Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File:                     wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier:          TNJ+Lt3OW0dAPHr5Yq3O6gH3/rAy5c01QdxHijvbv8Y=
Subject key identifier:   F0:EC:EF:4E:2F:3E:12:24:B1:89:ED:AD:C1:F9:EF:79:72:A1:03:DF
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer:       /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial:       01987BD246EA025638E8B64D7709A6501AB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number:          0C60
Signing time:             Tue 05 Aug 2025 20:00:34 +0000
Manifest this update:     Tue 05 Aug 2025 20:00:34 +0000
Manifest next update:     Wed 06 Aug 2025 20:00:34 +0000
Files and hashes:         1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=)
                          2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=)
                          3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: eWl4/aDx5zZIGRIz/zith4xfDJTBVuzcL7FCXWZZczY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:46:ea:02:56:38:e8:b6:4d:77:09:a6:50:1a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
        Validity
            Not Before: Aug  5 20:00:34 2025 GMT
            Not After : Aug  6 20:00:34 2025 GMT
        Subject: CN=f0ecef4e2f3e1224b189edadc1f9ef7972a103df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:87:28:cb:7c:75:dc:2e:4f:e9:56:76:dd:
                    64:3b:85:6a:25:e7:17:8a:e7:c5:48:c7:ab:6b:18:
                    31:7e:00:b3:dc:aa:df:4c:9e:a7:55:1a:67:5f:16:
                    72:20:95:ee:5a:38:b3:52:5e:87:48:ac:64:14:ab:
                    25:36:f1:ef:1d:b1:fb:c4:c9:21:08:7b:87:35:f2:
                    d2:26:5c:83:5d:9d:ff:22:f4:65:93:47:0f:6c:ab:
                    1b:e1:33:08:60:c6:45:9a:e2:8d:b2:a5:aa:2f:34:
                    ea:66:f9:2c:9e:51:9c:6f:21:05:c5:6a:0e:65:d5:
                    df:a6:26:42:22:37:cf:22:3c:9a:83:f0:51:82:c9:
                    90:62:dd:1a:3f:cb:ee:16:0c:a2:23:f4:93:72:de:
                    66:08:ab:73:8c:4f:99:b1:0f:24:db:17:3a:c5:da:
                    a9:86:f4:3e:3b:0d:f1:54:e6:61:04:2e:38:6e:c9:
                    f8:8a:ef:57:8a:2c:49:ad:4c:e2:fe:e5:d5:a5:cf:
                    4c:51:f3:2c:05:5b:4c:85:c2:a8:90:0e:13:84:7c:
                    1b:56:f8:71:7c:f9:39:a3:de:8d:61:55:3f:b2:06:
                    0b:95:f3:4d:ac:3d:25:ca:8b:75:14:bd:3a:88:14:
                    5c:37:61:b3:e8:13:f6:b3:ea:f0:d4:cf:8e:15:d9:
                    15:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EC:EF:4E:2F:3E:12:24:B1:89:ED:AD:C1:F9:EF:79:72:A1:03:DF
            X509v3 Authority Key Identifier:
                keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:21:8b:3a:2e:92:ca:c1:e3:65:a3:3e:8a:03:06:fc:a4:2b:
         42:5d:94:be:81:a1:0b:3f:62:ef:2e:4c:af:b5:9d:6f:6d:32:
         1b:35:79:e5:34:b3:58:f6:8a:7e:eb:44:75:50:88:57:bd:f9:
         2d:4d:f8:b6:80:0a:ff:6a:7c:c3:af:a1:e3:86:93:67:ba:bf:
         e1:bd:b3:b3:5b:d7:83:a1:70:0e:d8:d0:c2:aa:2d:df:4b:8f:
         89:4a:39:2f:4c:81:e3:e4:69:95:c5:ca:37:18:fa:36:92:20:
         51:e3:10:9c:55:9d:1c:bb:22:59:bb:8c:78:48:0a:ab:22:74:
         c5:22:d5:22:8a:bd:dc:2d:b3:cf:a9:6f:cd:4d:0c:62:78:76:
         bb:c3:9f:55:d2:42:a3:3e:70:03:b6:3f:d3:01:0c:ec:b5:22:
         dd:d2:66:13:a4:d4:3e:d7:e3:ca:0d:99:8a:49:14:33:ab:25:
         61:94:1e:33:c2:f1:04:a4:7b:41:e9:e4:8a:26:7d:02:24:fc:
         a4:c8:28:16:51:57:ff:71:df:5b:30:a2:23:2e:d6:a8:70:6d:
         c7:f7:9b:45:41:15:91:b7:69:4f:1b:26:cd:12:83:fd:56:c0:
         35:e7:02:98:d6:6a:bf:00:aa:a2:fa:09:ae:93:dc:42:4f:4a:
         e8:96:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:33 2025 by rpki-client