Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
File:                     wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json)
Hash identifier:          Fcnw1Bkgz1frSRUo7Vv9lJn1f5m7mEsZWZRwZtEwS+I=
Subject key identifier:   EC:30:ED:E9:48:FE:32:1D:77:24:FE:93:1D:B6:6A:43:BF:5F:0D:CE
Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
Certificate issuer:       /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Certificate serial:       0197B74571A340E10CDD9F135E6AB32005CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
Manifest number:          98
Signing time:             Sat 28 Jun 2025 16:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:10 +0000
Files and hashes:         1: 2qyhqFKpARK1F2ET6I7_YKaOPc0.roa (hash: qGM3ZFQucsF8/9E/V05Xc9DkgTgt/0zHmMZ5RCHxskE=)
                          2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: 0+MLm3d3n0kwlXe+gBecKhtdoy9u0ofVsdc1Z1iKazs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:71:a3:40:e1:0c:dd:9f:13:5e:6a:b3:20:05:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
        Validity
            Not Before: Jun 28 16:01:10 2025 GMT
            Not After : Jun 29 16:01:10 2025 GMT
        Subject: CN=ec30ede948fe321d7724fe931db66a43bf5f0dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:0a:93:03:f6:7b:6d:1d:e2:ac:da:6c:bd:
                    8b:4c:ba:d6:2c:61:19:54:64:8d:be:a4:fd:e1:69:
                    c2:24:70:05:6c:55:aa:d4:60:aa:93:34:78:ca:54:
                    b1:7b:e9:da:1f:8d:a6:61:dd:a0:a9:5a:5e:b4:5a:
                    8e:7a:22:d6:fe:31:08:6b:15:fb:0b:ef:c3:df:69:
                    93:29:c0:6c:d6:f8:68:88:c0:00:33:61:a7:1f:e7:
                    cc:56:aa:20:bb:37:3f:70:71:aa:56:a0:e6:07:90:
                    c3:db:92:59:9e:60:ce:4f:20:fc:e0:87:68:9e:93:
                    f5:4a:fe:91:27:8b:5c:30:a9:cd:9b:b2:03:a5:4f:
                    70:42:c0:40:68:1c:a1:cf:81:78:a6:2a:4b:a1:6a:
                    47:14:22:aa:de:98:32:79:49:0f:ba:9f:fb:5e:13:
                    24:b4:b7:ad:49:3b:17:dd:2e:b1:c7:60:d6:de:28:
                    6b:f5:80:14:c1:95:09:fe:c1:e6:a4:18:a8:ea:dd:
                    c3:78:08:16:7e:0d:41:d6:71:1b:ec:41:8b:08:82:
                    72:27:79:d7:5a:5d:64:4d:90:9c:f9:7b:9e:87:52:
                    b0:5f:a9:ac:2c:1f:46:04:02:72:db:e3:ef:d9:8e:
                    8c:0b:70:70:20:3c:bf:c8:ff:93:14:a7:b3:bc:16:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:30:ED:E9:48:FE:32:1D:77:24:FE:93:1D:B6:6A:43:BF:5F:0D:CE
            X509v3 Authority Key Identifier:
                keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:8a:30:05:22:05:04:66:da:36:d0:4e:ca:c4:94:2b:94:
         73:e5:8a:f9:8e:54:ff:ec:29:9c:82:d9:26:fd:03:96:c3:92:
         76:5c:79:ab:d9:44:2f:6d:e5:b5:23:32:3c:bd:76:cd:4e:50:
         09:21:4f:7b:70:9e:6e:2b:d0:29:43:77:fa:48:cb:2c:b4:62:
         35:3b:43:ff:96:9c:c1:2f:f3:b2:45:ba:78:e9:be:e1:d5:7a:
         fb:e5:15:6d:4a:da:56:ef:35:74:56:eb:ab:93:7d:d9:73:0d:
         1c:b5:ab:3f:9d:00:fa:36:6a:49:0f:bd:1a:d2:9d:d6:be:05:
         13:f9:58:5d:cf:27:28:3e:bf:7a:a4:b3:39:83:df:b4:77:77:
         c1:71:da:7c:a3:c1:a1:1d:26:61:5a:69:93:82:13:cd:b1:63:
         ed:13:71:7c:20:be:ce:5b:c7:c0:c4:53:3f:93:24:ba:31:65:
         6f:27:e8:c9:57:c2:1b:72:17:05:5c:46:fb:c3:57:74:ea:48:
         95:78:ba:7e:35:01:5a:d1:0b:ee:bd:5f:c6:ac:96:a3:1a:5f:
         3b:cf:67:dd:5e:d5:e6:2b:1c:3b:18:a0:33:6a:99:7c:15:f3:
         42:50:41:f0:bb:04:6f:60:e4:0c:cc:11:3f:02:7b:a9:b4:7d:
         35:11:0c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:46 2025 by rpki-client