Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
File:                     wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json)
Hash identifier:          anXYqbh4mkNqy8nPb1HwQ5GF2ofmFfgU1zBohSNga7g=
Subject key identifier:   D5:D4:ED:B5:6C:21:74:81:21:2F:86:EA:E8:84:88:98:3F:A0:4A:D0
Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5
Certificate issuer:       /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
Certificate serial:       0197B6A07B8A4688B4D50BE4891F22B55089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 13:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:59 +0000
Files and hashes:         1: AMYGfvxAWSGgHnKu_QntycSpGmI.roa (hash: QcPElnjpeBVJZHljf/0lA1BJWaDX6zX8ch7k4Gzc5Ng=)
                          2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: qEIZ9P7F5wAkIHKRRfgW8aI2otUHNF/wDApfHx1GRjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:7b:8a:46:88:b4:d5:0b:e4:89:1f:22:b5:50:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
        Validity
            Not Before: Jun 28 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=d5d4edb56c217481212f86eae88488983fa04ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:d7:83:23:a0:0f:1f:54:61:9f:58:6a:13:
                    e8:75:47:67:9c:2e:35:16:b8:85:75:16:8b:d4:21:
                    75:1f:0e:da:56:94:63:6c:9c:45:3a:c6:40:cb:8e:
                    22:e4:e1:2e:50:31:89:96:d1:6e:68:9c:df:f0:e7:
                    85:5a:18:e7:b1:18:08:e1:69:1b:6d:d5:6b:e1:fe:
                    73:11:87:75:60:68:26:87:4f:8e:1d:5c:8e:0c:46:
                    ea:38:4c:81:36:65:66:4b:5a:bb:81:ef:48:a8:05:
                    60:9d:2b:8f:68:89:a3:ba:1f:59:f2:a3:2e:b7:d0:
                    fc:3d:04:c8:23:98:39:03:ce:d0:af:01:d6:36:92:
                    84:a0:91:df:b4:cb:56:6f:b8:9d:a9:c8:ce:33:fd:
                    07:53:5a:dd:05:02:d1:88:ca:4f:1c:9e:00:08:be:
                    46:b5:30:a7:37:d0:27:b5:f0:c9:58:42:77:d4:6f:
                    39:ac:cf:aa:e7:2f:32:a0:8b:a1:01:b4:c5:65:ce:
                    83:b5:e0:8c:3d:74:aa:f9:23:45:d4:91:da:1e:27:
                    9b:1c:fe:39:2e:4a:06:2f:0d:12:2b:f6:fa:da:cb:
                    90:09:00:fd:82:d4:aa:67:65:93:b5:de:f1:39:e7:
                    68:3a:7f:e1:17:db:4b:bb:c1:0c:d7:7c:7e:bf:eb:
                    d8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:ED:B5:6C:21:74:81:21:2F:86:EA:E8:84:88:98:3F:A0:4A:D0
            X509v3 Authority Key Identifier:
                keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fe:3c:b9:3c:6c:c4:24:f5:1b:81:5f:f9:b7:4d:e4:47:2b:
         b3:af:f1:5b:1f:37:81:c0:25:06:a2:00:ec:c7:a7:55:cd:28:
         5a:d5:09:bc:ad:a1:42:3e:9d:c9:90:aa:08:75:99:48:d6:1d:
         84:46:0e:ab:1f:da:09:a9:be:1d:f7:07:0d:8e:fe:ed:ad:5a:
         c7:e8:49:1a:52:6b:31:d4:00:7f:f6:32:b5:64:0d:f3:4f:04:
         1c:df:82:bf:e0:9e:a1:e4:79:5a:6e:45:17:d3:79:06:ab:5a:
         6b:23:d8:c8:02:99:d9:99:fd:14:a7:38:b3:c3:ba:40:a6:02:
         a7:bf:c4:3e:c1:e8:1b:c9:c8:59:73:cf:13:6c:cf:68:5c:b6:
         06:09:2d:f7:c4:64:20:22:44:e4:a9:87:f8:87:74:60:1e:f5:
         4b:c2:f3:9e:b3:fb:ab:a4:3e:2a:e4:ef:e2:a9:75:73:33:d3:
         7d:68:d2:d6:f5:97:2d:ba:4c:71:19:a2:c0:08:79:ee:74:99:
         11:19:fe:42:fc:64:52:ab:28:17:4d:2e:68:e9:09:cf:38:c1:
         23:2a:9d:49:84:00:73:c4:25:c3:53:14:27:32:0d:ff:53:88:
         95:84:0e:2c:33:3b:72:4d:1f:ec:27:2e:22:32:73:b9:e2:a2:
         86:b5:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:01 2025 by rpki-client