Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
File:                     mwVP7CVdDNxro6uparJgNmMnLbM.mft (raw, json)
Hash identifier:          vF4jmQ2yIxKGVAGiRGmnwCmsOqFNo+QvVpIanck5LR0=
Subject key identifier:   DE:51:C7:68:5E:3E:29:AB:C1:5F:B4:0F:A3:C6:75:A8:97:22:E3:9C
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Certificate issuer:       /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial:       0197C15AFAC2C0B19CE6501CE93FC847DE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
Manifest number:          060B
Signing time:             Mon 30 Jun 2025 15:00:54 +0000
Manifest this update:     Mon 30 Jun 2025 15:00:54 +0000
Manifest next update:     Tue 01 Jul 2025 15:00:54 +0000
Files and hashes:         1: 9VCWXkatYJ3ESMbCaKx1Q3PgSTU.roa (hash: ZMgX7WnteThsvsNnKSDN1aaNlfhZg64e4j4Ovh8Mbfo=)
                          2: mwVP7CVdDNxro6uparJgNmMnLbM.crl (hash: 1s9PK0bzKRo5TV1dElQxFPIgo4prhnvJgBiIdt3FVqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:5a:fa:c2:c0:b1:9c:e6:50:1c:e9:3f:c8:47:de:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
        Validity
            Not Before: Jun 30 15:00:54 2025 GMT
            Not After : Jul  1 15:00:54 2025 GMT
        Subject: CN=de51c7685e3e29abc15fb40fa3c675a89722e39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:ce:3b:00:4e:cb:56:2b:82:86:58:9d:a0:
                    e9:65:1d:54:60:32:c1:c4:4d:b7:e4:1a:37:5c:4e:
                    d6:5e:2e:06:14:ee:4b:dc:fb:fb:19:e4:66:ec:93:
                    42:ad:57:66:7c:a7:12:5c:d3:8c:9a:9e:36:48:a4:
                    7c:50:93:81:d6:df:43:59:56:dd:90:ae:b0:3b:a6:
                    6f:3d:8d:d4:0d:5d:6e:be:2f:e5:5a:6b:8a:e1:75:
                    1c:ce:51:32:3d:89:71:67:96:2a:d4:96:60:7b:83:
                    6e:67:37:6c:5b:da:5b:65:30:21:1d:ea:92:e0:50:
                    f4:7f:45:b1:68:62:3f:9f:9d:d4:46:54:de:f9:c3:
                    01:1d:cb:6b:0d:51:e0:42:6f:49:89:c0:7a:cb:d0:
                    62:25:13:74:dd:49:84:76:bc:d9:c7:5d:73:22:68:
                    ff:0b:da:4e:50:13:f6:b8:2d:27:06:37:92:b0:f7:
                    e7:24:e7:47:ad:fd:c5:9b:4d:63:c2:67:32:19:1c:
                    4d:d6:72:70:c1:b7:da:d2:6a:48:2e:a8:c2:c8:06:
                    73:77:2b:09:11:27:5c:cc:4e:20:84:f4:0c:08:73:
                    ff:d0:5b:5c:5f:98:c1:3b:3f:4b:63:a8:a1:48:3f:
                    8c:6d:ff:58:1a:b6:22:ad:8c:68:a8:92:90:e3:e9:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:51:C7:68:5E:3E:29:AB:C1:5F:B4:0F:A3:C6:75:A8:97:22:E3:9C
            X509v3 Authority Key Identifier:
                keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4b:14:6b:68:8f:53:95:ec:d8:a0:92:1e:89:84:d9:44:81:
         e6:09:e2:ac:fd:c8:d9:21:17:46:4f:de:4e:55:7f:05:74:fc:
         d4:b3:40:fc:d6:61:cc:64:86:b1:be:d6:92:28:52:1a:32:3f:
         92:de:1a:b5:3e:62:1b:14:5f:cf:5f:b5:82:ae:65:90:7f:ef:
         a6:31:60:ec:f8:1f:ca:23:06:61:03:8d:0e:42:fc:8c:68:c8:
         20:5d:5d:09:63:a9:8d:78:7c:54:ce:21:c8:b3:28:42:1f:c4:
         7c:46:9a:f7:bc:2b:40:14:1b:0f:f4:99:46:07:19:4f:ca:14:
         fd:4b:93:e8:66:ce:07:30:3b:f4:03:0a:05:a1:84:c9:f4:63:
         46:9b:2d:c6:cf:72:c6:22:21:3a:33:86:39:c9:2e:9c:dc:1c:
         49:01:46:a8:02:d1:9d:ef:85:11:f4:0b:f2:ed:7f:07:a1:d8:
         92:38:e7:39:69:ff:cc:88:38:75:e8:ab:a7:1a:c6:58:fd:02:
         75:7f:22:42:bd:25:64:91:65:5e:64:35:2a:d7:4b:1b:86:49:
         a3:9d:72:e3:85:2d:c4:b5:6c:d7:c1:ea:86:77:75:a7:61:6e:
         8c:f5:4f:b5:0f:87:59:34:36:45:d1:3d:be:33:92:19:c9:56:
         0d:ff:7d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:34:01 2025 by rpki-client