Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
File:                     wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json)
Hash identifier:          XuazgERCnx9Wcdna3vYzmLQ6KFY9vTk3VvKd5QEj1OA=
Subject key identifier:   82:D3:33:8B:B2:D6:17:4F:FE:76:78:0D:D8:C2:E3:79:93:B2:A5:5F
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Certificate issuer:       /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial:       0197B70F316868C834D4201E8D866D2F91A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
Manifest number:          08FE
Signing time:             Sat 28 Jun 2025 15:01:55 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:55 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:55 +0000
Files and hashes:         1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=)
                          2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: EItcuocFWARPfj74fJlElvAj/ao4aG29wZNkD7DY72M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:31:68:68:c8:34:d4:20:1e:8d:86:6d:2f:91:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
        Validity
            Not Before: Jun 28 15:01:55 2025 GMT
            Not After : Jun 29 15:01:55 2025 GMT
        Subject: CN=82d3338bb2d6174ffe76780dd8c2e37993b2a55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:36:78:c3:6d:b3:9f:5f:d9:d1:5b:94:7b:
                    a9:12:f6:5e:ae:e5:38:eb:14:f6:9d:89:63:49:bc:
                    3c:d4:71:c5:8f:3f:3f:0b:05:ac:ff:f3:57:75:e4:
                    36:7f:57:9e:7c:f8:b0:21:16:af:cd:fa:1a:e1:b4:
                    32:ce:08:b8:7e:0c:fd:df:7d:d0:a9:37:f6:1a:ea:
                    3e:84:d1:cb:1d:e4:fd:e8:27:21:0b:00:5b:7f:f3:
                    23:98:07:db:54:f0:44:8c:7b:9f:38:e4:2a:74:87:
                    02:4f:07:17:4f:b3:7e:81:fc:fa:5d:ce:66:8a:e1:
                    9f:83:03:29:90:80:17:7e:fb:86:2c:8a:bf:1e:0e:
                    8c:0a:3b:4f:f6:da:0c:a6:c4:76:6e:c1:ed:14:e3:
                    4e:87:c9:29:6f:ea:41:17:c4:3f:60:59:c5:19:e9:
                    a2:55:d2:74:02:13:83:53:af:8f:2c:64:57:2b:00:
                    18:70:1d:82:c0:8d:68:32:a6:ec:11:a2:b0:2a:29:
                    bb:99:13:d2:9c:cd:27:7c:4c:03:2b:bf:4b:ac:94:
                    51:e3:fb:d9:51:79:cd:8f:46:40:d9:17:84:52:a9:
                    41:3c:94:56:88:a1:9e:8f:7b:13:c9:7d:c2:9d:de:
                    d6:a9:ee:48:30:b9:c2:6c:92:ad:eb:7c:2c:99:89:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:33:8B:B2:D6:17:4F:FE:76:78:0D:D8:C2:E3:79:93:B2:A5:5F
            X509v3 Authority Key Identifier:
                keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:72:e9:e2:04:b4:5d:7f:18:d3:6d:66:10:df:05:e1:2e:71:
         1e:d4:41:2a:0b:6e:a7:82:d8:57:4e:2f:ba:bb:75:d0:b9:ae:
         43:9a:db:a9:80:ec:23:51:4d:ca:b6:74:15:b1:4d:df:82:81:
         10:eb:d1:3b:11:a6:0c:7e:90:71:48:80:29:9e:55:f6:34:09:
         ca:54:c7:91:1a:02:8b:7d:10:06:00:5b:27:05:f4:e9:55:a0:
         03:d8:6e:93:d0:a7:b7:8b:ab:9c:25:b1:0f:4b:b2:a5:a0:2a:
         f5:0b:50:76:2d:f6:a7:bc:1a:ea:fd:4c:70:52:a1:f6:db:93:
         73:8f:bc:61:da:69:2a:49:67:6c:45:77:7c:65:f7:c6:65:e5:
         1b:71:c5:76:66:e1:43:27:a5:e1:df:d3:dd:1e:f0:c9:16:a9:
         e5:37:bd:39:47:5f:e3:98:6f:32:3e:18:3c:e1:22:45:bd:47:
         29:30:fd:34:57:bc:44:3f:75:4d:a7:58:03:92:72:d5:0b:5f:
         73:36:fe:92:5e:c4:7f:f4:c7:2f:bc:14:85:21:f6:36:92:bc:
         d2:8c:9b:96:d8:e4:f7:a2:cd:b4:b8:cb:63:af:42:b2:24:f2:
         86:5a:74:f0:89:e1:84:72:b1:0b:34:d6:a0:85:8c:13:30:37:
         00:1e:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:22 2025 by rpki-client