Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          CYPQXRbW6km1rG/5PLamFKkg4O+iProv9NfnqbRx2Ow=
Subject key identifier:   33:B5:0B:DD:AE:CA:1B:47:D4:D0:86:C6:6A:22:CD:0E:60:AD:32:D1
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       0197B7EA6B47FBFC58EEB8BF136748344B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          0C3E
Signing time:             Sat 28 Jun 2025 19:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:22 +0000
Files and hashes:         1: QmAm7-ckXWNCy_EyjMRgtbazq1M.roa (hash: cL7W6FgXh5+bmFrfSXRxDbf8HtHE6dFb//gf0dsJOB8=)
                          2: WdOqlklUlY-sNbaLSfkpvoRt0iM.roa (hash: nFChOa8TYCoMQ8iwf2JuylM1/1NoIavp13ZTbwdNwn8=)
                          3: kIN_jMTtiRLUszBNqKlNoyJk3dk.roa (hash: lHRqbJ9tYmnELEYhJx16n/sdjvBPGJLZ5vlonZ4KvjA=)
                          4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: DUaDqMvMpTTDG66iOORfRL4gSuEGYy/Nbk4Bu/XoP6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:6b:47:fb:fc:58:ee:b8:bf:13:67:48:34:4b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Jun 28 19:01:22 2025 GMT
            Not After : Jun 29 19:01:22 2025 GMT
        Subject: CN=33b50bddaeca1b47d4d086c66a22cd0e60ad32d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:aa:dd:f6:56:e7:d6:bc:4c:da:b0:32:02:
                    63:13:89:c3:03:9a:70:0c:d1:1a:91:6a:43:53:c3:
                    ed:38:75:1e:3e:2d:a0:7e:65:94:90:2c:0f:27:44:
                    32:42:e1:30:29:53:21:3f:d0:ae:95:42:58:5f:81:
                    58:70:bd:83:ae:8b:3e:18:31:ba:d4:56:20:7b:65:
                    86:7e:b6:de:c0:3e:a7:7c:65:4d:7f:f3:d0:87:10:
                    7c:45:17:f5:b9:93:c7:c5:a0:74:5e:a6:ae:f3:bf:
                    b8:ca:61:65:93:b8:f5:52:aa:81:92:07:bb:dc:91:
                    0e:ee:60:78:ba:d7:37:93:4b:67:2a:cd:be:53:c1:
                    f0:69:a6:a0:38:96:0f:22:e8:be:b7:ae:3e:70:11:
                    ad:33:29:91:1d:2d:87:1c:37:af:16:48:19:fa:88:
                    81:a7:76:50:a8:86:8d:a8:85:fb:70:9d:29:43:ac:
                    96:29:d8:00:10:2c:dd:f4:5a:0e:c0:cc:38:d0:b4:
                    6e:cc:dc:41:69:04:99:88:05:b6:b6:41:eb:2a:27:
                    89:dd:b0:35:59:43:0b:c6:5c:0f:a6:53:85:c2:e9:
                    77:b6:f8:d9:ca:e3:71:83:49:55:66:89:0c:5c:10:
                    8d:d5:8f:b3:90:fc:25:dd:9f:83:a6:d8:64:49:89:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B5:0B:DD:AE:CA:1B:47:D4:D0:86:C6:6A:22:CD:0E:60:AD:32:D1
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:a6:4f:67:a8:50:00:fe:98:a6:de:ae:ae:56:89:0f:04:
         19:03:41:e9:e2:fc:35:b0:ea:37:a5:da:46:23:22:1a:77:2e:
         c9:38:9d:bf:c0:61:e7:c8:ad:79:c7:cb:b7:de:c7:b5:7a:62:
         d0:07:82:3e:48:0e:aa:90:2d:5b:db:90:8a:e1:20:46:38:13:
         f8:66:fd:44:2b:61:8e:69:63:30:83:e2:91:91:26:ca:5d:9e:
         23:21:63:55:ed:3b:cc:76:a2:4c:8c:ba:fd:db:82:4d:68:0b:
         e5:1a:8a:3f:83:d9:23:ff:d7:ac:18:66:43:6a:bb:71:40:ac:
         06:90:69:3f:ca:26:25:67:c3:76:99:c1:ab:79:a0:a0:b0:e1:
         cf:48:73:55:dd:c8:3c:6d:e7:e1:3f:fe:9c:e4:e4:40:3f:fa:
         58:5b:15:a5:99:18:1b:d9:af:05:a1:c6:bf:d8:b8:ac:1a:c3:
         84:28:5b:2b:7f:3f:5c:14:31:6a:eb:f3:e6:26:ca:58:25:78:
         5d:28:4e:1e:98:90:e1:f4:68:bc:d3:85:4b:45:ec:4e:ea:12:
         10:9b:91:96:5f:43:08:cb:09:5c:b5:e0:34:c3:44:57:5f:00:
         98:02:dd:22:62:06:65:15:10:76:bc:be:c6:55:8b:50:73:5b:
         1d:59:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:49 2025 by rpki-client