Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File:                     RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier:          KS+nzfd/6MDmgKmmKvwsEMzZKBy2i92jcbPWf8ZUOOk=
Subject key identifier:   41:D4:04:9B:8D:CB:65:53:56:16:BF:53:E6:91:92:19:4B:5F:3E:8E
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer:       /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial:       0197B7456102E85E29C1710230876DC6AC45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number:          15B9
Signing time:             Sat 28 Jun 2025 16:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:06 +0000
Files and hashes:         1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
                          2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: m1IIVPHcDEqcz1cwEhtt+SFuEPkb+b6nYLfeZqLTRbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:61:02:e8:5e:29:c1:71:02:30:87:6d:c6:ac:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
        Validity
            Not Before: Jun 28 16:01:06 2025 GMT
            Not After : Jun 29 16:01:06 2025 GMT
        Subject: CN=41d4049b8dcb65535616bf53e69192194b5f3e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:b0:ee:29:f6:8c:ae:bb:94:35:8a:3d:78:
                    d8:63:e3:5a:96:1b:a4:cc:d3:ad:57:84:50:fa:96:
                    50:34:b0:ea:15:cb:7a:b6:73:77:28:70:84:ed:a9:
                    07:70:af:c8:b1:d8:bd:ee:d1:b7:bf:48:f3:9d:dc:
                    b6:71:dd:1c:74:12:a5:e9:bd:17:c5:75:98:46:44:
                    6d:41:6a:c8:25:a8:7b:9f:3f:a0:19:1a:ef:65:f7:
                    21:67:18:27:c7:7c:b5:a6:be:38:33:30:a4:00:d7:
                    60:ca:23:f3:b6:40:59:2d:25:ea:71:6e:17:8c:fc:
                    0e:55:e8:cc:9e:7a:6c:82:fc:7a:e5:37:1c:fb:1a:
                    fe:e2:99:96:de:68:2d:be:0b:20:75:1d:22:82:9d:
                    83:24:36:c2:08:09:4f:45:dd:95:a8:54:7c:cc:48:
                    fc:10:24:76:cd:ab:53:3f:4f:20:c3:3c:8c:47:50:
                    48:47:a6:c5:98:21:bd:6d:31:81:92:c0:5d:2d:57:
                    ec:b6:3f:12:9c:3f:ab:c8:e8:fd:04:a5:7b:1c:47:
                    35:64:23:35:e1:12:3c:c8:f6:9e:8e:ed:66:fb:67:
                    90:a6:b7:73:6f:4a:99:20:9d:69:75:f9:37:f7:35:
                    56:14:ef:40:01:18:3f:6c:50:d6:8f:a2:29:9b:84:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D4:04:9B:8D:CB:65:53:56:16:BF:53:E6:91:92:19:4B:5F:3E:8E
            X509v3 Authority Key Identifier:
                keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:88:44:22:13:2a:63:72:61:8d:e7:30:55:54:bf:08:8f:23:
         0d:71:f5:e1:60:f2:bf:e1:00:41:1c:0b:3e:7a:8b:06:d7:2d:
         67:c6:62:d1:e0:8c:6b:f9:d8:6e:42:7d:27:79:4e:9c:bc:58:
         d0:1f:91:e0:66:38:8b:2f:0c:e7:e3:8f:8b:f6:a6:0a:a5:f6:
         d9:47:ca:12:0f:81:1e:b3:a9:9e:dd:16:ab:38:ad:c6:72:15:
         18:6c:50:1f:45:b7:6f:a7:41:b8:c7:e4:cf:d4:fb:c7:81:8f:
         f3:b3:fe:f6:95:b7:df:36:74:3a:93:4d:f4:a6:7c:1e:0c:e9:
         6b:f2:a9:bb:dd:1e:0a:c3:28:c8:8b:26:ba:4b:2d:74:50:45:
         da:15:96:80:16:75:9d:29:1f:41:73:df:64:14:e3:31:4b:8e:
         d2:67:cd:89:b4:94:db:d6:91:4e:96:38:97:01:75:5b:5f:8b:
         f9:4e:d2:5b:09:43:ba:a4:5b:91:02:af:4f:60:69:30:23:15:
         e9:48:a2:3f:ea:c8:e7:6f:a8:65:d7:05:14:e5:f0:9d:47:ed:
         87:7f:2d:df:32:66:30:40:dc:16:c9:63:a5:ae:17:96:57:af:
         dc:51:23:23:1b:ed:00:4b:ee:13:9b:4f:38:72:af:a4:f3:55:
         9d:1b:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:04:45 2025 by rpki-client