Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File:                     wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier:          AAQ++8C577Ha5o5+S9hK4t/EkqkqDNjQvcR4DajzVGs=
Subject key identifier:   A4:5F:DD:B0:31:A1:4A:BA:80:09:79:20:4D:16:B8:85:EE:C1:61:E5
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer:       /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial:       0197B8FD464DF9C393729DDC552076484638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number:          15B8
Signing time:             Sun 29 Jun 2025 00:01:35 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:35 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:35 +0000
Files and hashes:         1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=)
                          2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: NU2g4LUnpab0orC9hCbSCUzeylzG4j4bjeLsQeK7RHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:46:4d:f9:c3:93:72:9d:dc:55:20:76:48:46:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Validity
            Not Before: Jun 29 00:01:35 2025 GMT
            Not After : Jun 30 00:01:35 2025 GMT
        Subject: CN=a45fddb031a14aba800979204d16b885eec161e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:d4:2e:f9:b5:5f:84:c8:70:ef:94:ed:7f:
                    6f:01:84:63:49:06:79:43:b3:f4:b2:b5:84:78:4c:
                    e1:7d:6e:9a:60:a2:5b:4a:13:27:3b:d9:12:cb:d9:
                    d3:31:55:93:58:fe:ba:c8:8c:6e:a3:1b:cc:b6:cb:
                    ac:d8:27:12:2a:d4:9d:3b:68:36:c2:35:00:4a:4f:
                    10:fb:b6:d8:9b:54:09:a3:e7:dc:b0:ad:6b:7d:36:
                    5b:21:de:1e:47:94:dc:9c:18:71:45:84:ab:f8:a6:
                    f3:70:44:0a:ff:6c:a0:cb:80:41:c5:7a:a0:f3:5a:
                    5d:13:71:23:ea:44:7c:c2:6a:19:af:32:14:72:c8:
                    56:2f:91:4a:cb:36:aa:75:ff:9c:03:8a:aa:3f:28:
                    95:e6:ed:7b:71:cc:59:c3:41:ee:52:4d:b3:2b:43:
                    d8:df:73:06:a9:5b:25:34:e2:d2:69:6e:ff:1b:c2:
                    2b:45:cd:11:ed:2b:f9:f4:83:c9:dd:b0:fc:7d:57:
                    2d:85:43:c6:3d:9c:37:8e:16:29:db:45:92:01:a8:
                    4a:20:ed:40:ac:9c:f0:11:7c:41:d5:c9:39:e0:7d:
                    aa:16:7b:c0:b6:c9:89:35:60:4b:e7:e3:5c:9e:03:
                    76:c2:0a:89:0d:72:f4:48:2f:9f:24:68:69:b4:c8:
                    86:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5F:DD:B0:31:A1:4A:BA:80:09:79:20:4D:16:B8:85:EE:C1:61:E5
            X509v3 Authority Key Identifier:
                keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:80:44:64:e0:db:e1:d6:04:8d:a5:91:c8:cc:cc:6b:41:94:
         9c:20:f1:62:1a:cf:16:6d:f9:56:9a:6f:2b:be:ff:58:68:3e:
         77:23:9b:4f:2c:a5:78:10:45:f8:0d:65:6f:ba:84:79:65:65:
         8b:19:0a:9d:0c:6d:c6:84:10:13:40:ee:61:06:d7:c1:53:00:
         9f:03:62:12:77:98:17:7f:ae:7e:62:69:93:1d:92:35:8b:1d:
         72:de:70:27:74:6e:a5:7c:ca:22:b1:7e:03:81:22:39:fa:75:
         0c:00:38:20:d5:31:9f:43:95:73:e7:de:37:e7:bf:77:5a:21:
         d5:f9:2c:d5:1a:ce:19:90:c9:4f:8a:d3:8c:25:6c:91:83:a3:
         c9:bc:87:a1:de:44:c1:35:1a:84:f3:b5:38:74:71:08:a8:06:
         02:f6:7d:c1:08:a5:df:b2:f0:2b:ea:23:9d:01:35:27:3b:a3:
         92:62:ec:09:61:0e:8d:9a:74:4d:76:9a:80:92:a4:d3:cf:86:
         38:90:d9:5c:42:87:db:81:7d:2a:33:30:80:58:9d:d0:1c:f3:
         76:ad:30:c2:96:d1:74:9f:4b:ef:f6:15:23:e0:2c:a5:cb:9d:
         73:4b:5b:b7:8f:f4:cc:7e:31:bb:37:d0:c7:93:f0:1c:e8:95:
         22:ca:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:26:36 2025 by rpki-client