Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File:                     wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier:          OiUf4rZeWIEB95k5TdkX0uodw4je4D5F3DCTua58zD4=
Subject key identifier:   FF:BE:BB:B0:EB:2B:E5:71:68:DD:31:C6:51:0B:AB:13:42:6A:BA:BF
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer:       /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial:       0197B70ED88EFFC9FD1A64A59A7F05340367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 15:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:32 +0000
Files and hashes:         1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=)
                          2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: D9qnFJJxxOal0aifPMfsdWgv6bE+0nbcXQC5/4uRNOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:d8:8e:ff:c9:fd:1a:64:a5:9a:7f:05:34:03:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
        Validity
            Not Before: Jun 28 15:01:32 2025 GMT
            Not After : Jun 29 15:01:32 2025 GMT
        Subject: CN=ffbebbb0eb2be57168dd31c6510bab13426ababf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:25:fb:e0:15:37:de:bd:3c:9f:0a:59:7f:
                    c6:f1:0f:9d:4e:7b:10:24:78:bd:98:e4:3c:1d:3b:
                    a2:7b:20:71:6a:7c:e5:af:fd:b2:a7:29:1b:98:ec:
                    56:6a:12:a9:92:18:72:5b:f1:f5:88:05:52:5f:7d:
                    f0:75:80:e5:cf:34:2e:f0:fe:17:5a:6b:6a:c1:4c:
                    12:c7:cb:05:cb:16:65:81:65:b0:e6:2a:dc:ee:bb:
                    f0:b4:85:e5:5f:16:00:23:25:c9:26:26:71:eb:82:
                    b7:58:1f:f1:dc:10:72:2a:25:05:3c:22:e0:07:c9:
                    3b:97:bb:38:c3:d8:6b:63:1c:b7:6a:74:24:13:6f:
                    9f:96:1e:2f:a4:ce:f7:41:85:29:4e:98:8c:19:d7:
                    df:1d:22:80:25:e2:0a:65:29:65:7a:94:06:8c:38:
                    74:db:20:76:7b:75:86:51:84:9a:38:92:c3:bf:f8:
                    47:bf:e4:40:f2:d6:2c:a2:ae:7f:88:73:a6:66:fa:
                    2c:4b:d7:c2:fd:33:b4:ab:d5:03:64:67:7b:83:64:
                    a2:f1:42:a9:39:f6:e8:3a:89:d8:de:b9:cd:68:e3:
                    ea:13:a6:ff:f2:2e:78:90:16:b4:4a:43:f1:3c:56:
                    70:d9:36:b7:8a:27:04:33:3c:19:93:7f:b4:fd:90:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BE:BB:B0:EB:2B:E5:71:68:DD:31:C6:51:0B:AB:13:42:6A:BA:BF
            X509v3 Authority Key Identifier:
                keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:c3:29:65:ee:84:b5:fe:67:e3:27:b3:37:15:16:a5:25:
         9c:09:a4:b5:ae:cf:8e:a2:d8:1a:82:d2:dc:49:64:21:1b:45:
         81:ca:69:28:c2:eb:00:7b:c2:84:34:36:50:61:82:0f:00:8b:
         f7:64:f9:cb:0b:d4:4d:51:72:d0:b9:9f:02:61:9b:95:b5:13:
         4c:16:73:18:c2:26:2e:87:83:2b:53:5f:82:f4:4a:1a:be:3a:
         13:c3:a5:95:e6:75:7f:b8:75:e2:a3:91:36:fb:e7:7c:67:9f:
         3f:80:0a:a5:43:bb:2b:76:61:64:cd:4f:5e:ac:f0:e3:dd:34:
         e4:f3:42:84:11:b5:0c:4a:98:c9:9c:fb:57:65:b4:0a:b7:93:
         23:7d:be:a9:cc:1d:b8:1c:02:e6:32:23:77:fb:26:44:28:fa:
         26:1b:41:8c:7f:80:25:3d:8b:58:85:19:84:66:a9:ed:27:50:
         f4:ae:1b:bd:cb:ed:c5:3b:84:a6:7f:7d:05:32:6c:94:f6:f2:
         f7:36:c5:d2:1b:54:53:93:db:6a:8c:2c:e0:25:33:2a:d6:8e:
         d0:f6:d1:f3:f7:7c:f8:64:ee:3e:d2:a5:78:b9:11:69:65:c4:
         53:62:a3:a9:04:17:c2:71:15:55:b0:38:e8:fd:94:0b:b4:03:
         62:13:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:47 2025 by rpki-client