Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
File:                     wbYHxYUVNn03yfPmmUguV6M8c_U.mft (raw, json)
Hash identifier:          S8JotuvwPH5a62N2XGEC6kxQcfNCOGDfj8ZXZODlqSs=
Subject key identifier:   4E:91:4B:A8:EE:E5:93:12:1A:A8:4A:28:F5:89:02:E6:75:64:6E:F0
Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5
Certificate issuer:       /CN=c1b607c58515367d37c9f3e699482e57a33c73f5
Certificate serial:       01977753B00102015460CF8473EFE40FE7FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
Manifest number:          12A1
Signing time:             Mon 16 Jun 2025 06:01:02 +0000
Manifest this update:     Mon 16 Jun 2025 06:01:02 +0000
Manifest next update:     Tue 17 Jun 2025 06:01:02 +0000
Files and hashes:         1: MnIaRmi-qtJjMOo5DcZACYHEh7Q.roa (hash: DOu8g3e2V+bo5Ia9CdK+7hGNXc1/nocclAIwTEkGmxQ=)
                          2: wbYHxYUVNn03yfPmmUguV6M8c_U.crl (hash: v3aspmy7LDHR41seF32CWX60a8gyOcdFzsMms8+17nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:53:b0:01:02:01:54:60:cf:84:73:ef:e4:0f:e7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5
        Validity
            Not Before: Jun 16 06:01:02 2025 GMT
            Not After : Jun 17 06:01:02 2025 GMT
        Subject: CN=4e914ba8eee593121aa84a28f58902e675646ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:6c:dc:d5:5a:57:22:c7:6c:97:b7:47:a3:
                    53:d1:46:b9:fb:94:28:0f:23:aa:01:d9:19:85:d8:
                    92:0e:a2:10:c9:6b:e0:b8:4f:0f:96:65:e8:0e:b7:
                    6c:5d:8d:09:d9:09:8e:7f:df:80:bd:de:ac:a0:bc:
                    1c:90:75:93:6b:e7:6a:4b:8d:3b:1f:f4:6f:4a:59:
                    96:fc:33:93:56:34:5e:16:26:fa:d3:e2:8f:b9:bc:
                    29:b6:6d:bd:61:50:00:10:b7:4c:01:07:74:c4:3f:
                    3c:c7:6d:1c:69:21:a0:0c:16:17:60:7f:4c:6a:41:
                    17:26:e1:7a:2e:3c:6d:17:fb:63:3d:94:f8:17:bc:
                    6f:25:0f:7e:0d:88:14:f3:1a:15:6e:29:fa:f5:40:
                    6a:8b:1f:44:3d:1b:c2:50:86:fa:bb:b7:67:00:ea:
                    5e:e7:4e:66:4e:1e:d7:8d:36:5c:ae:b6:bc:4e:e9:
                    41:ea:67:b3:06:db:90:22:ec:a1:9c:29:25:e8:d1:
                    03:ef:5d:09:07:f4:9d:8d:31:d0:6d:b5:ef:fb:f5:
                    67:67:75:30:a2:1a:de:d8:5e:5d:d1:f4:c2:41:a6:
                    0b:42:d2:da:f4:c8:0e:6e:03:33:d5:79:01:3a:9b:
                    99:97:0d:f3:a0:0a:82:0d:ff:7b:43:17:d9:47:fb:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:91:4B:A8:EE:E5:93:12:1A:A8:4A:28:F5:89:02:E6:75:64:6E:F0
            X509v3 Authority Key Identifier:
                keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:af:65:9b:b1:b1:79:7b:b7:1f:32:43:3d:95:8a:d6:b1:f3:
         ab:fe:13:14:e7:a3:9f:3f:c2:b2:6b:d5:25:bd:8a:e4:9c:07:
         82:09:18:c2:1d:1e:0e:3b:6e:6d:53:6b:c7:67:e4:b9:3e:2c:
         b7:68:6e:32:56:37:0b:31:67:3d:66:97:30:fd:96:05:e9:dd:
         e4:d2:e0:b3:34:c6:b4:2e:81:22:be:36:4d:b3:ca:c2:ac:f0:
         d4:12:73:6d:fb:51:da:49:82:0e:e7:8c:b2:95:47:11:ee:03:
         28:65:d9:29:13:2e:a1:8b:d9:37:ab:11:47:89:2d:b0:5f:b0:
         64:95:71:c7:b7:15:cb:be:d8:77:b2:9b:cb:53:37:b1:82:3a:
         b9:39:23:da:b9:30:a1:23:4c:3b:53:d6:bb:be:6a:3a:2a:07:
         ef:45:e1:b2:23:b9:b7:62:58:ec:ef:15:da:e6:a5:23:c4:ce:
         42:6b:bd:51:ab:6e:4d:4d:9e:1b:bd:77:e2:e5:32:95:f5:9a:
         4f:8a:fb:bf:00:aa:d3:c1:34:bb:5b:61:0b:a8:ec:b1:c4:00:
         21:df:12:14:3a:86:ab:8a:1d:21:c3:d9:a3:2c:2c:94:b3:2e:
         ff:d6:a3:fc:09:cf:58:91:25:2e:ba:7a:07:85:71:67:eb:16:
         30:d2:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:57:04 2025 by rpki-client