2:84:47:33:cc:38:45:5e:a3:17:f0:56:
         0b:3e:95:8f:8e:c0:eb:b3:e8:be:0d:73:b5:60:7c:2e:44:85:
         04:48:b4:4f:38:ca:3a:f8:2b:94:cf:64:98:8f:9f:e4:dd:b9:
         cf:1b:01:4b:71:3e:86:d2:54:da:02:e8:59:14:24:d6:b5:90:
         19:5c:ce:8e:6f:94:f2:3b:de:51:62:e0:a3:50:df:27:41:78:
         3e:8a:fb:19:8f:34:43:3e:4f:5d:fe:48:21:0f:66:09:96:6d:
         0c:a4:ef:31:75:f4:74:46:ba:cd:61:d2:66:f5:b8:3d:69:11:
         53:1e:fe:59:d4:c2:ea:79:98:05:c2:2d:07:9f:cc:bc:63:54:
         e2:c3:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:25 2025 by rpki-client