Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
File:                     mwj052FQMJu9IksB-J7CA8H8Vts.mft (raw, json)
Hash identifier:          WADGsA8qiBmQf89928KBQQLGipfH0vzyf550LYr4fNs=
Subject key identifier:   C4:8E:3E:57:31:B0:83:01:2B:86:8C:7B:B7:53:0A:71:35:F5:D3:93
Authority key identifier: 9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB
Certificate issuer:       /CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
Certificate serial:       0197B6A050BBC7258A4B8C9CC8AC7B285A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:48 +0000
Files and hashes:         1: mwj052FQMJu9IksB-J7CA8H8Vts.crl (hash: nG1H5Nf5F4Oj530DBM4eNpHooBeV79qexfSdwAkcwGg=)
                          2: yMCWx_vwP00jLW3_uRevvXcRMmk.roa (hash: xnNpTecLSpiwvjQT9lRJw8IJFmY7Zwk40Z4AZXbx8O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:50:bb:c7:25:8a:4b:8c:9c:c8:ac:7b:28:5a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b08f4e76150309bbd224b01f89ec203c1fc56db
        Validity
            Not Before: Jun 28 13:00:48 2025 GMT
            Not After : Jun 29 13:00:48 2025 GMT
        Subject: CN=c48e3e5731b083012b868c7bb7530a7135f5d393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:79:6c:26:56:43:b5:8b:0b:3b:f6:73:5c:b1:
                    29:3b:8a:36:ce:67:99:8b:a0:f6:c4:8f:c0:5a:db:
                    b5:0b:25:6a:2d:29:9d:ab:33:81:ba:d7:a2:e2:68:
                    3a:11:5d:5e:d7:c4:fd:26:9c:c8:41:cb:86:9b:d1:
                    0c:92:a4:b1:ab:24:2e:b4:22:da:eb:70:af:5c:b7:
                    37:e3:93:60:8b:ed:c1:f4:e6:00:91:11:bb:c3:05:
                    9d:71:f2:e0:2c:b3:ef:60:7e:f1:ba:7b:c1:10:ae:
                    51:e8:66:bd:9d:33:be:d7:e3:5f:6f:f9:d2:db:2f:
                    e3:05:d5:90:f3:a0:5d:64:07:b3:86:6a:a0:d7:65:
                    7f:78:63:4a:10:6b:3b:d5:3e:86:74:09:11:57:3b:
                    1f:01:e0:4e:07:4a:ca:27:e4:e3:4e:6d:db:54:f8:
                    ef:ce:c4:a6:c1:d0:aa:24:22:19:52:67:d6:d6:81:
                    02:49:14:48:b1:dd:8d:b1:7d:b9:1c:2f:36:f2:0a:
                    0c:e6:58:41:2f:b1:35:11:97:03:56:b3:33:50:56:
                    55:4f:03:c9:fa:b3:04:3d:08:e7:0b:8a:c7:3e:db:
                    f4:d6:9f:30:32:37:90:bf:02:7a:7d:7a:be:20:e5:
                    e8:8c:9a:41:75:28:65:a2:b0:aa:48:02:e1:ab:01:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8E:3E:57:31:B0:83:01:2B:86:8C:7B:B7:53:0A:71:35:F5:D3:93
            X509v3 Authority Key Identifier:
                keyid:9B:08:F4:E7:61:50:30:9B:BD:22:4B:01:F8:9E:C2:03:C1:FC:56:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwj052FQMJu9IksB-J7CA8H8Vts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d5d690-fe16-449c-a6de-69df81f2d83d/1/mwj052FQMJu9IksB-J7CA8H8Vts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:41:cd:54:93:6f:e2:a6:25:ec:a0:37:b6:c4:08:4b:1c:
         a8:aa:4a:96:c8:c1:2f:4d:35:fe:44:86:5d:e1:ce:e7:f3:b5:
         cb:56:c7:80:4b:45:d7:9f:f5:8c:64:01:1c:4f:de:60:ef:bd:
         1d:f1:0c:0e:25:ff:d2:79:75:16:b2:52:80:25:1e:54:81:d4:
         8e:61:70:75:21:06:ab:d7:26:dd:ce:3e:77:b3:10:20:e3:a6:
         dd:e2:25:3a:c2:72:30:4f:55:3f:4b:59:b1:73:8e:75:f6:14:
         8c:ba:07:4c:64:77:ed:dd:46:4d:60:17:5c:7c:49:d3:33:fa:
         12:5e:99:28:ea:44:86:6c:fd:58:9e:28:f0:3a:e9:ee:cf:1c:
         3b:bb:e8:fc:17:a7:0e:d6:70:66:56:8c:0f:f9:f3:e0:72:5d:
         32:11:e3:c7:a8:48:4d:65:d6:65:6a:b8:f8:25:2c:e1:ca:a1:
         0a:07:28:c3:cd:f7:31:2c:64:97:1d:ae:d7:0b:7b:7c:55:42:
         2d:a6:74:22:a7:93:3e:91:bd:da:34:f9:96:83:19:2c:5f:35:
         df:79:63:74:23:29:21:39:0b:30:eb:f2:fb:e8:97:8b:59:e7:
         7f:17:d6:f3:eb:4c:c6:73:40:2f:7f:8a:de:d1:b7:51:af:b9:
         6d:85:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:35 2025 by rpki-client