Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
File:                     w9yyPepY-X-tWnl7RXdB1b_msbA.mft (raw, json)
Hash identifier:          l65NLX4oEzZhxcQs7P/9oe7GO7cQRPlXzOV8CDHgTr8=
Subject key identifier:   F6:94:C9:15:48:61:D2:AD:34:12:05:9A:A5:06:D1:E7:05:AE:E6:34
Authority key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Certificate issuer:       /CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Certificate serial:       019774529A30D3CF3619415F8CD04318E9AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
Manifest number:          1593
Signing time:             Sun 15 Jun 2025 16:00:59 +0000
Manifest this update:     Sun 15 Jun 2025 16:00:59 +0000
Manifest next update:     Mon 16 Jun 2025 16:00:59 +0000
Files and hashes:         1: KvTnsIcL8m_pQPoNHudO5mxyd6I.roa (hash: LQX5cYypJwp0YO63rbhroJGzv3tgP3X96RXpqlbq7V0=)
                          2: w9yyPepY-X-tWnl7RXdB1b_msbA.crl (hash: XdoAXWD2hI5pcIEBoKJ6lOB77vrY/QnlM4iQ97zbU/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:52:9a:30:d3:cf:36:19:41:5f:8c:d0:43:18:e9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
        Validity
            Not Before: Jun 15 16:00:59 2025 GMT
            Not After : Jun 16 16:00:59 2025 GMT
        Subject: CN=f694c9154861d2ad3412059aa506d1e705aee634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:88:17:1c:97:73:2d:b0:a0:65:2a:39:e5:
                    c4:6e:aa:62:52:9a:b9:6b:7e:3e:ba:45:f3:b6:16:
                    d8:28:ba:d9:19:89:5b:3d:d3:08:97:53:56:88:20:
                    83:f0:a4:79:29:bb:08:61:9f:de:d9:f7:f7:8d:c3:
                    be:69:af:bb:4b:b6:1c:00:81:c5:d4:b0:1b:9a:3a:
                    50:12:03:84:e6:93:2f:7d:55:7d:9f:58:05:6f:04:
                    04:42:2a:ad:c1:f0:96:7f:7d:c0:1c:e3:24:43:0d:
                    ed:9c:e5:91:ad:9c:9a:f4:af:d3:16:4e:93:34:ce:
                    14:a4:c4:18:7d:c2:c7:ff:7b:6e:1a:41:d6:d2:5f:
                    d8:99:eb:04:24:d9:26:dd:dc:b3:10:f7:02:79:39:
                    0e:59:bd:25:ac:da:73:bb:e6:88:8c:69:78:18:72:
                    74:c3:76:c4:ed:10:0e:36:d8:cc:d9:95:f9:00:10:
                    35:34:b2:29:97:37:3b:d9:99:6d:55:84:86:64:5e:
                    ca:63:a4:a1:93:7f:26:7e:db:1f:03:2d:01:31:c1:
                    71:7e:88:50:ed:99:f6:ec:cf:f7:60:d4:f5:e7:9c:
                    03:17:c6:13:8b:7b:7f:42:c9:aa:fd:f6:7d:de:e0:
                    50:ac:0d:57:df:f8:2d:28:b4:74:14:78:d9:63:d2:
                    e7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:94:C9:15:48:61:D2:AD:34:12:05:9A:A5:06:D1:E7:05:AE:E6:34
            X509v3 Authority Key Identifier:
                keyid:C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:43:0c:03:b0:8e:10:b3:f8:e8:33:ae:80:3f:68:5b:84:
         f4:13:49:7f:7b:41:76:d4:25:5b:d2:a7:3a:93:49:74:0c:d4:
         e1:14:e1:58:e0:15:b0:ad:de:a0:c4:e1:c3:36:c0:6e:63:24:
         86:de:04:b0:c0:1d:6a:82:cc:a2:02:26:84:cb:05:9c:f3:de:
         75:ec:74:07:4f:46:61:46:c6:22:ed:d4:99:c5:c7:3d:b3:b3:
         6a:0f:53:8d:a3:0d:52:82:62:f5:df:27:76:27:87:d7:3d:75:
         2b:f7:76:d1:d0:96:f5:03:2c:74:27:78:b4:e8:ca:72:3f:ba:
         e2:59:ca:02:bb:c9:90:d2:3d:cc:ef:b7:24:ac:0b:a1:c0:35:
         03:c1:cb:26:3a:ab:76:84:e4:a8:d6:a0:88:ea:b0:53:e2:37:
         62:78:a7:e0:f9:61:e8:f5:fd:95:1a:27:6e:36:a9:ef:96:4e:
         67:2d:83:b1:28:37:7b:e5:b9:04:96:37:6e:63:d1:53:01:ca:
         06:e1:76:94:b1:08:5b:5e:ad:2b:d5:11:cd:86:53:b2:ce:7f:
         fb:cd:45:f0:86:2d:7c:2b:24:fa:22:a3:87:85:d4:97:a7:07:
         3f:b3:a2:35:fc:49:48:c7:d4:10:84:24:32:d4:99:58:9c:54:
         b1:a4:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:02:56 2025 by rpki-client