Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
File:                     P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json)
Hash identifier:          ShnYtarUfN7N/nmqCXjmYqpObFg8uyWUXsM+mXyNsqo=
Subject key identifier:   97:D2:64:DC:91:61:B0:4B:6A:52:53:20:7C:BE:97:25:70:EA:64:76
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Certificate issuer:       /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial:       0197B6A12698BA28A5C7EC886EAEB2606F36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
Manifest number:          63
Signing time:             Sat 28 Jun 2025 13:01:43 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:43 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:43 +0000
Files and hashes:         1: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: KkFUewxBHj5ur5KLClO8x8kCROWDnlPqG+tt0f7x9X0=)
                          2: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (hash: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:26:98:ba:28:a5:c7:ec:88:6e:ae:b2:60:6f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
        Validity
            Not Before: Jun 28 13:01:43 2025 GMT
            Not After : Jun 29 13:01:43 2025 GMT
        Subject: CN=97d264dc9161b04b6a5253207cbe972570ea6476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:53:28:56:4b:56:10:23:db:20:62:db:df:a0:
                    81:41:8d:2a:58:af:42:5b:a9:8b:27:a0:63:84:cf:
                    f2:0a:f8:50:a2:74:be:51:12:2b:27:78:96:f2:38:
                    99:2d:37:10:d3:42:62:52:96:c8:aa:a5:5a:01:c8:
                    8f:88:c8:7b:e0:f4:15:63:f8:45:a4:8d:85:d4:bf:
                    a4:6f:91:56:17:79:57:89:94:cd:f1:7f:a6:c6:6d:
                    a7:8e:7c:7c:4e:c5:0b:ec:d9:e5:7a:a6:51:3d:22:
                    7f:fc:d1:58:d8:43:27:03:10:9c:cd:f2:0b:6f:1f:
                    95:d2:c8:73:a3:b2:d7:7b:71:f6:6e:18:68:30:42:
                    8c:62:76:ad:7e:6b:4b:86:22:69:28:74:bc:4f:40:
                    a6:18:5f:59:95:ee:04:ea:3a:3d:f0:1f:e2:8e:d2:
                    1b:cd:87:1b:ee:dc:3e:27:3e:eb:ab:3f:e3:7f:e5:
                    d0:d7:c3:8e:60:56:83:5e:56:7e:d4:e8:64:e6:0b:
                    7a:84:2e:c4:76:ec:ad:2e:fc:57:75:b6:6b:bf:74:
                    b0:91:19:ff:c7:58:62:d1:6f:2f:06:fc:62:3e:a6:
                    3c:45:7f:67:22:3e:a3:29:b6:01:ab:6f:5e:97:7a:
                    fc:a2:fc:56:6f:36:c8:93:ef:84:22:c6:82:6d:fe:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D2:64:DC:91:61:B0:4B:6A:52:53:20:7C:BE:97:25:70:EA:64:76
            X509v3 Authority Key Identifier:
                keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:ed:96:82:bd:22:d5:52:83:45:6d:4f:63:0f:f3:54:7c:
         d6:15:b2:96:14:3c:f8:46:e1:48:4e:71:98:8e:bf:30:cc:81:
         29:88:5a:e9:52:88:18:75:0e:ca:92:82:b8:42:08:80:b3:46:
         ec:19:53:9b:63:8e:3c:e2:fa:54:69:1d:1c:47:fc:ba:d1:fc:
         91:15:ad:1f:9d:6c:9a:5f:43:2a:68:0b:67:bf:5a:d7:65:2a:
         54:f0:8c:0a:1a:c7:7e:90:82:00:50:cb:0c:90:fe:86:01:12:
         b8:e4:ca:ca:d8:38:48:a4:c0:ce:a1:f5:6b:0c:31:89:55:d1:
         f9:e0:b4:f2:01:05:9b:0f:96:06:d0:c9:1f:43:7e:6c:3f:80:
         41:50:48:f4:a1:9b:cd:48:7a:58:db:04:29:ea:e1:3d:78:d5:
         13:c3:b4:e5:a5:32:26:19:a9:5a:bb:c6:cc:ed:d9:c3:b7:97:
         2d:fe:30:ec:d7:90:97:b6:17:66:a7:cf:96:aa:b4:72:57:4b:
         a6:4a:bc:8c:3b:b6:29:54:b7:93:1a:38:2e:6b:c7:b2:2f:31:
         e0:bd:40:43:36:98:c1:71:dd:30:e3:7a:2c:17:31:be:46:b7:
         3c:6a:3a:e3:39:33:e9:8f:38:82:77:05:6e:b2:2c:63:99:86:
         36:56:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:08 2025 by rpki-client