Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File:                     w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier:          oBhjY4XjRBnVwdRovwDGAmO8qH4XPoq6AmjrL5rLatY=
Subject key identifier:   F4:80:55:CD:C6:9D:9A:FC:81:88:91:09:30:E4:8E:7A:9A:EF:F7:CA
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer:       /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial:       019778D38A1C869C7F0EDD3083DB1556CF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 13:00:18 +0000
Manifest this update:     Mon 16 Jun 2025 13:00:18 +0000
Manifest next update:     Tue 17 Jun 2025 13:00:18 +0000
Files and hashes:         1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
                          2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
                          3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: OI/ZH2PmetDL8i/1gtlSsbWKrNXLT5vnA4HnLXODdnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d3:8a:1c:86:9c:7f:0e:dd:30:83:db:15:56:cf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
        Validity
            Not Before: Jun 16 13:00:18 2025 GMT
            Not After : Jun 17 13:00:18 2025 GMT
        Subject: CN=f48055cdc69d9afc8188910930e48e7a9aeff7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:9e:8f:e1:55:21:49:60:16:e2:c8:44:9b:
                    2d:7b:52:f0:2e:eb:d8:19:a0:38:ac:cc:2a:76:8a:
                    c4:64:d4:82:11:5b:50:ea:09:c7:08:20:3b:da:92:
                    36:e8:c7:7f:b5:d1:c2:6f:e3:9a:3a:5a:31:20:13:
                    bb:45:0b:03:97:c4:78:1b:ae:29:76:5c:2c:67:db:
                    df:f9:de:4e:1c:45:7a:eb:03:2a:ef:8d:99:af:93:
                    9b:e4:e8:c3:81:b4:1f:6a:a6:e5:55:a5:53:85:54:
                    70:a6:c8:82:d9:db:b0:f8:ef:ad:79:c4:4f:29:a3:
                    f0:1a:37:c3:ca:18:56:b6:50:80:cd:9b:9f:6d:81:
                    e5:74:81:7d:5d:aa:28:1d:41:c8:fb:9b:04:94:6b:
                    cd:a4:b7:2f:fa:b7:fd:17:07:1e:fb:eb:9f:36:5c:
                    25:c7:89:83:77:74:0f:0d:b2:6f:07:b5:c5:88:1e:
                    e2:eb:2b:cd:68:ab:da:30:fe:86:3e:e5:ab:a6:83:
                    97:81:bd:54:2b:d1:10:d3:bc:25:c3:f9:34:d2:b1:
                    56:a7:8c:d0:92:4b:f7:27:d6:02:74:d5:77:9d:b0:
                    ee:69:80:31:7c:7c:6e:4f:0b:d1:a4:c8:e6:48:ee:
                    ae:b3:42:f3:ff:ed:12:8a:9f:62:e2:31:9e:f4:29:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:55:CD:C6:9D:9A:FC:81:88:91:09:30:E4:8E:7A:9A:EF:F7:CA
            X509v3 Authority Key Identifier:
                keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:50:dc:22:bb:81:b6:83:40:0a:8a:87:d1:33:a7:71:77:c8:
         0b:87:ba:5d:5a:75:e7:08:de:1f:e7:90:20:2c:c0:d7:17:11:
         bd:0d:ba:7a:6f:74:93:74:bc:a2:60:6a:0f:66:e2:b8:0e:4e:
         95:10:23:4f:85:b3:42:f8:83:16:81:60:33:90:44:22:5f:a0:
         83:8a:bf:0a:1e:91:bd:93:37:60:dc:82:a5:09:83:d4:fb:bd:
         58:5d:f9:e1:a7:c8:4e:aa:80:84:82:9c:d1:37:d2:bc:71:c0:
         8d:c8:02:a0:d6:9b:77:14:4a:2f:d6:b1:a9:22:22:44:fe:a4:
         0b:03:23:cf:09:d6:7a:df:7e:66:2d:6c:c5:42:0a:92:1f:7e:
         bf:21:a4:25:91:0e:0b:42:2e:55:db:5e:94:80:c7:ed:e7:81:
         52:34:5e:b8:14:95:94:be:e9:31:f9:29:f2:80:d5:18:f4:84:
         8e:e3:69:bc:1f:1b:84:ff:5b:72:d4:12:ff:84:c2:14:21:60:
         f0:e9:28:6b:66:91:aa:a4:51:f2:40:bb:84:71:83:32:11:73:
         2d:70:32:cf:6f:bd:e8:b6:8c:19:db:f3:b4:3d:4b:be:d7:31:
         78:3d:fe:56:dc:3a:aa:a5:90:cf:84:23:92:0b:08:5a:56:44:
         3f:f2:fd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:18 2025 by rpki-client