Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File:                     mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier:          YfGoH66vkYUnR4tFu46cBb6ckBhwARUYQ9Ppfc4QJiw=
Subject key identifier:   44:17:A7:FD:17:6E:8A:27:B3:87:FC:6B:E5:F1:95:6E:F4:0F:65:95
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       01976CCFA42FD7C5B7E2CBE57967494AC68C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number:          15A1
Signing time:             Sat 14 Jun 2025 05:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:36 +0000
Files and hashes:         1: DNtnbvJyFX3vGs4Q6JEG_ZsHFQg.roa (hash: K+AhFAZDpy/NkiLJfIEeAFYckiqA8OuE/Pb388Cb1M4=)
                          2: VdxEEuOoMeJjzuf1tOIRu5y_cuY.roa (hash: AIf8SEV2T1VKgT7ROpLNSZ5BKqfUXSKlfSWrsWX9IKQ=)
                          3: ZDeqr4bzVJZzwb_UfOlQJbn9JTw.roa (hash: 3Blt9qc0qNOTbyRJx5iL7tY6336Yd2GQWHTIQYOz0WA=)
                          4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: vOxEZkHCYuYt9PnvZjRQiEM4OSnKJIB0MpUDwkDy/H4=)
                          5: wGg8NKByP-F8-49JwKsHJej-0ks.roa (hash: 6NeYKXnfUfbfp0JVHojhaiZ+F9KjenhMqxsTxiHArrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:a4:2f:d7:c5:b7:e2:cb:e5:79:67:49:4a:c6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: Jun 14 05:00:36 2025 GMT
            Not After : Jun 15 05:00:36 2025 GMT
        Subject: CN=4417a7fd176e8a27b387fc6be5f1956ef40f6595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:43:37:bd:35:9d:0e:11:d4:ad:a7:7f:25:
                    fe:e7:98:2c:30:96:21:9f:7e:41:4c:a4:1e:42:5a:
                    22:40:e6:0c:b5:be:91:33:a9:c9:d7:85:53:ad:e9:
                    bc:db:59:de:b4:2b:3d:88:22:19:cd:3f:b5:22:e7:
                    71:a3:0d:c1:06:3a:96:85:b8:31:9e:88:01:56:4a:
                    5e:4d:28:63:85:12:5b:41:6c:6d:02:6a:b4:1b:f9:
                    4a:96:75:8b:ff:5d:e1:29:ab:b3:d8:40:06:ee:cd:
                    66:59:d8:07:3d:f9:e1:fc:1d:f1:fb:11:fb:a7:3b:
                    4a:b6:0f:34:86:dc:75:f5:d1:f6:7e:64:bc:d9:81:
                    e5:67:8a:d3:af:06:6e:a8:b6:fe:65:70:63:fb:53:
                    93:94:3b:db:b7:eb:14:b9:10:d1:ed:7f:c5:9a:e6:
                    7d:0c:36:08:df:4a:15:e3:d4:d2:3d:6d:5d:ad:71:
                    87:91:bc:25:80:a4:ac:26:ef:d7:5e:a2:f8:09:12:
                    34:8f:97:79:4f:1b:84:e6:b7:d3:44:9e:53:18:ba:
                    bf:9b:9a:e6:cb:08:6f:13:b5:44:d9:81:0c:39:ba:
                    c8:6c:28:f3:24:a3:21:f8:df:0e:2b:30:ad:a9:5a:
                    0b:8c:82:a0:8b:4c:50:9d:23:37:a5:69:2b:83:9a:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:17:A7:FD:17:6E:8A:27:B3:87:FC:6B:E5:F1:95:6E:F4:0F:65:95
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f1:4e:8b:93:20:4c:8d:fa:ee:ff:eb:08:2c:14:ad:15:1f:
         cc:47:c5:f4:75:35:2c:e3:36:22:88:01:d8:66:22:5d:6f:1f:
         be:5a:dd:84:db:ea:e7:12:97:1a:38:75:dc:e9:e6:39:6b:21:
         10:a5:bc:b7:b6:2e:1f:28:5c:ff:1f:9e:eb:4b:86:db:70:20:
         48:09:f6:c5:77:fd:07:1b:b2:be:27:ac:90:e5:0a:ea:55:ae:
         fa:4e:99:dd:8b:dd:53:80:60:58:70:ca:54:3c:2b:68:6c:b6:
         90:ce:9d:12:0e:e4:fc:56:2b:99:47:b9:0b:61:f1:5a:d6:c2:
         82:e2:3a:ef:4d:d3:90:db:fb:fa:61:6f:ab:21:f6:0f:79:d7:
         42:e7:cd:99:82:aa:ef:8a:98:18:fc:42:11:13:84:75:48:6d:
         7f:64:49:26:df:09:cb:06:bc:43:8e:f6:d5:20:86:07:1d:ca:
         16:9d:b9:96:6f:49:b2:22:3b:10:f8:a7:13:ab:47:4e:ba:57:
         c3:f2:52:af:d3:83:3a:53:2e:81:91:c3:18:ab:37:ba:a7:bb:
         34:6f:57:fb:3d:c5:9e:d5:a1:e2:05:55:32:70:d1:a1:0e:87:
         d3:d8:de:23:f9:17:40:51:bd:41:9d:03:64:c8:bf:24:51:ab:
         86:ca:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:30:18 2025 by rpki-client