Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File:                     wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier:          9iHygk1VMLZLYlkIDsTOVFO7uWwTvSmRtKh1PIj5z64=
Subject key identifier:   C7:38:8B:19:DF:5C:32:3D:C9:4C:37:28:AD:7C:C8:3B:19:4D:0C:03
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer:       /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial:       0197B77BF92B01B2CE182FF997086C44667E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number:          0A64
Signing time:             Sat 28 Jun 2025 17:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:44 +0000
Files and hashes:         1: lQvman0TcS9UAXTyd3ZXIdLOBqI.roa (hash: P14NthyAGiyfoJgBsi6HRoRfnfWtEu8GOwgj8n8I3ag=)
                          2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: btWj54G0mAKwDmurzpDVyMJR2d//UEZjWDf0SpJPyP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7b:f9:2b:01:b2:ce:18:2f:f9:97:08:6c:44:66:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
        Validity
            Not Before: Jun 28 17:00:44 2025 GMT
            Not After : Jun 29 17:00:44 2025 GMT
        Subject: CN=c7388b19df5c323dc94c3728ad7cc83b194d0c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:94:f5:fc:70:3c:0e:76:de:56:22:a7:3f:
                    73:7e:89:e9:01:ed:c0:d2:c0:c7:5d:21:e2:15:0b:
                    e3:29:80:b2:87:20:9e:0f:00:4a:24:a6:7c:94:e3:
                    19:02:8a:2a:c7:f9:56:a4:64:7c:10:8e:67:3d:87:
                    b3:8e:b7:7d:7f:5a:2d:e4:7a:d2:82:5c:53:24:07:
                    21:32:6c:02:1b:35:27:01:d2:e6:1f:10:9d:3f:bf:
                    42:f1:e9:92:31:ec:eb:0e:be:e7:8e:3d:f2:a7:e4:
                    a3:4d:ac:9c:c1:93:2e:79:74:a3:53:19:fe:01:c3:
                    58:45:2b:bb:1f:e3:7a:39:24:76:76:9d:15:5c:1b:
                    39:bd:c2:72:f4:53:6b:2b:0d:5b:4a:42:fe:c3:d3:
                    fd:9b:dc:08:30:a0:71:b3:ee:6a:b3:8b:65:8f:89:
                    f8:5e:c6:f0:f5:2e:62:8a:e6:9e:f9:dc:4d:50:5e:
                    13:48:68:06:55:d9:6a:27:17:dd:ff:78:c4:2b:7b:
                    76:72:b2:bc:16:15:72:f2:42:58:73:e1:1c:fb:8d:
                    0d:56:b5:af:d5:25:f8:8e:8a:d9:d1:30:ed:cc:ec:
                    7f:60:e6:8c:0d:17:df:cd:97:56:a9:4b:1a:cf:25:
                    55:f2:07:04:6a:d3:46:20:17:e3:c4:1b:7a:7b:da:
                    04:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:38:8B:19:DF:5C:32:3D:C9:4C:37:28:AD:7C:C8:3B:19:4D:0C:03
            X509v3 Authority Key Identifier:
                keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:66:04:8d:77:4d:5c:ce:46:07:03:7a:07:a6:29:12:81:72:
         38:f3:96:2f:c9:74:a0:91:f8:79:34:0c:19:2b:b7:2b:1a:fa:
         61:1d:86:bd:3a:53:5f:71:5b:78:84:76:74:f0:73:a6:22:e1:
         9c:f4:7e:39:0a:a3:70:1d:68:3c:2f:0f:0c:15:55:cc:a5:50:
         f3:54:e9:38:9d:43:c3:6b:63:d7:9b:27:f4:8a:ca:34:7e:56:
         6e:00:ac:89:10:6e:8c:40:1a:4b:e6:47:87:2f:6b:13:07:22:
         9e:c9:d9:b5:38:ef:fe:50:7c:82:17:9a:17:73:12:50:1f:f0:
         97:47:4e:de:61:a2:0c:0b:7d:03:72:0e:65:69:84:ee:c0:33:
         a6:40:3d:cd:25:bb:d1:49:fb:04:23:86:c8:d7:b3:3c:50:39:
         af:84:bf:39:e9:03:22:af:d1:ca:58:e8:fb:f1:d4:af:8c:8b:
         98:f7:0e:6a:2c:58:c2:05:d9:6d:59:da:16:b7:1a:8e:91:dc:
         69:51:43:13:93:e8:ef:32:d0:23:d4:6a:75:2d:5a:19:d5:46:
         c3:c6:9a:a5:1c:4d:4b:1d:af:bf:9e:6a:c4:94:b9:9f:f1:0b:
         37:d7:36:df:2f:45:9e:ec:4b:b9:0d:7a:9d:19:0d:11:93:3c:
         cf:01:d0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:14 2025 by rpki-client