Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          zVXGAXWSyGzZCGCiL9r5nOdS2npUQ2e2QoTWhuH1auo=
Subject key identifier:   46:20:A5:83:4B:BF:07:3D:5F:7A:4F:44:B8:AE:C9:FA:C5:1B:97:4E
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       0197B7EA41C456108131542758FA88792CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          0F05
Signing time:             Sat 28 Jun 2025 19:01:11 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:11 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:11 +0000
Files and hashes:         1: Xx4qE33JyRm22QhkLWfKDRWAGnk.roa (hash: VBDGbrM1tTGjVGL2Bxa5hAlgL/jyV9v4XsVJ8TB6uSs=)
                          2: eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa (hash: I5NjIqWx/H03PJ2xIH/VMY1e8Yxikj5eCAeypnxIYcY=)
                          3: mHOne7l3lhdaqSro0d11vLE5d_4.roa (hash: 3sZoQqde77oR7zY/rsYSyM4QGdtUrSErY7LS0PKr8xo=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: kK159eNcpopthgRizXIR0wwm7Q/l4GUvYu0M2DiBDjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:41:c4:56:10:81:31:54:27:58:fa:88:79:2c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: Jun 28 19:01:11 2025 GMT
            Not After : Jun 29 19:01:11 2025 GMT
        Subject: CN=4620a5834bbf073d5f7a4f44b8aec9fac51b974e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:fd:ea:aa:3e:cf:f7:9e:b7:0f:b7:be:76:
                    49:26:15:1c:ad:60:d0:84:5d:7a:44:9d:bd:e8:be:
                    1b:63:13:bf:3b:9a:40:29:4b:e4:98:b3:9d:2b:d5:
                    9b:f8:83:91:e5:f1:9e:e1:d1:19:96:0c:83:08:c3:
                    3a:b7:c4:be:c6:01:5b:33:2c:83:a3:92:4b:da:9d:
                    94:c1:d9:1d:00:d6:25:37:26:2d:26:f9:83:1e:a0:
                    d0:2b:54:c7:64:06:2d:bd:5f:35:d2:4a:58:a3:83:
                    07:a5:5d:0a:ec:e7:6b:59:b5:c2:ab:2a:ed:63:21:
                    e5:b6:ad:e9:43:b7:e0:16:0e:c9:c2:1e:33:b2:6b:
                    bb:8c:ea:b8:cb:08:16:a1:ce:f4:ae:0d:88:0a:d7:
                    22:16:99:34:e7:d7:e1:f2:2e:dd:cb:e3:a8:34:9b:
                    58:b3:56:c7:27:4e:ee:86:58:c0:a8:be:2f:c5:4e:
                    b3:d7:d7:69:a4:48:74:07:3d:9d:08:6e:10:97:6e:
                    6c:77:21:12:47:a1:6b:a8:a5:cc:c5:8e:fb:fa:cc:
                    49:08:6e:05:f9:45:23:68:34:53:f7:e4:02:2a:ff:
                    84:87:3e:31:40:ee:fb:ab:38:fc:13:0b:64:a4:8a:
                    ca:ac:96:76:d1:44:14:40:c7:2f:fb:f0:0b:5a:ea:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:20:A5:83:4B:BF:07:3D:5F:7A:4F:44:B8:AE:C9:FA:C5:1B:97:4E
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:b8:e0:11:f0:0f:d3:16:9e:cb:dd:bf:97:9a:f9:42:fe:
         25:cb:43:5b:30:26:6a:d3:43:4a:c5:71:3d:ce:fe:a6:50:2a:
         d0:2d:51:53:93:3a:44:9c:e0:a4:28:4a:40:82:e1:04:c5:e7:
         9d:64:ee:8b:9a:86:55:cc:43:68:f5:f3:58:e5:33:7b:3f:12:
         ac:4e:00:0b:a4:03:69:75:f4:96:74:8b:41:0d:27:13:49:e7:
         3d:4a:40:db:e9:73:97:d3:b8:ea:04:a9:1e:f5:69:42:ce:f1:
         50:a6:d2:e2:fc:64:ac:fc:d5:5e:e7:d8:cb:57:cd:44:d1:6a:
         d9:b7:3e:36:4a:87:32:b2:3c:94:fa:c6:00:f7:74:13:75:66:
         38:82:0a:f5:92:7d:cb:f3:c8:d9:15:3e:24:8c:e0:8d:d5:c7:
         2c:4b:8f:08:49:26:81:ce:84:f7:04:11:ab:1c:51:e8:03:98:
         16:22:96:ae:3a:ba:26:be:15:7a:de:99:03:b6:0f:73:cc:e4:
         02:ef:9c:dd:e6:5e:0d:1f:3c:f4:d0:6b:e3:ad:8d:fe:e1:e6:
         38:83:40:17:6a:0b:53:6f:21:40:5a:cb:d6:30:ed:0d:ed:d7:
         e1:f4:96:b6:81:a4:87:69:7b:14:73:e7:90:b4:8b:c7:9b:41:
         18:6a:6f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:29 2025 by rpki-client