Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
File:                     wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json)
Hash identifier:          Ulw3sVTJICoV6cq+myC0AQl19M3Kh07QW8hglRaFdFQ=
Subject key identifier:   60:68:0D:BC:1A:C0:49:D0:0B:3E:51:6A:CA:58:8A:99:2C:02:62:EE
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Certificate issuer:       /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial:       0197B6A24D3D15B9923C0D17EB06AB0972A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
Manifest number:          13D0
Signing time:             Sat 28 Jun 2025 13:02:59 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:59 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:59 +0000
Files and hashes:         1: fS3aIp_dstilOoZpsHs2fT3hEwI.roa (hash: ekL2u08a8PJkCPy3xwuS3H8hi/HVcBEIiMkXY+L534U=)
                          2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: OVLW4LeEPuS5pZFedoIxg58OvuePwdnpSmydSa1p57U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:4d:3d:15:b9:92:3c:0d:17:eb:06:ab:09:72:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
        Validity
            Not Before: Jun 28 13:02:59 2025 GMT
            Not After : Jun 29 13:02:59 2025 GMT
        Subject: CN=60680dbc1ac049d00b3e516aca588a992c0262ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:fd:3b:d7:55:f8:9e:f3:87:db:9e:f8:de:
                    46:c7:6f:ec:64:21:4c:ee:65:29:3a:a4:b0:34:6c:
                    b7:b2:f1:00:80:25:0c:88:1c:79:01:f3:72:23:2b:
                    a8:81:da:ad:79:7e:cb:62:44:c0:99:e1:51:88:dc:
                    ec:5a:54:1e:ad:4f:c1:48:31:64:04:19:a8:dd:91:
                    2c:d0:0f:4a:2e:66:ad:ac:6e:11:68:0d:75:9a:c9:
                    5d:d0:df:77:b3:01:c2:7d:db:32:5f:f3:af:fd:2e:
                    64:ee:70:23:ff:df:8c:3d:56:10:09:ac:ad:90:f1:
                    57:66:05:4c:a3:35:52:bd:0c:87:bc:d2:7a:85:8a:
                    f7:61:1c:86:2a:7e:44:17:12:9c:e9:87:d7:e0:d4:
                    e2:a7:a3:3b:e8:ba:76:db:4b:ae:da:f3:ee:6e:4d:
                    c0:b5:9f:dd:c6:9d:58:4f:3f:25:7f:b2:03:60:eb:
                    4a:07:4a:b9:b2:9c:2b:da:73:1a:9b:30:d6:82:9c:
                    4f:a1:99:31:e6:03:85:2c:5d:63:86:31:e5:0a:1f:
                    10:cd:e4:ca:d0:ed:38:b8:18:c3:38:7a:43:f8:24:
                    12:a8:5a:d1:61:59:0e:d2:ae:c9:81:17:53:7c:77:
                    6a:2a:ef:ce:bf:54:00:f6:cc:28:60:46:58:a0:e9:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:68:0D:BC:1A:C0:49:D0:0B:3E:51:6A:CA:58:8A:99:2C:02:62:EE
            X509v3 Authority Key Identifier:
                keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:b6:a5:fc:14:f6:9d:87:08:72:72:1c:9e:bf:96:cd:e8:
         85:a7:ee:b2:6c:bc:df:47:2c:08:58:81:ba:c7:79:08:24:c4:
         64:a0:ee:bf:f8:0e:89:22:c7:11:82:63:31:6e:76:eb:3c:a5:
         3d:35:37:98:19:44:0e:1f:52:ed:35:61:46:a6:18:18:b2:55:
         f6:82:bf:fb:76:19:8d:e0:c1:bf:fb:10:01:fa:02:0e:e4:d0:
         3d:2e:42:1d:6f:72:85:42:0c:58:49:03:00:aa:29:dd:3b:59:
         13:37:b4:1d:7a:8c:4b:2d:e9:fd:04:5f:8f:9c:5d:0d:2a:ff:
         50:f5:ef:67:bc:9c:a1:6c:08:c7:70:d5:12:89:fa:ef:1c:a7:
         01:53:49:ea:5c:a0:13:8c:00:6c:11:69:b8:5c:73:84:07:d9:
         7c:9f:d4:b7:46:2f:86:6a:d7:f9:30:13:42:53:5d:7d:ba:bd:
         86:c3:43:69:dc:d6:d9:6a:78:2d:d2:64:33:d7:99:09:f3:77:
         f8:d9:27:69:90:e7:cd:45:41:60:d3:36:3d:18:0f:f7:64:60:
         8d:b7:7b:69:57:ac:5a:70:80:53:5d:cd:b8:cb:32:3a:66:4f:
         e8:75:34:9f:9e:da:1d:30:16:74:48:ec:c9:a4:97:d6:15:3b:
         1e:9d:e8:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ok09FbmSPA0X6warCXKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMDM3ZDJlN2IwOWEwZmJkMTA4MTY4YTQ0ODc0ZjZiZDE2
ODliNjAwHhcNMjUwNjI4MTMwMjU5WhcNMjUwNjI5MTMwMjU5WjAzMTEwLwYDVQQD
Eyg2MDY4MGRiYzFhYzA0OWQwMGIzZTUxNmFjYTU4OGE5OTJjMDI2MmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGL9O9dV+J7zh9ue+N5Gx2/sZCFM
7mUpOqSwNGy3svEAgCUMiBx5AfNyIyuogdqteX7LYkTAmeFRiNzsWlQerU/BSDFk
BBmo3ZEs0A9KLmatrG4RaA11msld0N93swHCfdsyX/Ov/S5k7nAj/9+MPVYQCayt
kPFXZgVMozVSvQyHvNJ6hYr3YRyGKn5EFxKc6YfX4NTip6M76Lp220uu2vPubk3A
tZ/dxp1YTz8lf7IDYOtKB0q5spwr2nMamzDWgpxPoZkx5gOFLF1jhjHlCh8QzeTK
0O04uBjDOHpD+CQSqFrRYVkO0q7JgRdTfHdqKu/Ov1QA9swoYEZYoOmRuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBoDbwawEnQCz5RaspYipksAmLuMB8GA1UdIwQY
MBaAFMMDfS57CaD70QgWikSHT2vRaJtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3dOOUxuc0pvUHZSQ0JhS1JJZFBhOUZvbTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS82Y2I3MmQtNjkwYS00MDZmLThhZGQt
ODBlN2JiYjA0MWIyLzEvd3dOOUxuc0pvUHZSQ0JhS1JJZFBhOUZvbTJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS82Y2I3MmQtNjkwYS00MDZmLThhZGQtODBlN2JiYjA0MWIy
LzEvd3dOOUxuc0pvUHZSQ0JhS1JJZFBhOUZvbTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2e2pfwU
9p2HCHJyHJ6/ls3ohafusmy830csCFiBusd5CCTEZKDuv/gOiSLHEYJjMW526zyl
PTU3mBlEDh9S7TVhRqYYGLJV9oK/+3YZjeDBv/sQAfoCDuTQPS5CHW9yhUIMWEkD
AKop3TtZEze0HXqMSy3p/QRfj5xdDSr/UPXvZ7ycoWwIx3DVEon67xynAVNJ6lyg
E4wAbBFpuFxzhAfZfJ/Ut0YvhmrX+TATQlNdfbq9hsNDadzW2Wp4LdJkM9eZCfN3
+NknaZDnzUVBYNM2PRgP92Rgjbd7aVesWnCAU13NuMsyOmZP6HU0n57aHTAWdEjs
yaSX1hU7Hp3oKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:15 2025 by rpki-client