Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File:                     wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier:          9UmgVC9YHf2ytxmzgJyMyidFxScO5IpWeBHTNse/isM=
Subject key identifier:   AD:79:13:89:FF:EF:7D:14:F4:1C:C5:1D:29:FA:A3:70:48:75:F0:D8
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer:       /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial:       01976EBE55BC7051A5FBD10B485ABB118D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number:          0381
Signing time:             Sat 14 Jun 2025 14:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:56 +0000
Files and hashes:         1: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (hash: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=)
                          2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: 6zYT4sXrN7w4lcmsnBtsT5dBt+dousuX1oA0Luu1nVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:be:55:bc:70:51:a5:fb:d1:0b:48:5a:bb:11:8d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
        Validity
            Not Before: Jun 14 14:00:56 2025 GMT
            Not After : Jun 15 14:00:56 2025 GMT
        Subject: CN=ad791389ffef7d14f41cc51d29faa3704875f0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:28:a7:51:8e:09:50:cb:b5:db:25:40:1c:
                    f0:40:30:1f:e8:12:91:9a:58:12:9a:c2:b5:82:bb:
                    41:94:43:ef:c9:42:06:4a:09:aa:59:a7:00:2d:d4:
                    1b:48:85:73:c3:57:b0:a8:84:fb:5f:83:51:25:50:
                    f4:e8:6b:fd:19:08:28:da:ce:5f:cf:18:52:28:97:
                    9c:69:74:2a:31:f5:f8:44:a9:45:61:e7:fb:7e:10:
                    1d:18:bd:10:a4:61:17:32:e8:af:91:d2:5d:bd:02:
                    1b:8d:de:80:52:a6:9e:65:48:f0:1d:7f:df:05:9d:
                    a9:2c:40:39:d3:0c:54:16:c1:86:4a:9c:ea:f1:89:
                    28:c6:cf:a9:ce:1f:10:31:74:33:25:79:3b:58:e2:
                    94:c6:bd:e2:12:11:da:ec:58:24:c9:26:32:65:7a:
                    4b:44:39:64:4e:7d:54:94:bd:76:05:85:ef:4e:06:
                    42:74:e5:5a:6a:98:d3:fd:72:7f:1d:3e:ed:42:a9:
                    40:d8:9a:bc:b2:ef:6e:39:6d:63:d3:fb:bb:51:5e:
                    dd:03:ec:1f:ff:87:b7:a7:0d:4f:4a:47:10:05:8a:
                    79:cd:ea:ba:82:dc:d5:ad:71:b7:6f:13:54:bd:82:
                    06:bf:b5:fa:37:20:01:02:60:ed:48:14:9f:88:7a:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:79:13:89:FF:EF:7D:14:F4:1C:C5:1D:29:FA:A3:70:48:75:F0:D8
            X509v3 Authority Key Identifier:
                keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:96:de:66:55:40:7f:45:b2:e3:ad:d7:cc:fc:11:09:f7:97:
         7d:d1:fc:b5:db:24:e9:b7:cc:69:be:61:12:6e:c2:be:bb:f9:
         0a:b0:ae:c6:6c:0d:cf:c6:57:b2:e6:82:2e:43:20:5d:a7:8e:
         21:88:38:50:7e:99:a5:a1:50:eb:14:e6:07:59:16:ab:fb:e9:
         26:fc:33:b7:38:3b:82:56:4e:91:ad:2c:58:c2:3b:e9:86:39:
         a6:ec:d5:fd:c3:4c:77:75:a4:9e:8a:ce:e0:6b:6f:61:2b:58:
         1c:43:5f:07:57:5f:e9:b4:33:60:f6:bf:29:35:3c:2c:f5:b1:
         b6:d9:61:3a:2a:b1:ea:87:76:1a:48:b4:30:97:29:d8:a7:6e:
         f1:a5:0f:29:da:ef:a2:8c:70:e4:5f:90:03:d3:3a:08:9e:dc:
         ba:66:35:fd:8d:a7:59:d2:86:8e:4e:18:59:66:ca:62:58:4b:
         98:06:b3:e2:a8:b1:2a:83:1e:c5:9e:98:42:c8:a8:6f:5e:e7:
         a2:57:19:8e:33:d7:d1:01:7f:fc:ad:16:9c:92:5b:5c:e9:1d:
         a5:dd:43:c7:ed:ae:38:d8:92:5d:61:92:ec:4f:7c:40:4f:f3:
         da:6d:c7:27:63:85:12:eb:db:a2:25:b4:18:0b:ab:be:91:96:
         6d:db:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:09:16 2025 by rpki-client