Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File:                     weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier:          5wMmiuJk4zzWCZA9VoVnpD8k3TUmazV6QeEXDDszGMY=
Subject key identifier:   0D:8B:C4:7D:15:EA:9C:FF:DF:09:E2:76:1E:66:7A:8F:E1:E1:F8:B2
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer:       /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial:       0197B77C7053D1198E313C4C9F9DE15F6609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number:          142D
Signing time:             Sat 28 Jun 2025 17:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:15 +0000
Files and hashes:         1: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (hash: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=)
                          2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: tfwnXYGtedVidYCgKRx6AVge0GsVxkg7F0q564RLr6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:70:53:d1:19:8e:31:3c:4c:9f:9d:e1:5f:66:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
        Validity
            Not Before: Jun 28 17:01:15 2025 GMT
            Not After : Jun 29 17:01:15 2025 GMT
        Subject: CN=0d8bc47d15ea9cffdf09e2761e667a8fe1e1f8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:30:16:05:bf:28:dc:ed:60:04:ee:84:54:
                    e8:a1:6d:7d:f6:63:e0:84:0d:bf:8a:24:ed:33:ea:
                    f9:54:8a:a2:d3:c1:3b:88:ca:d1:02:c0:41:40:59:
                    79:4e:0d:25:f5:b6:71:12:5c:eb:4f:83:f6:7c:c9:
                    b2:7e:66:d8:eb:ce:e4:c7:ce:db:5d:31:38:6e:61:
                    fb:ef:11:0f:c2:29:8c:20:8d:25:23:33:30:ae:4b:
                    ae:f0:55:65:af:6b:8f:2f:dd:09:fc:f7:57:5e:1d:
                    7a:0f:f9:00:64:64:40:5e:ed:16:34:ed:89:c6:b3:
                    de:b1:e9:5e:ab:37:b6:98:19:96:04:9e:f7:e4:9b:
                    c4:33:d7:aa:96:2e:77:7f:c1:88:19:f6:d3:99:9a:
                    89:3b:5b:a9:52:27:a4:b1:af:bc:b1:cb:7e:40:35:
                    33:fb:02:9a:ac:92:30:aa:93:17:ff:02:a5:05:06:
                    e9:20:d4:c5:76:e4:2a:c7:8d:8f:a2:7d:1d:4c:98:
                    c5:65:f2:ea:70:63:16:39:ce:64:26:80:f4:b2:9e:
                    35:b0:84:0f:26:30:85:f0:40:a3:86:99:80:f2:2a:
                    2b:f6:1a:aa:99:33:6f:9d:01:af:1f:35:c3:80:90:
                    c9:9c:15:39:86:f5:d4:b5:2d:36:c0:5c:16:c0:cc:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8B:C4:7D:15:EA:9C:FF:DF:09:E2:76:1E:66:7A:8F:E1:E1:F8:B2
            X509v3 Authority Key Identifier:
                keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b7:e0:7b:1c:86:9c:a4:bd:92:d4:59:d2:2a:65:84:9d:67:
         1c:d5:5d:dc:e8:bb:50:ad:32:07:bc:69:18:23:fe:57:1f:01:
         3b:f3:fd:39:84:d4:4e:5d:12:3d:b9:1b:9c:4a:44:da:ef:1f:
         e9:46:19:d9:19:19:94:2c:26:f3:78:92:af:a9:ff:1a:6a:7e:
         50:29:45:35:4e:e0:be:b6:81:a8:e8:bd:b1:c2:bc:16:3d:b6:
         67:57:64:2f:0c:c0:f5:9e:48:5b:c9:e9:31:9f:a2:25:2a:c9:
         aa:b4:8a:5c:97:a3:36:02:81:36:02:9e:58:8d:b8:90:34:37:
         32:d8:db:ef:2e:10:4c:0b:be:08:40:17:dd:20:e8:23:0d:af:
         48:d8:21:24:2c:3b:24:46:04:b4:6d:3c:cb:60:83:b3:30:7c:
         5f:03:09:51:3b:45:2c:b4:01:43:7e:2d:15:42:13:1b:46:eb:
         39:73:24:5f:78:c4:83:bd:f9:26:4d:8f:10:a4:4c:54:96:8c:
         f1:3b:0d:1f:40:3e:c0:53:33:56:7a:66:13:0a:3f:fc:3f:4d:
         49:f4:67:fc:b5:40:10:9f:b8:d3:45:08:95:25:30:6d:ba:61:
         65:6c:09:73:bf:6f:53:0a:59:83:b8:ec:14:ca:7b:ab:1a:5f:
         0e:a2:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:54 2025 by rpki-client