Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File:                     wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier:          1IC9UcQkZ17fBCKO21W07JCh5pRwA8Bim6lSsnHOTjQ=
Subject key identifier:   3E:AA:2F:5E:1E:5E:2F:F7:E5:3B:44:24:95:B5:C7:F0:65:36:61:9F
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer:       /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial:       0197B7EA7788159EF0EB136C9A6B5044C9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 19:01:25 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:25 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:25 +0000
Files and hashes:         1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
                          2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: TmsveGdsBXHsEycCB2dAz2Vrd+V/i78c8B7KO/+lseU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:77:88:15:9e:f0:eb:13:6c:9a:6b:50:44:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
        Validity
            Not Before: Jun 28 19:01:25 2025 GMT
            Not After : Jun 29 19:01:25 2025 GMT
        Subject: CN=3eaa2f5e1e5e2ff7e53b442495b5c7f06536619f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:ab:19:50:19:81:58:02:dc:ff:d5:43:85:
                    dd:88:eb:6c:66:d4:f7:f7:79:65:27:5b:78:95:d9:
                    49:bf:85:06:3f:7d:77:06:9b:3a:2a:61:cb:bc:aa:
                    d3:49:f6:d3:95:a8:04:72:7c:c0:c7:87:fe:5a:17:
                    13:78:d4:b0:87:3f:c0:7c:50:e1:23:07:ea:cc:53:
                    b2:00:f9:23:ee:a7:3e:f2:94:c2:9a:ba:df:6a:3d:
                    2f:6f:93:74:ab:a1:70:9d:f0:48:9e:14:0f:4f:96:
                    f3:6f:64:b5:8d:e8:eb:7d:24:80:79:79:13:73:06:
                    d8:e1:cc:e7:9b:7b:50:cd:5a:97:ad:82:95:a1:ad:
                    05:2c:c7:f2:2d:8d:18:3b:ed:69:92:57:0d:b1:0c:
                    5b:1c:13:b5:b5:ca:8d:76:7e:89:cc:38:04:71:85:
                    66:bd:88:53:fa:56:e1:5a:ba:1a:21:75:ff:a0:7f:
                    e9:b4:d0:67:00:6e:aa:f1:a2:3f:5f:29:c7:8a:5e:
                    f7:67:69:4c:4a:fd:ed:4c:55:8d:67:12:8a:ef:74:
                    06:e6:10:1b:a8:f7:5e:99:5c:2b:68:91:0d:00:ce:
                    bf:5b:d9:3d:50:7c:48:7d:12:11:78:d1:82:76:74:
                    ce:b4:c0:04:13:c7:40:39:77:7a:60:16:c1:f7:5d:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:2F:5E:1E:5E:2F:F7:E5:3B:44:24:95:B5:C7:F0:65:36:61:9F
            X509v3 Authority Key Identifier:
                keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f0:b4:cc:04:94:11:47:bc:e1:71:34:41:b3:c8:c5:c6:84:
         cc:f5:58:c6:70:1e:e7:7c:16:08:59:14:af:ad:7a:05:8d:c4:
         fa:29:67:cd:b2:68:02:d7:aa:a4:0c:83:9b:f8:80:eb:f8:05:
         31:c8:59:9a:da:74:2f:31:48:cb:aa:c7:5e:30:f2:f4:84:8c:
         cc:da:ec:a4:1f:ac:ec:1b:02:bb:7f:56:e1:e6:09:42:91:eb:
         58:34:c4:c0:91:82:dc:44:cf:e5:eb:ac:4d:7d:da:cf:08:14:
         a0:01:41:c3:9b:6e:3b:c9:f3:4a:36:29:bb:98:5e:cc:6a:d5:
         06:54:bb:65:ec:ec:50:d9:2e:ee:78:1f:60:25:98:a4:95:ab:
         6f:4b:10:dd:c4:3f:8d:6f:64:88:30:6a:9c:e9:96:28:f0:14:
         47:37:30:c0:2a:14:23:05:75:11:39:a4:f3:89:0a:65:4d:97:
         46:92:fc:a5:b4:c5:6c:66:68:a6:cb:a3:14:df:68:93:c9:36:
         c2:1d:05:ee:2a:0f:a5:2f:a8:65:6f:08:d4:aa:44:8e:98:cf:
         d0:44:a7:8e:f3:32:0d:8d:cf:62:94:44:9c:e4:fe:b1:fd:e1:
         e2:8e:63:c0:45:92:ac:92:60:41:a0:3c:3b:c2:c0:be:bb:3c:
         f2:ba:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:57 2025 by rpki-client