Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File:                     wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier:          1Fu4yCqLvaDjkB5+Zk0p5JXG6ml9tz1MuH5Ro6Xn0tc=
Subject key identifier:   4D:27:C2:1E:03:B9:49:C6:2A:4C:08:A8:78:AF:5E:3A:0F:25:4C:33
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer:       /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial:       0197B6A1CB7E6CD4DBB05B615873D2C72D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number:          105E
Signing time:             Sat 28 Jun 2025 13:02:25 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:25 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:25 +0000
Files and hashes:         1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: 5Sq/d4zlkvpHd8Ua9CUBYXCZexTu3VfRyrBQHXFaKZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:cb:7e:6c:d4:db:b0:5b:61:58:73:d2:c7:2d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
        Validity
            Not Before: Jun 28 13:02:25 2025 GMT
            Not After : Jun 29 13:02:25 2025 GMT
        Subject: CN=4d27c21e03b949c62a4c08a878af5e3a0f254c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:af:7e:40:3a:df:9d:b2:47:c2:f0:0f:36:
                    ec:69:1d:c5:5d:81:ef:93:ef:a3:f0:6c:52:1a:79:
                    6f:35:17:c3:40:f0:92:bc:e8:17:b4:9a:e6:30:ab:
                    b9:56:f2:0e:01:d7:fa:03:3b:d5:38:8a:db:2c:55:
                    a0:3b:15:c9:4d:6e:46:3c:cc:c7:8f:76:32:9a:cd:
                    9a:dd:8d:ff:b3:dd:1b:f0:e0:1a:a9:0d:f4:dd:69:
                    05:59:67:76:a9:06:f5:78:73:9c:41:56:df:ec:91:
                    f9:96:c6:72:47:f4:25:2e:b6:41:ed:b4:a6:66:5f:
                    6c:dc:de:a1:db:8a:87:9e:aa:a9:51:95:a8:b0:19:
                    28:b2:3b:3c:ab:da:84:ab:b8:d5:fd:eb:89:95:5b:
                    21:4c:ce:ae:c5:32:92:86:74:4c:c6:9d:5f:e7:cf:
                    c7:35:97:22:69:3c:2e:ac:db:1d:e0:4c:9b:cf:4f:
                    96:9c:0b:ce:3f:69:2c:5b:df:9b:5f:e4:53:84:4b:
                    8f:22:7a:d6:45:ce:69:2c:23:a5:d2:e7:1a:6f:4d:
                    f7:6d:9e:ce:50:81:97:c6:1d:fe:0a:84:0e:20:83:
                    17:38:9c:8d:a9:2c:fe:1f:60:db:3d:0e:51:4a:a6:
                    00:c5:c0:b2:a5:01:13:97:4b:56:6b:76:33:65:57:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:27:C2:1E:03:B9:49:C6:2A:4C:08:A8:78:AF:5E:3A:0F:25:4C:33
            X509v3 Authority Key Identifier:
                keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d3:01:80:64:06:ab:0a:a3:4d:0e:47:db:b9:05:50:67:b0:
         3d:1b:f7:84:8c:b7:ac:f3:64:64:14:d5:0d:0a:97:3e:3f:98:
         48:4f:d8:32:1e:72:71:f4:79:db:de:63:d2:87:ae:c7:6f:d5:
         16:68:ee:f3:13:ef:f2:83:18:82:37:8a:bf:16:69:a8:24:ad:
         8a:77:fc:ef:c7:fd:6c:cf:fd:c6:3e:98:83:ba:ab:68:f9:35:
         5c:d8:be:fe:35:a9:31:81:9e:f8:af:83:1b:6c:b9:a2:ff:6b:
         a7:92:fd:fc:74:67:bb:e6:01:ca:39:2e:23:38:ee:4a:49:7b:
         e2:f5:7b:9e:14:e4:9c:b5:fa:60:79:c0:87:3c:d0:be:08:8d:
         02:28:12:a9:88:c3:9e:20:11:eb:38:d9:49:7c:57:de:b7:cd:
         6b:37:0b:79:ad:89:bf:71:64:90:3b:a3:64:13:90:15:33:0e:
         2c:e9:b1:8e:62:6d:6c:7c:6b:72:c5:1a:b9:ec:43:02:bd:33:
         e0:c0:87:ed:f8:5b:60:db:a5:ba:1b:6f:08:21:f3:9b:86:a7:
         66:98:51:a3:fa:68:54:b9:2e:9f:80:cc:44:25:75:f6:29:d2:
         21:af:e7:c0:f9:65:95:1c:ec:73:49:c5:71:94:70:24:9e:f6:
         a9:b6:7d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:59 2025 by rpki-client