Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
File:                     wC4yPxvhY8TX-LiKrY2q--AQbW8.mft (raw, json)
Hash identifier:          nkY/tZHzCu5mKPkAYeVLdHroyLyU5cIHy+9lp8fW3Xo=
Subject key identifier:   C9:76:8F:27:6D:C6:E9:00:B7:AE:C6:2A:11:F1:CD:CA:66:C2:F7:39
Authority key identifier: C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F
Certificate issuer:       /CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
Certificate serial:       0197B6A1C401CC3D68697BD2DCDA4BE87B16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
Manifest number:          D3
Signing time:             Sat 28 Jun 2025 13:02:24 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:24 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:24 +0000
Files and hashes:         1: wC4yPxvhY8TX-LiKrY2q--AQbW8.crl (hash: 5e6HAe45UM/0bgfTxF1xyowkolWWjwzi13EZjIVAqi8=)
                          2: z4hyHniAgsjhip0WWSLXoanCOdQ.roa (hash: M3AlMbZsNGFOvYnoOV0xvC8E+XBvcvrqkI0jCnJgG2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:c4:01:cc:3d:68:69:7b:d2:dc:da:4b:e8:7b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02e323f1be163c4d7f8b88aad8daafbe0106d6f
        Validity
            Not Before: Jun 28 13:02:24 2025 GMT
            Not After : Jun 29 13:02:24 2025 GMT
        Subject: CN=c9768f276dc6e900b7aec62a11f1cdca66c2f739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:15:6f:8b:b2:5a:8c:b6:0c:c9:d4:f0:68:49:
                    d8:4f:05:8e:88:8d:a1:34:dd:cb:56:53:29:97:90:
                    29:b2:fe:b6:71:1e:f2:54:48:e0:b1:f0:d7:60:82:
                    cd:9a:9c:f1:ff:bb:74:75:47:8c:d3:e4:1d:b4:f9:
                    09:52:2d:27:da:ed:11:69:73:1e:eb:74:65:fb:fb:
                    30:38:e5:53:fb:ff:cf:00:36:1c:e3:da:ff:3e:1e:
                    2c:7f:28:77:d7:cb:72:0c:a8:68:70:99:e0:be:6c:
                    93:08:57:62:ee:24:ec:4c:91:7c:eb:28:7e:a4:02:
                    63:de:90:cc:f2:66:c6:4a:87:6a:ef:13:3a:e1:22:
                    08:43:cf:7a:6e:a2:c0:6b:02:83:06:a2:fd:8d:64:
                    a1:67:85:f1:9d:db:00:86:1b:c3:09:ad:03:9b:9d:
                    7c:c6:bb:c7:16:c6:4d:d3:c7:0d:3f:c0:85:a1:90:
                    0e:54:f0:fa:e6:fa:28:d7:55:93:e2:ae:de:72:c1:
                    c5:0b:33:33:15:23:cc:34:3c:14:1e:48:f1:fa:2b:
                    33:13:92:f7:54:3b:88:98:74:51:a6:e6:7c:c1:3f:
                    48:d5:dc:39:c4:6d:02:4b:56:58:b8:a3:5e:4e:ee:
                    05:fd:66:7f:b6:41:dc:87:6b:0a:ae:53:30:55:01:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:76:8F:27:6D:C6:E9:00:B7:AE:C6:2A:11:F1:CD:CA:66:C2:F7:39
            X509v3 Authority Key Identifier:
                keyid:C0:2E:32:3F:1B:E1:63:C4:D7:F8:B8:8A:AD:8D:AA:FB:E0:10:6D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC4yPxvhY8TX-LiKrY2q--AQbW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/aaed6b-1434-47c6-a74d-1df1eccddc87/1/wC4yPxvhY8TX-LiKrY2q--AQbW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:4c:9d:d4:6a:80:71:94:fe:01:c5:69:06:0c:c6:63:fd:
         4e:41:3f:26:20:49:0b:9e:ea:98:3d:58:e0:a8:e0:53:73:a8:
         da:5f:49:f7:bd:56:8e:db:32:54:a3:3e:4a:1f:bb:57:45:38:
         f8:fc:ab:0e:6c:36:a1:ca:f8:8d:d1:71:b7:17:b5:6f:84:c7:
         1d:da:3f:b9:af:0e:4f:f7:16:32:8e:10:8d:f8:0d:dd:85:4f:
         f9:79:75:01:a7:d5:a3:b2:7f:28:eb:d7:f6:9a:67:e8:ac:38:
         ab:cb:70:d3:af:f0:04:77:74:d4:f9:a5:11:1c:b7:18:90:eb:
         ae:31:00:af:f7:80:c3:b0:27:7a:6e:73:7d:db:33:c5:10:3f:
         08:a5:50:a1:5f:38:7f:a1:b8:60:c8:9a:ee:9c:b1:b5:56:50:
         c1:64:bf:de:4b:7d:34:66:f3:06:f8:8c:74:6b:ff:ce:a9:49:
         6e:f3:a4:54:4a:06:19:73:5e:7d:a5:aa:f9:ad:8a:8f:ef:dd:
         fc:24:00:12:cd:96:7e:ba:cf:ea:e5:33:45:7c:67:6a:f6:0e:
         42:c0:4f:c3:14:cc:39:79:4d:4d:af:3b:e6:e9:11:10:74:e8:
         e0:14:ee:2a:3a:00:89:fb:ae:6a:5c:7f:05:2c:a0:f4:a3:1b:
         d1:ff:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:48 2025 by rpki-client