Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File:                     dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier:          M+4OviYNePpVFNY3dtererhexmi78p8nh1ZL1/e6aV8=
Subject key identifier:   88:CA:2A:51:F0:A3:93:85:5D:D5:1B:1A:65:63:0E:0D:EE:57:C7:68
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer:       /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial:       019781328068CCE9E20AA9E8B52F63AA2DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number:          1532
Signing time:             Wed 18 Jun 2025 04:00:59 +0000
Manifest this update:     Wed 18 Jun 2025 04:00:59 +0000
Manifest next update:     Thu 19 Jun 2025 04:00:59 +0000
Files and hashes:         1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: aQ9jaPZ6St2KFMHkHMBeo6opLwZ6kIA4aM9DfdJoBAo=)
                          2: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (hash: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:32:80:68:cc:e9:e2:0a:a9:e8:b5:2f:63:aa:2d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
        Validity
            Not Before: Jun 18 04:00:59 2025 GMT
            Not After : Jun 19 04:00:59 2025 GMT
        Subject: CN=88ca2a51f0a393855dd51b1a65630e0dee57c768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:5f:c9:45:ac:6a:8b:a2:3e:8b:55:ac:26:
                    51:62:24:32:31:21:06:47:59:f1:60:a1:ba:15:96:
                    a1:8f:76:77:d9:3f:94:8d:05:83:22:1f:03:5d:44:
                    c2:9f:df:e4:2f:bb:74:6a:fa:e3:16:be:b4:99:4f:
                    34:24:11:93:d8:43:61:52:5e:89:5c:ce:67:3b:8a:
                    30:a8:85:bc:b5:9b:20:2e:1a:17:4d:a1:fc:11:c2:
                    f6:00:fc:15:8a:23:25:b3:26:de:49:cf:1e:c6:b4:
                    09:0c:bf:40:ad:16:ef:70:8a:05:95:95:13:b3:5d:
                    36:ee:05:54:cf:80:a8:29:8d:7f:52:11:5a:54:33:
                    ff:f4:28:35:fa:60:0a:8b:69:d4:94:a4:c3:5c:78:
                    16:6d:b2:d6:ce:54:bf:fd:28:90:5d:d7:eb:92:51:
                    7f:35:3c:2d:62:40:11:bd:a8:98:df:8e:06:ad:f2:
                    08:e1:f9:c8:2d:59:50:3b:fa:73:bd:38:a4:0b:be:
                    42:75:9d:a1:49:4c:25:3e:39:c0:c8:9c:ba:a5:b0:
                    0d:ab:67:fe:5e:d0:f9:67:c2:cf:0f:fa:b7:9e:5e:
                    d3:3b:25:f9:10:a7:c5:4b:4d:5b:8c:1b:05:41:4d:
                    12:bf:1d:33:d0:e4:8a:4b:94:a1:24:2d:92:e3:00:
                    82:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CA:2A:51:F0:A3:93:85:5D:D5:1B:1A:65:63:0E:0D:EE:57:C7:68
            X509v3 Authority Key Identifier:
                keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:8b:ee:14:20:e7:d9:eb:b2:e2:8b:9e:eb:54:0a:76:d6:
         e0:74:53:0d:cf:02:5a:f5:d4:15:f0:8c:4c:91:f6:20:7c:50:
         e8:ae:1e:90:15:85:65:60:20:23:7c:e6:13:13:5b:59:c6:4d:
         e0:8c:e9:04:07:f8:b6:df:c7:78:89:91:41:3e:60:f7:74:b0:
         69:e8:21:16:f3:ed:74:a9:c7:e4:a5:47:3a:3f:0e:e0:d2:b7:
         1e:82:f0:d2:71:17:a5:df:19:75:4e:93:85:ad:1e:bc:87:02:
         41:b7:88:3f:51:e4:77:90:70:02:d5:73:f7:bd:00:55:53:17:
         59:d2:0b:38:8b:14:4f:7b:ca:34:39:a4:23:fb:18:5f:0b:22:
         0f:59:86:03:64:c8:69:65:96:d2:54:d2:64:06:9c:0a:13:7d:
         bc:8b:bc:04:51:5f:60:df:f8:b6:5f:b7:2a:8d:66:61:79:ed:
         c0:cc:d7:21:3a:af:0c:00:ea:6e:2f:36:f8:ff:0f:da:fd:51:
         51:62:ff:e1:a0:c7:0d:f7:09:6c:0a:08:1c:e2:cd:b0:82:85:
         a2:62:53:9c:ce:e3:42:8b:ee:ed:67:a5:1c:9d:94:fb:26:2d:
         4e:2b:0a:75:13:bd:94:51:ab:dc:f7:d0:bd:37:a8:40:72:6a:
         ad:43:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:17:36 2025 by rpki-client