Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          BMkccU3SeDz1k9ssjZs5FHvROFRAYYQyYVIoILY5710=
Subject key identifier:   EE:BA:E9:59:C7:2D:E0:89:83:77:A4:61:44:10:81:08:A9:68:09:A8
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       01976FD10E90197BEF5A04A923936A5DC4F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 19:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:01 +0000
Files and hashes:         1: aU__37kt8ckO_YJQdDxx1zfJXr4.roa (hash: G2q1R6crWsWgIzSolrfZ7On3iNyzuy0vug1zXtUIFQY=)
                          2: ahMDGxNyecqlZxcgrlYmGrrq9pU.roa (hash: h30GXSYF139afkSTNjFaEpPAUr9XbrAvQRMhITWnZY8=)
                          3: mIknYG3WTBISQkb0avBlTMQBHO0.roa (hash: iFjLxQXc/Bjp4mKvj7ItM6hlDfEhly4nMW0gLz+f1Fc=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: qsyfCinl4d4+HWf0bRjZuXG6vKf8uW4VRFqSUIY8BLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:0e:90:19:7b:ef:5a:04:a9:23:93:6a:5d:c4:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: Jun 14 19:01:01 2025 GMT
            Not After : Jun 15 19:01:01 2025 GMT
        Subject: CN=eebae959c72de0898377a46144108108a96809a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:00:93:39:06:e1:7d:ae:3a:64:40:9f:a2:b8:
                    0a:61:19:5a:a2:57:e0:2a:8e:93:f6:61:d3:1b:f5:
                    4e:77:8a:19:da:0e:a0:bd:6c:cf:ec:e3:73:bc:c2:
                    64:ca:be:82:28:f4:85:72:e0:f6:07:f9:c6:a3:4f:
                    3f:02:c9:41:ea:eb:b2:97:e7:7f:57:26:7d:b5:ea:
                    9b:3e:80:63:4c:ee:67:5c:0e:88:f7:dd:1e:e8:5b:
                    37:bb:67:7d:2d:ee:76:7d:09:41:16:c2:05:2d:37:
                    9f:63:c3:fd:e7:d5:3a:46:d3:8d:45:65:a4:c3:89:
                    64:3e:e6:95:fd:15:5f:ac:74:4f:2d:55:da:9e:10:
                    91:ee:09:ee:24:bd:34:7e:ba:56:57:f4:15:d1:cc:
                    e9:3c:fd:33:f6:67:70:12:13:8e:3a:82:6d:8b:df:
                    29:68:af:b5:a0:5e:23:13:77:5c:b9:f1:4a:47:5c:
                    a1:9a:bd:36:ab:cb:5d:99:11:e9:59:f5:6d:b2:3d:
                    49:ed:7a:ac:2f:e7:ba:46:bb:82:f0:9b:d9:60:6b:
                    f1:81:6e:8c:db:d7:c2:7e:6d:08:fd:f7:bf:e8:b7:
                    5b:ab:c7:7d:93:55:77:a6:86:b7:ed:f5:2f:1a:2e:
                    8b:3f:7b:29:5b:64:f6:f9:02:21:73:fb:97:2d:29:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BA:E9:59:C7:2D:E0:89:83:77:A4:61:44:10:81:08:A9:68:09:A8
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:cb:17:57:dc:42:68:ae:1c:75:36:ef:e8:5e:c5:04:9d:4b:
         cf:1a:c8:61:ef:88:06:56:c7:2e:76:6e:15:20:61:2b:96:1e:
         ef:55:2b:22:3f:51:80:59:6d:14:e1:5b:bc:c4:bf:23:29:8e:
         f6:d0:13:59:8a:f0:9f:27:53:53:7c:97:df:a7:52:5b:db:b1:
         ec:ed:6b:f5:5a:31:86:35:bc:11:b8:d0:c6:c9:28:22:14:13:
         2a:04:51:03:65:25:cf:11:e9:af:a2:39:46:fa:0b:c1:17:d1:
         84:c2:ff:6d:3e:d6:ec:ba:42:ea:18:8f:64:c3:ae:b2:14:18:
         e7:fb:44:1e:21:80:cf:3b:41:28:97:ef:07:53:0c:53:72:95:
         85:65:8b:b3:da:c4:9d:b5:50:d0:0e:88:e4:27:76:9a:bc:a9:
         93:6b:c6:c8:49:a7:44:52:35:8a:5e:a7:43:ed:1b:b4:b0:85:
         ea:e9:96:88:71:f5:c2:a3:b0:94:68:da:ed:db:80:6a:87:5d:
         d3:c7:57:00:a4:6c:54:0c:55:00:9e:bf:42:f0:49:39:00:a0:
         84:90:4c:3f:1c:9d:f4:34:cc:ac:23:93:7c:b8:6c:1c:de:cc:
         8c:9e:6b:59:a8:b9:68:10:fa:a1:ca:d3:2e:8c:66:50:8e:68:
         be:07:eb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:31:02 2025 by rpki-client