Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
File:                     MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft (raw, json)
Hash identifier:          dRtxt/fSKmfM8WTXybv80JU2FxWuoi5x3Dpu0hEBqog=
Subject key identifier:   71:A1:2B:63:30:01:04:56:0B:CD:D8:16:0E:24:0A:6B:BD:2C:6B:D4
Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
Certificate issuer:       /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Certificate serial:       0197B74518E1C713819EC046EBC49FD7D0A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
Manifest number:          0E67
Signing time:             Sat 28 Jun 2025 16:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:48 +0000
Files and hashes:         1: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl (hash: kLVlM3SnzL0LLMcHkrVeX/GlWF8+XIPSZeOpFD7ayV0=)
                          2: jlPrG3yw9VWSwdIgD6U56n3FJO4.roa (hash: //BBruzTksW7mSOBdLHpnW4EtV41ZFbnLnxHoJuolZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:18:e1:c7:13:81:9e:c0:46:eb:c4:9f:d7:d0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
        Validity
            Not Before: Jun 28 16:00:48 2025 GMT
            Not After : Jun 29 16:00:48 2025 GMT
        Subject: CN=71a12b63300104560bcdd8160e240a6bbd2c6bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:c4:a3:4e:b1:b2:05:e3:34:ab:56:03:71:
                    55:25:5b:f2:48:34:ea:97:86:62:a3:fd:93:8f:f5:
                    9f:e4:a4:ec:98:90:32:40:5a:76:bf:89:20:ea:a6:
                    86:53:7a:38:57:fc:e6:1b:ab:b4:d7:5b:ea:c8:4e:
                    f4:b3:b1:a4:f8:44:86:ce:4f:d1:c1:2d:d9:60:ee:
                    35:21:a2:8c:fb:bb:1f:8c:1d:3a:07:a7:00:21:fa:
                    18:97:a9:ef:50:f4:b2:eb:25:03:28:18:e9:90:35:
                    7a:a9:8b:5a:0a:c0:78:52:66:25:ad:28:ae:00:6a:
                    9d:c4:28:ff:72:66:f1:d9:39:92:9c:93:3a:7d:d4:
                    01:cf:04:50:2f:a8:94:a2:4c:40:a5:d2:b0:00:d3:
                    30:75:29:e4:22:d2:2e:a4:a9:f7:e9:ef:5d:56:21:
                    97:75:cb:ce:ce:cf:84:01:44:a6:d6:b5:c3:fd:ca:
                    5f:fb:e8:b6:dc:ec:29:11:38:52:04:08:25:07:6a:
                    2d:d7:a0:7e:ae:af:fb:b5:86:67:4e:dd:d1:43:ca:
                    02:d7:bc:6b:f6:06:35:62:be:1a:1f:fb:aa:0f:c0:
                    55:71:6f:60:ac:be:ac:8f:ff:8b:ff:b9:95:66:c7:
                    5a:f3:94:07:76:c5:54:40:4d:99:42:60:fb:96:17:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A1:2B:63:30:01:04:56:0B:CD:D8:16:0E:24:0A:6B:BD:2C:6B:D4
            X509v3 Authority Key Identifier:
                keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:32:27:b6:69:bc:af:1d:0e:81:a0:26:75:fc:22:22:3e:
         65:61:db:f6:97:a2:9b:8f:b2:5e:98:29:40:db:fd:ee:5f:0e:
         aa:66:0f:b4:c7:9f:ba:d7:08:b3:0a:3d:8a:08:87:d9:28:69:
         43:e9:9c:cb:fc:94:33:82:a9:81:2c:ae:fb:5a:57:3a:4e:12:
         c3:da:f7:3b:52:14:eb:3a:4e:3f:87:02:a4:c5:85:74:a5:3b:
         b3:58:6f:44:d4:49:c1:26:e0:ed:14:da:c2:2d:5e:c3:07:2a:
         c0:a6:62:36:46:30:d3:c9:96:fb:94:0c:53:e7:60:f2:db:5b:
         c1:e9:83:6a:8d:38:a2:aa:80:65:29:49:0e:39:8c:47:eb:aa:
         fc:14:9e:8a:2a:64:cf:8b:65:57:d2:06:84:06:9c:8b:15:83:
         70:f8:8d:96:6e:d2:be:15:d4:4e:b1:9c:14:21:0c:be:c0:cd:
         07:2c:3e:b9:5c:82:dc:d6:9b:03:88:02:e7:8e:93:e3:d8:3e:
         6a:0d:2f:28:fb:1e:52:b9:57:73:b8:28:cf:51:a6:b3:8e:b3:
         5c:78:cf:ec:b1:1c:99:1f:ce:05:94:83:00:6a:84:a4:f2:7f:
         ec:54:4b:c3:20:88:8f:b8:2e:59:ab:8b:ef:ca:d1:0a:69:5e:
         54:0b:43:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:41 2025 by rpki-client