Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          VoI44qwpMltTM9crmwl97ORPK4k04YGo2rlE0Aml4yo=
Subject key identifier:   88:36:5F:53:42:A6:29:A6:FC:99:C9:4B:50:FD:1D:C8:C1:8D:5F:62
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       0197B5C4D14E53E0348E2B83AFBAC887AE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 09:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:04 +0000
Files and hashes:         1: QHN1mo-chw8woBmyHxpHaobOHVY.roa (hash: xauKLlFs3GtWKAmak4uwPaBujz4eKBRABiwipmCaZzM=)
                          2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: rLutfLr5MydKHK1a56m2GYD4Gy3SLhT3ZtfsxD6O3G8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:d1:4e:53:e0:34:8e:2b:83:af:ba:c8:87:ae:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: Jun 28 09:01:04 2025 GMT
            Not After : Jun 29 09:01:04 2025 GMT
        Subject: CN=88365f5342a629a6fc99c94b50fd1dc8c18d5f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:2d:83:94:2e:db:39:cb:5d:e4:c3:ca:f3:
                    d3:a8:c7:4f:71:72:83:3c:f5:9e:f1:ce:da:9e:fc:
                    f6:06:80:fc:33:65:a6:b1:6b:df:4c:74:eb:d7:b8:
                    9c:79:53:e7:bc:41:a5:4d:32:4b:c6:91:35:55:96:
                    c4:65:19:83:11:0f:62:33:56:0b:91:1f:f1:14:bb:
                    fd:8c:25:35:ee:87:76:af:15:91:1d:62:ba:74:48:
                    4e:a4:c0:3a:36:0c:8c:4d:dd:b8:ae:c5:59:00:4c:
                    2f:99:7b:cf:5a:2d:11:0d:a6:10:b2:7e:fc:47:e2:
                    bb:ad:4e:6c:c0:b0:c2:fe:95:20:b4:8f:c8:df:cc:
                    82:31:fe:ce:e5:b1:be:81:b2:a7:41:91:09:ea:17:
                    76:7b:c3:b4:7d:04:81:b0:c8:6e:62:47:8c:d7:35:
                    20:03:d8:96:af:6a:e6:61:2b:ec:45:ed:6e:35:16:
                    5e:2c:73:24:c4:30:7c:6f:af:c6:8b:88:66:32:50:
                    2c:ab:0f:28:fd:25:40:1f:f8:22:7a:23:bd:3e:51:
                    0c:5a:22:1c:03:26:5a:2b:8d:24:a5:05:6b:98:b3:
                    5c:6a:af:2a:95:4e:46:14:ff:85:47:d6:e0:3b:ac:
                    5d:40:7f:a4:8d:0f:f0:aa:2f:a8:56:82:dd:4a:0a:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:36:5F:53:42:A6:29:A6:FC:99:C9:4B:50:FD:1D:C8:C1:8D:5F:62
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:fc:5d:ad:9b:55:82:14:01:7c:be:33:74:f7:81:96:c9:
         d0:bb:d8:64:37:50:b6:35:2c:dc:d8:a4:af:ba:85:97:b9:57:
         7d:dd:64:93:54:a2:32:de:97:2f:7f:ca:42:18:3b:55:7e:35:
         da:38:b8:f3:e3:93:64:b9:27:53:e7:65:7c:44:8f:ab:7f:0e:
         df:78:70:16:09:f6:3a:d3:e2:30:9e:0a:91:7d:8f:e6:fd:fa:
         97:56:02:ae:41:a3:30:aa:63:ed:e6:31:f7:4b:1d:c1:cc:56:
         68:38:f1:39:3e:98:02:1e:99:a0:c1:b5:d2:e7:1a:79:7a:56:
         bd:5e:ab:eb:f8:8d:12:bf:74:ca:57:08:69:49:08:2d:cb:cd:
         a8:00:e7:13:4c:a8:10:65:01:51:1e:1f:18:03:5a:d1:a1:23:
         0c:7c:59:fe:3e:c2:67:42:16:d1:17:4a:a9:b9:5e:05:61:bf:
         c4:f1:08:b9:e8:23:ce:d8:d0:fc:0e:33:b8:6b:94:7c:6f:7d:
         64:58:70:37:18:fc:2d:ba:d9:b6:d4:76:3a:be:d0:db:c6:ef:
         2a:75:22:f8:70:33:e5:ff:cc:6b:8e:51:99:cc:0b:49:ad:16:
         e3:9e:a7:07:29:f3:0f:87:cf:08:7e:2a:5b:95:58:eb:a3:a5:
         1a:42:34:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:50 2025 by rpki-client