Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
File:                     wT40HB4U01p0ls54KOMFX4Y5Nc8.mft (raw, json)
Hash identifier:          GFdj9bx0VrpOxzXjlpqQ3c7jg5Ya7HobM6TuaTF5QkU=
Subject key identifier:   A7:F4:40:7B:C5:75:04:1B:27:F1:4C:71:DE:FE:9F:E7:3D:A7:4E:C5
Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
Certificate issuer:       /CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Certificate serial:       019773E41EDD5FA6F7543572B619FE5A66D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
Manifest number:          1596
Signing time:             Sun 15 Jun 2025 14:00:19 +0000
Manifest this update:     Sun 15 Jun 2025 14:00:19 +0000
Manifest next update:     Mon 16 Jun 2025 14:00:19 +0000
Files and hashes:         1: f1wBKCsXK0uC2nsel0GIe5b0KZk.roa (hash: G9RLd4HtWguPLDAL1JjtSWQmaqJ7AZGAeDkABfQH220=)
                          2: wT40HB4U01p0ls54KOMFX4Y5Nc8.crl (hash: VSUXv7LUq5GHY+x/MUF+Fzrih7JIf0EdWZijzyICSsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:e4:1e:dd:5f:a6:f7:54:35:72:b6:19:fe:5a:66:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf
        Validity
            Not Before: Jun 15 14:00:19 2025 GMT
            Not After : Jun 16 14:00:19 2025 GMT
        Subject: CN=a7f4407bc575041b27f14c71defe9fe73da74ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:f8:df:3e:f0:39:e1:67:66:66:74:91:5d:
                    88:17:98:a8:d2:e7:62:6f:68:4f:0c:e5:db:e3:74:
                    96:95:f3:c2:82:48:14:f8:00:ad:e3:bd:35:d2:cb:
                    84:40:2a:f9:b0:fe:06:af:63:30:db:bd:39:75:3f:
                    0e:7c:cd:2f:5b:81:e3:ee:e4:41:59:a5:51:51:a6:
                    00:c7:02:6d:d8:98:85:7f:b0:eb:44:26:04:40:8a:
                    79:77:6f:bc:60:0c:49:9d:b7:8b:45:fe:a4:70:e3:
                    85:32:b4:a0:ef:c0:e7:57:7e:b4:35:47:ca:cf:41:
                    f5:48:8e:3e:cb:a9:7c:f1:a2:b0:3e:03:f0:0c:5b:
                    fd:09:41:e9:d3:6d:57:04:1d:e6:c9:be:1b:f4:a3:
                    d7:45:41:b0:ab:f0:a3:61:3b:1d:a4:b1:1a:ae:41:
                    15:df:da:83:98:98:aa:cf:20:19:3d:83:38:e1:ce:
                    cf:7f:db:d1:0c:b8:98:24:aa:be:98:1b:fa:e2:35:
                    e2:f4:96:24:da:1d:59:83:a4:0a:a7:24:62:e5:e0:
                    f2:12:39:cb:fc:a4:6f:17:f0:a5:9e:35:29:69:39:
                    4b:e6:66:0b:63:21:b9:02:13:e5:26:e9:77:0b:e1:
                    50:d8:bc:6d:00:fa:38:2b:ee:f3:ee:30:59:75:b8:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F4:40:7B:C5:75:04:1B:27:F1:4C:71:DE:FE:9F:E7:3D:A7:4E:C5
            X509v3 Authority Key Identifier:
                keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:b1:f6:04:b8:2b:65:85:3e:b4:22:3c:1f:ad:48:19:ed:f3:
         5a:fa:84:4e:cc:c4:6d:1f:d7:8c:f1:5c:45:c8:8d:ab:fc:97:
         47:76:de:f0:6e:e6:c9:fe:aa:13:4d:1f:5a:ce:cc:5b:90:5d:
         9e:53:46:57:e4:fc:40:f6:ee:17:7f:24:3b:06:27:fc:49:b2:
         18:18:5f:36:62:cf:0d:15:c2:29:98:46:f0:aa:96:2c:0d:d2:
         da:e2:8e:c5:9e:66:d7:35:c2:de:0d:c3:cd:ee:6f:98:10:b9:
         86:03:67:94:5b:3a:dc:68:b6:15:81:a9:98:75:ee:ba:e1:52:
         15:03:c2:9c:e5:a9:a0:a0:f9:68:72:84:be:2f:ec:63:46:08:
         c6:ab:01:4c:a6:85:e9:cb:9c:6e:82:43:8f:d8:0d:62:9f:52:
         32:fa:8c:66:f1:41:32:00:fa:12:4a:da:40:68:bc:0a:09:d7:
         44:95:35:a9:d4:5b:9b:66:e5:c1:70:0b:fc:96:3c:2a:c8:3b:
         f9:92:48:22:3b:c2:1c:c3:fa:fa:b4:6a:e7:e7:f3:12:84:6a:
         17:c2:2f:16:c7:41:6c:94:31:1c:a7:60:7d:c6:be:40:4e:0d:
         04:8e:8d:51:30:0a:1a:a6:d7:6d:a8:a9:d3:e9:17:e4:63:60:
         e0:58:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:37:28 2025 by rpki-client