Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          avnzy2cCbnvb3sh6yXi+mPvIqMW6qzFRgm+FGY8zx38=
Subject key identifier:   09:D4:3B:20:04:51:6D:35:BF:D0:22:B7:97:46:38:F1:F2:D0:4D:57
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       0197B9D8BF2260B2E96F7705023E4ED777BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          103F
Signing time:             Sun 29 Jun 2025 04:01:19 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:19 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:19 +0000
Files and hashes:         1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: 16CwRcIyZRbTIypGRDXg7h6pYv/btKFFqUiE1Dl67O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:bf:22:60:b2:e9:6f:77:05:02:3e:4e:d7:77:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Jun 29 04:01:19 2025 GMT
            Not After : Jun 30 04:01:19 2025 GMT
        Subject: CN=09d43b2004516d35bfd022b7974638f1f2d04d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a7:56:6c:29:5f:82:70:58:50:49:2c:4f:01:
                    52:32:f4:88:9a:e2:14:4f:50:a1:af:54:8d:7b:1c:
                    73:58:05:1e:b0:c5:01:82:6b:45:95:7f:74:c8:72:
                    30:b1:a3:7a:80:4d:66:2e:81:c2:b8:9d:e0:f5:be:
                    47:c8:f3:a7:2a:83:9a:4d:e4:cd:cc:20:36:d6:00:
                    cf:c5:12:04:16:48:eb:6a:64:f4:38:b8:3a:82:f5:
                    04:48:b9:cc:54:1b:72:28:cf:26:ff:a2:63:6c:5a:
                    69:36:85:56:85:80:76:88:ac:45:e7:3e:9b:ad:61:
                    45:0e:48:ce:06:24:87:e4:9d:81:f6:db:9e:4d:f3:
                    ab:b7:af:28:76:52:df:3a:75:f5:5c:76:5a:d6:7d:
                    99:37:4a:7b:22:ba:e2:1e:71:39:30:d1:22:bd:d4:
                    dc:f1:0e:34:c4:db:3c:d7:b1:ba:53:4f:7f:5c:75:
                    df:37:82:20:1e:d4:d5:70:5c:15:e6:f0:f5:d8:88:
                    43:94:93:f4:09:a2:0a:11:54:03:29:61:f8:6a:9a:
                    a1:35:e0:5b:15:00:60:79:73:05:9f:73:21:95:5f:
                    1e:38:c0:6a:38:7c:9d:df:e7:45:02:74:9a:92:e7:
                    f5:81:fd:63:37:e4:0c:da:c7:0b:da:10:d2:14:23:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D4:3B:20:04:51:6D:35:BF:D0:22:B7:97:46:38:F1:F2:D0:4D:57
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:43:36:d5:7f:b9:80:60:56:95:8c:ff:52:3f:77:d6:db:bb:
         f6:b0:0b:71:f3:08:8a:c3:cf:ae:ef:51:11:0c:9c:30:fc:5b:
         df:36:01:d1:d2:66:fe:69:17:a0:7c:a1:96:50:fe:fd:d7:d0:
         2d:f7:b2:a9:5b:f3:d3:bd:c4:32:44:00:0e:74:8f:be:55:af:
         87:6e:96:6b:b0:4c:2c:6a:e3:74:b3:cb:09:c0:7b:39:c5:b6:
         2e:3a:ad:c3:92:8c:ba:eb:64:2c:0a:64:9e:b2:1e:9b:ee:ed:
         3e:3e:bf:8b:6f:90:0f:2d:c9:25:f8:3f:99:ed:84:00:a2:95:
         6d:fa:36:34:a3:88:99:0b:a8:6d:80:a9:19:e8:c4:f4:01:bc:
         a9:e1:96:ad:89:88:2b:fb:fb:92:63:db:e4:08:42:02:72:c5:
         be:63:cf:56:48:1b:5c:c8:07:9f:eb:bb:69:95:57:92:c6:e6:
         db:f3:64:97:c9:cf:2c:2b:cb:58:a2:fb:ab:fd:1b:a6:ac:a0:
         5b:2c:72:82:29:3a:5f:cf:02:ae:1f:7b:fc:5c:c5:ec:e0:4a:
         32:20:0a:c7:fa:58:58:e9:02:e8:95:cd:19:9b:8c:68:4b:3d:
         c3:9d:80:2f:ef:9d:03:6e:4f:63:6a:0f:6b:05:6b:63:47:c8:
         41:a8:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:04:09 2025 by rpki-client