Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File:                     WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier:          Uh8RElXPD9XfJpLXDl+p/ZejGu2TlmxvY2WIbHn0Pl4=
Subject key identifier:   F7:40:FA:A8:8A:AD:A8:BF:DC:EB:3A:BD:46:6E:39:30:25:85:15:A2
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer:       /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial:       0197B745AC978B05E03C5810C4776B71FB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number:          10FA
Signing time:             Sat 28 Jun 2025 16:01:26 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:26 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:26 +0000
Files and hashes:         1: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (hash: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=)
                          2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: ks6ZE9xgEypHbiG3k0jDkb2s7K9X4XXvbqQomkD/Mco=)
                          3: aKrvV8xBl8sCHisqRYKu_FgNh7A.roa (hash: VWMQXxpmmku9lvmyl+DypVcQSIrG+GnuaLnSwfYRfGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:ac:97:8b:05:e0:3c:58:10:c4:77:6b:71:fb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
        Validity
            Not Before: Jun 28 16:01:26 2025 GMT
            Not After : Jun 29 16:01:26 2025 GMT
        Subject: CN=f740faa88aada8bfdceb3abd466e3930258515a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:a1:c5:aa:85:31:42:9e:d2:87:1f:ed:56:
                    84:a0:29:a4:3d:a1:c7:9c:ca:16:a1:52:61:2c:4d:
                    d2:a2:9d:77:0e:54:78:e2:6a:1b:ea:e6:bb:c7:17:
                    bd:b3:6e:12:01:c1:44:9c:32:18:75:06:f0:56:1a:
                    28:15:87:47:35:8f:ed:cf:02:1a:61:20:0f:56:20:
                    ba:de:2a:68:4f:0d:0a:33:fa:62:55:93:f4:be:88:
                    25:d2:93:0a:39:10:d9:cc:39:45:cd:9b:fd:2d:c9:
                    97:15:d5:ff:24:c8:26:32:ad:ee:10:18:65:35:d9:
                    6d:62:40:a3:3a:c1:a6:6f:ca:99:d8:54:b6:87:e1:
                    bd:a4:3e:ef:94:5f:bc:2f:a3:38:37:97:63:72:6d:
                    32:04:e4:67:d1:e5:df:7d:00:c9:db:ea:d9:ab:56:
                    dd:7e:8a:ca:d0:8d:f4:94:73:21:d6:41:ff:a4:e6:
                    78:73:a5:ab:fd:5d:51:8b:f8:30:e4:f9:8e:77:18:
                    30:dc:32:15:09:ab:de:1a:c3:35:98:9e:32:3c:38:
                    72:ef:35:fa:bd:6d:d3:53:2e:b4:89:e6:a1:d4:ec:
                    1c:b1:d9:52:d1:77:8a:d0:c6:62:e8:09:78:6c:2d:
                    4d:f6:24:cc:bd:ca:05:27:d5:23:36:23:02:9b:65:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:40:FA:A8:8A:AD:A8:BF:DC:EB:3A:BD:46:6E:39:30:25:85:15:A2
            X509v3 Authority Key Identifier:
                keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4e:27:5e:4c:0b:5d:b9:b3:d7:e3:14:82:95:33:c8:21:f3:
         29:f1:be:39:21:90:b3:66:41:6d:90:38:05:23:0b:d8:40:1e:
         58:e7:d6:c6:5d:3e:91:cb:a2:30:9b:44:97:f9:ac:d5:99:d1:
         0d:c1:45:45:2e:4b:09:1a:b8:68:39:d9:88:cb:91:48:65:04:
         ef:bf:96:fb:94:f1:69:7f:15:f4:ea:09:9d:78:c9:bd:1b:f5:
         8f:3d:7f:61:e9:e4:50:9d:85:12:7c:68:41:fb:54:8d:43:fd:
         ac:57:40:21:b0:20:25:12:a2:d0:5c:1b:eb:2c:e3:0b:17:6e:
         74:87:40:c5:5f:04:f1:bb:d1:be:0f:1a:94:a2:61:11:3a:69:
         4b:ff:bd:0a:ff:cd:b4:59:24:6b:6f:43:90:f9:ed:3d:4e:96:
         99:56:66:98:c7:f8:6b:96:06:a8:f6:cd:ac:9d:e6:fa:39:0f:
         af:1c:a6:fa:15:70:bc:17:5c:35:fe:f0:b2:bf:5b:01:2a:5d:
         58:64:c3:5e:c8:59:1d:2a:06:a9:dc:8d:12:c2:7a:35:9e:2d:
         77:6c:8d:d6:8c:3a:27:a5:70:e8:10:52:b4:c6:15:c8:7d:72:
         72:51:b7:ff:94:01:c7:63:8e:15:1d:ce:01:4d:99:2b:fb:ba:
         ee:66:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:38 2025 by rpki-client