Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File:                     hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier:          BmCAa0H+kDQ/z4aLQYRjVNb8V7YERuujDoqCIoBZ9Cs=
Subject key identifier:   98:B7:73:72:96:C5:32:15:F7:02:D3:70:0C:C5:93:C6:74:49:ED:AB
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer:       /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial:       0197B77CBEAAB101272F6510A8E6B6B6940B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number:          03E9
Signing time:             Sat 28 Jun 2025 17:01:35 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:35 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:35 +0000
Files and hashes:         1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: 9gIlYmJWC8i4TuK1ApBwbh4GVSFBZTa/LKKXHjZbMv4=)
                          2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:be:aa:b1:01:27:2f:65:10:a8:e6:b6:b6:94:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
        Validity
            Not Before: Jun 28 17:01:35 2025 GMT
            Not After : Jun 29 17:01:35 2025 GMT
        Subject: CN=98b7737296c53215f702d3700cc593c67449edab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:79:c0:e8:3d:1c:92:72:d5:d6:20:51:ed:
                    2f:67:54:65:f9:c0:63:c3:5f:78:0c:e9:59:c2:9a:
                    36:bf:40:a6:2b:60:00:de:30:0e:13:e5:db:e3:56:
                    65:93:e8:19:73:ee:53:a7:c5:0c:e3:f0:00:da:78:
                    70:60:76:2e:00:6c:9a:f5:03:e1:7c:74:e8:d0:68:
                    fa:d8:b7:65:1b:81:ec:e2:7c:89:0e:82:ba:46:f2:
                    23:ae:89:80:e9:40:69:71:68:e0:ad:c9:6c:63:e7:
                    3a:b8:74:54:b4:56:a7:7f:ff:3a:e0:60:81:7f:19:
                    89:fb:c6:05:4f:26:2b:eb:42:b5:fd:2e:e2:65:c9:
                    06:52:29:db:42:90:80:38:df:b9:c5:72:e0:fd:28:
                    a6:d1:57:e8:27:50:ac:a2:59:90:1d:0c:7e:56:2d:
                    d2:4f:51:42:0b:16:04:29:8c:a3:eb:dc:0e:4d:f2:
                    1b:78:76:55:79:f8:83:63:e4:06:02:74:a9:49:d7:
                    47:a8:69:23:8d:e2:b7:92:37:b2:66:a8:6f:ab:b3:
                    86:c5:64:6a:6b:eb:21:9a:dc:a4:ad:97:73:5b:38:
                    00:40:6c:08:2e:93:a0:f8:55:b5:2b:60:81:84:c4:
                    94:29:66:c9:63:50:02:fa:8f:b7:b1:a2:02:19:46:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B7:73:72:96:C5:32:15:F7:02:D3:70:0C:C5:93:C6:74:49:ED:AB
            X509v3 Authority Key Identifier:
                keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ea:51:da:63:f0:5d:93:19:9d:86:5c:5d:cc:d7:f4:61:0f:
         17:58:7e:97:a2:01:dc:44:67:d5:ce:10:52:62:b4:9d:fa:0a:
         57:e7:ce:ed:84:1a:63:71:da:58:8d:e5:66:dc:d6:a0:a6:6f:
         1d:58:ef:f1:33:c1:68:52:1d:d8:18:89:bc:58:8d:56:f6:bf:
         71:3d:45:ab:8d:86:bd:a4:a3:76:90:43:ca:95:78:18:0e:53:
         c5:14:0f:f4:e8:ed:a5:7b:04:3f:38:e0:9b:2a:d5:51:24:34:
         33:04:f9:21:21:c6:76:53:73:d4:4c:59:46:59:aa:e5:a2:20:
         a9:78:92:21:f4:3d:bf:b3:34:f6:0b:b7:ff:8c:91:7e:3f:e1:
         24:50:ec:42:90:f7:2d:1a:dc:84:17:ec:62:82:8a:ee:4a:4c:
         98:03:28:9a:61:81:bd:09:e8:4b:8c:42:d7:a9:08:55:dc:79:
         aa:31:25:b9:49:92:52:bf:89:71:7c:85:ae:92:7f:c8:fd:17:
         55:ff:8f:c5:08:ba:ff:9a:5f:c3:23:41:67:96:cd:9c:b6:ae:
         04:2b:49:6f:1a:1e:75:92:4f:2c:2a:c5:35:08:ac:39:fa:29:
         82:a1:16:55:85:1e:5c:9f:b3:dd:24:ec:e6:7f:e5:8f:a2:a3:
         84:52:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:37 2025 by rpki-client