Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File:                     wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier:          yfV5L5JstOuu8RUYEdRpPjWRfJAU1sChP3A+D+azk5w=
Subject key identifier:   D9:F2:86:ED:D3:4C:67:56:FC:C0:9E:76:27:B6:22:06:D5:DC:DB:CD
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer:       /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial:       0197B6D798EE5363A5F26DBBAA54B48C4132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 14:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:12 +0000
Files and hashes:         1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=)
                          2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: xjEoDT6a8a6P3kILiEzG9P9pHqnyKtAvTEUSZ1dbWvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:98:ee:53:63:a5:f2:6d:bb:aa:54:b4:8c:41:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
        Validity
            Not Before: Jun 28 14:01:12 2025 GMT
            Not After : Jun 29 14:01:12 2025 GMT
        Subject: CN=d9f286edd34c6756fcc09e7627b62206d5dcdbcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:2a:5f:bb:d9:07:97:cb:f4:13:7d:3e:66:
                    55:09:45:a3:d4:06:4e:13:57:36:13:26:20:d1:e8:
                    79:0b:af:b7:78:8c:98:bb:ff:09:1d:f6:b5:96:4a:
                    99:ba:d9:97:58:12:94:ce:9b:8b:95:2c:29:e0:ca:
                    1e:36:49:5e:d1:a3:bc:43:ec:61:da:3f:1c:5c:6f:
                    7b:d6:4b:09:5d:c3:0a:a5:53:4f:d3:6e:e4:d3:18:
                    76:9a:e0:80:39:89:6f:1d:cf:f0:b3:1a:77:ca:cf:
                    25:cd:ca:a1:35:77:43:d9:0f:bd:00:34:45:3e:6d:
                    eb:66:de:06:bd:ea:21:de:42:17:50:ca:bf:21:f9:
                    3a:22:9c:1b:63:02:b7:f8:3e:a1:3f:dc:e8:fa:db:
                    6d:aa:ad:7d:95:5d:e2:bc:64:ca:8c:3f:6a:b7:6f:
                    f2:47:0c:b8:41:83:a5:28:d4:70:9d:a7:7b:d9:37:
                    78:8b:04:bc:5c:b2:91:ed:6e:d6:ef:e2:5c:0d:6b:
                    62:99:da:fe:1e:05:02:eb:b5:54:a8:92:26:5c:a2:
                    ec:dc:07:b3:ea:5a:96:cf:28:f9:2a:5a:0c:6b:8b:
                    9d:bc:88:d9:ca:2a:5d:21:f9:58:41:c4:91:f6:be:
                    72:7f:4e:cf:7c:35:f7:71:f1:52:00:a3:e1:b2:d9:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F2:86:ED:D3:4C:67:56:FC:C0:9E:76:27:B6:22:06:D5:DC:DB:CD
            X509v3 Authority Key Identifier:
                keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:38:68:df:c0:26:7a:a8:90:bc:ca:64:23:79:fd:de:e0:
         f8:05:d3:eb:19:8b:da:a1:2d:75:f1:01:e7:5b:3a:98:5f:96:
         e9:bd:97:93:fe:89:08:a0:f5:0f:36:a5:ee:5e:cc:45:85:5d:
         c0:35:c7:ae:30:8a:4f:2d:0b:6e:3e:a5:0e:c3:a9:a5:bd:71:
         08:a8:21:d3:82:b1:a9:3b:5f:3c:4d:93:31:5f:cb:fa:a1:7c:
         45:28:b2:52:38:9a:b1:88:ce:a2:d7:36:3d:a9:e5:2c:90:52:
         33:86:f4:28:71:7b:86:58:52:f1:b1:c4:50:f3:de:85:58:9c:
         8c:7f:d9:93:0c:47:ab:b3:f5:f5:79:90:7e:95:38:6d:d3:ee:
         16:43:31:4e:77:57:28:17:11:b2:9a:1c:e0:88:0e:52:86:64:
         fc:f8:9c:5c:69:86:d2:1a:89:de:85:5b:8c:88:e8:00:a5:d3:
         76:0b:94:c0:9e:42:9d:72:3f:b1:74:7f:40:8e:89:1a:7b:0b:
         ef:f7:62:73:b1:03:48:cd:54:c0:16:80:ae:5c:d3:57:44:6d:
         52:b9:27:79:8c:be:01:56:62:ea:c9:48:27:88:40:7d:68:5a:
         91:8d:a5:e0:e7:bb:cd:74:c3:22:72:bd:d5:12:28:59:dd:a6:
         a1:c0:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:24 2025 by rpki-client