Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File:                     weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier:          NDrDdh0Tk3WnQ1i+SWfH20u0HgAadb6NO0tteYdw97o=
Subject key identifier:   63:4D:F0:0C:45:B8:2D:9C:27:EC:0B:D1:50:96:9C:E4:44:FD:A6:0B
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer:       /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial:       01976C2B2233DFEC0A5549D248E678B7D293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number:          1406
Signing time:             Sat 14 Jun 2025 02:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:55 +0000
Files and hashes:         1: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (hash: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=)
                          2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: 5DYX7Svxr5Fv0ouZPcZOBgYjxxv/xgagr3kZL9LNJBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:22:33:df:ec:0a:55:49:d2:48:e6:78:b7:d2:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
        Validity
            Not Before: Jun 14 02:00:55 2025 GMT
            Not After : Jun 15 02:00:55 2025 GMT
        Subject: CN=634df00c45b82d9c27ec0bd150969ce444fda60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:15:18:4c:5b:be:74:54:73:6b:17:2d:c5:
                    53:b0:b0:ff:72:0c:12:c1:dd:b1:dd:38:79:9c:76:
                    e3:27:69:01:4b:27:92:68:52:7e:78:2c:62:e4:a0:
                    af:ac:13:ec:2a:39:96:1d:f4:00:2b:20:3f:fa:83:
                    bc:87:30:86:e6:c5:10:92:a3:0e:5a:8c:ac:70:17:
                    e9:1d:82:31:1b:df:1b:7d:fd:3e:be:42:e4:4a:e9:
                    a6:c9:6f:de:d4:79:a2:62:9c:37:35:4d:34:17:be:
                    3d:8c:10:08:a8:b9:d8:0a:80:d2:6a:c0:8a:30:c7:
                    5c:77:1c:25:a9:5c:6b:6d:b3:91:89:a6:b1:8a:40:
                    dd:d8:1a:32:ac:74:8a:75:84:19:6c:b9:e1:d0:d2:
                    8d:22:28:97:2d:0c:58:b7:c9:b6:6a:37:ce:37:ce:
                    e3:13:37:1b:9e:80:a5:19:d8:d5:cb:6e:38:45:f5:
                    e7:79:c1:6d:e6:fb:7c:b3:0a:41:33:94:98:f4:f5:
                    ba:4c:52:1a:b9:40:41:0b:f9:a7:3f:b7:69:bc:5c:
                    ab:e9:56:c1:3a:d4:b1:60:bb:4c:ee:57:9c:f5:a9:
                    23:5b:54:43:a5:31:3b:18:4c:e8:d7:db:ee:66:c2:
                    d7:85:95:52:3b:90:f4:ed:fe:41:cd:3a:92:2a:57:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4D:F0:0C:45:B8:2D:9C:27:EC:0B:D1:50:96:9C:E4:44:FD:A6:0B
            X509v3 Authority Key Identifier:
                keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7f:83:40:f5:2f:5e:97:b2:95:87:6d:37:e8:9c:6f:59:b9:
         a9:09:26:cc:c6:7f:7e:f9:98:44:6e:4f:1c:a3:4e:21:83:df:
         8f:79:96:13:e2:c1:d8:49:8f:50:a9:f9:8f:f8:83:62:c8:ce:
         96:83:f6:a3:ed:76:c2:b7:0e:b7:f5:24:e1:6a:91:1d:fa:f8:
         67:58:00:7b:bd:15:6f:29:14:76:78:3e:83:fd:71:56:6d:51:
         9c:57:15:7b:a7:8c:2e:d2:33:1b:79:79:04:1f:7a:45:a5:5a:
         13:a3:a6:6a:77:e6:30:38:bc:ca:9f:ca:b3:31:7b:a4:10:85:
         35:e4:e0:42:ba:e6:3e:89:41:5a:67:37:16:1b:ed:31:82:f2:
         da:96:79:dd:8c:c1:0c:b8:c0:0e:9a:8e:49:2c:9e:0d:b2:b8:
         65:f5:7a:34:c8:01:a5:8d:41:2a:e6:df:5e:4f:32:7c:cf:d3:
         1d:a3:38:b8:60:c4:a2:23:73:55:d6:69:cd:27:cb:cd:30:33:
         b3:f3:98:85:d5:ab:66:9c:6e:32:b0:33:6d:de:21:1e:db:9d:
         c4:d9:cc:ed:74:f0:e5:16:bd:43:a6:5b:fa:6b:fb:81:0c:ab:
         17:a6:2e:02:7a:fe:87:b7:db:94:10:7a:02:99:cd:fc:8e:f7:
         3a:b5:87:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:15 2025 by rpki-client