Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File:                     kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier:          tDNZXOjNRBqSsWCzbu6nvJPbX4PZL4cKyUhoLop/tg0=
Subject key identifier:   75:E6:D5:A8:67:9B:C6:3A:9F:96:75:EB:21:B0:E7:2F:67:0D:66:04
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer:       /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial:       0197C7942E753B31D1ACCD7800E0D84F2947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number:          039C
Signing time:             Tue 01 Jul 2025 20:01:06 +0000
Manifest this update:     Tue 01 Jul 2025 20:01:06 +0000
Manifest next update:     Wed 02 Jul 2025 20:01:06 +0000
Files and hashes:         1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: eYWcGrqA8pfO0hFwERll4G7adcM9O8Esuho5o2ZfEas=)
                          2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:94:2e:75:3b:31:d1:ac:cd:78:00:e0:d8:4f:29:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
        Validity
            Not Before: Jul  1 20:01:06 2025 GMT
            Not After : Jul  2 20:01:06 2025 GMT
        Subject: CN=75e6d5a8679bc63a9f9675eb21b0e72f670d6604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:10:b6:bd:c1:49:99:33:68:f8:3f:c1:cb:8f:
                    c8:42:ae:b2:ee:e6:ee:5e:5c:12:77:90:5b:b4:0d:
                    32:3e:57:f4:ff:94:41:18:e4:df:1c:37:1c:6e:71:
                    a7:06:42:17:3d:ef:ea:5e:5e:5d:93:8b:dd:82:7e:
                    ad:f7:39:9f:fe:79:6d:fd:0f:77:9c:f9:3d:5d:4d:
                    fc:d3:c9:6d:a2:c5:1c:df:e8:cf:14:c7:f8:cd:76:
                    bf:74:75:4e:2d:c5:68:f1:b0:e4:49:32:1e:14:ac:
                    19:35:bb:b3:fc:c3:9e:cd:76:c6:b7:c9:ba:68:45:
                    ba:9d:32:fa:8c:c8:a6:b6:55:71:79:26:57:6f:7c:
                    9e:c8:cc:83:ed:d1:88:f7:72:e8:b3:68:fb:8e:51:
                    6b:c0:4f:4b:fb:2a:ec:e1:19:54:5c:8a:3e:54:1b:
                    16:dd:b4:40:ba:8a:31:49:56:b9:55:12:35:93:89:
                    c1:82:04:5c:cd:55:0c:ac:75:1c:8c:82:b3:ad:a3:
                    7d:73:c8:21:11:8a:91:9c:3f:29:c4:be:6a:ee:e6:
                    1d:5b:29:38:12:53:1a:45:95:8b:de:19:5e:5c:b2:
                    f5:7f:f7:07:55:ab:17:29:4f:08:a2:bb:25:34:a6:
                    dd:7d:dd:5d:d0:d1:25:db:30:3a:29:b6:f7:6b:e7:
                    71:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E6:D5:A8:67:9B:C6:3A:9F:96:75:EB:21:B0:E7:2F:67:0D:66:04
            X509v3 Authority Key Identifier:
                keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a1:da:1f:43:67:d2:cb:51:8f:d8:f7:8d:92:db:53:a3:4c:
         82:fa:0a:94:ed:cc:08:2b:06:ce:ad:32:ab:e6:db:df:80:32:
         68:6e:ac:ea:1f:dc:55:c4:6a:ac:57:22:a3:0e:c3:97:07:1d:
         71:a5:68:29:60:7b:57:ae:9d:2a:25:d6:52:ff:f3:5e:aa:d6:
         d3:19:e4:ae:ca:3c:82:68:04:2e:3f:06:7d:04:c9:f4:09:31:
         57:e1:b3:b5:73:32:b6:24:50:54:9f:3f:c8:1c:32:49:e0:aa:
         6f:fb:90:62:ca:e7:2b:f7:6b:6a:84:52:e1:b6:d3:af:01:53:
         e0:84:ff:ad:3c:64:f7:bd:88:75:2f:ee:87:03:a2:4c:b9:d7:
         97:cd:68:28:56:90:85:be:1a:2c:85:ba:45:ff:2d:b8:73:11:
         90:ea:37:1a:d4:3c:dc:0b:69:5f:cd:b7:d9:95:87:32:dd:70:
         8b:62:40:eb:c1:24:c5:d3:8c:5c:07:7b:54:c1:f7:62:df:fc:
         8d:4b:9e:49:11:b0:66:b7:11:5c:26:81:0b:70:5d:a1:16:72:
         3b:14:c7:04:c9:ab:15:37:97:09:f8:83:ed:b3:4e:2e:ad:c9:
         e3:d8:2c:d6:89:20:ff:1a:f6:bb:3f:36:13:70:86:f2:cf:7b:
         1f:cc:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:17:43 2025 by rpki-client