Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File:                     wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier:          LcvA9/t3fGL9TuoMHx8EIJGCooVZgKeuDCNpjYTKC08=
Subject key identifier:   5F:88:CE:11:12:1B:66:4D:D2:49:A2:43:49:C5:15:BA:2E:58:ED:E1
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer:       /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial:       0197C6B84826E000575859E583738A85FE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number:          15C2
Signing time:             Tue 01 Jul 2025 16:00:55 +0000
Manifest this update:     Tue 01 Jul 2025 16:00:55 +0000
Manifest next update:     Wed 02 Jul 2025 16:00:55 +0000
Files and hashes:         1: hFaskM76WmkGz-mPiPTUpMiqZxk.roa (hash: luq1omNBXihu/qimESEN6qhU6P0bWFQ94OAUTpScUXc=)
                          2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: LALeu1oHbRrqR0HnJHCZQV3dTCwHINGGfjVpfKsSQk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:b8:48:26:e0:00:57:58:59:e5:83:73:8a:85:fe:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
        Validity
            Not Before: Jul  1 16:00:55 2025 GMT
            Not After : Jul  2 16:00:55 2025 GMT
        Subject: CN=5f88ce11121b664dd249a24349c515ba2e58ede1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:4c:9d:c1:55:de:15:38:4d:27:4d:86:b6:
                    3f:46:d1:05:73:73:db:a3:e5:f5:7f:1c:dc:4f:80:
                    6d:5e:a8:60:98:1f:ef:41:00:e4:f9:d5:ea:ff:87:
                    b0:6a:4b:7e:52:81:f6:06:ac:92:0d:27:fe:ce:06:
                    23:a5:69:a1:91:20:f7:f0:17:f2:09:63:38:b9:5d:
                    5e:73:49:30:82:42:ab:5e:73:3d:a5:55:10:27:ea:
                    65:a2:7a:52:09:07:16:75:0c:b8:19:e5:5a:57:d8:
                    6a:78:ea:9a:cd:06:b4:f3:b4:87:f3:35:b4:90:5b:
                    21:8a:85:c4:e0:dc:be:36:44:2f:e2:1e:3a:8d:22:
                    ed:2e:48:47:39:63:b9:d6:fe:24:88:2b:37:fe:fa:
                    84:aa:a6:36:3c:a1:aa:e7:46:ac:6b:77:6d:39:13:
                    3e:46:dd:af:21:3c:55:c4:33:68:df:a4:6e:16:0b:
                    46:34:2c:b4:59:87:1a:89:e2:43:fd:ba:db:e7:40:
                    64:21:d4:10:5e:3f:c5:f2:81:6d:31:cd:f3:b4:ff:
                    c0:d7:27:32:0c:3a:74:78:66:7e:45:4f:1e:c0:80:
                    8e:f4:f5:2a:03:0e:03:4f:24:03:a2:96:1f:1b:e1:
                    6a:eb:c5:04:25:92:41:df:d7:9f:2e:bf:a0:ab:9c:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:88:CE:11:12:1B:66:4D:D2:49:A2:43:49:C5:15:BA:2E:58:ED:E1
            X509v3 Authority Key Identifier:
                keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:2f:3f:b7:64:26:32:dc:90:bf:eb:16:9a:e8:7d:71:f6:9a:
         d6:66:f9:f4:12:b8:6b:82:90:8b:23:a8:7b:9f:a2:ea:82:ad:
         d9:e4:37:d5:8e:3c:81:3f:06:01:8c:50:87:0e:42:6c:65:59:
         9b:55:57:30:cf:bf:b4:f0:13:6a:bd:7e:b5:29:82:a4:69:e6:
         5b:68:a8:d7:9c:24:c8:6c:c8:f9:cb:7a:ea:c2:d6:d6:d9:0b:
         3e:6a:9e:bf:5e:f7:94:c0:19:58:24:b5:8f:97:d4:8c:cf:e2:
         43:ff:3f:0a:4a:5b:87:01:8b:7d:4a:2d:e2:f8:25:ed:8c:6a:
         fb:9f:6e:b4:fa:44:43:05:24:1c:64:2d:ca:9d:79:09:1a:64:
         90:d1:7b:cf:94:f1:bb:c6:43:38:c3:e4:64:73:3d:07:a8:f5:
         bc:87:18:ef:2a:68:7e:14:c5:ce:40:c1:30:47:78:2f:ba:94:
         fc:09:77:05:50:bc:52:27:df:38:1b:d8:63:88:01:ba:9d:69:
         5d:ab:af:5a:5a:3a:10:b2:e8:7c:db:68:c1:69:96:66:5b:33:
         37:df:41:66:ef:31:d3:5f:b7:6f:19:09:3e:87:e6:46:73:3d:
         22:0e:de:3a:cb:57:c9:bf:ba:95:24:23:d2:a3:f0:ca:5e:f2:
         bd:1f:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:28:04 2025 by rpki-client