Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
File:                     wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json)
Hash identifier:          rNW7bYgUn9u6L6GFTGCY6X4A3AxJjw6qJ1Aj9dgtK40=
Subject key identifier:   08:17:71:48:86:1E:32:47:3A:92:9B:B0:C4:05:6D:06:34:89:88:C7
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Certificate issuer:       /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial:       0197B6A104CC72617BB1F8E086BE372518C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
Manifest number:          0640
Signing time:             Sat 28 Jun 2025 13:01:35 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:35 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:35 +0000
Files and hashes:         1: A07rBLPAPzivhHQPWrLVL8fr4vA.roa (hash: VlcbwvEyslqH6S+MJRBxrFZy7T+nixBrVr4PtsCdFgM=)
                          2: Ew7W1lBVgJLIyCQCAyne42ycTas.roa (hash: RysgKvdqvkqP0KlE1Qc3VG7a+JllwpBR7B1FiPMxjQ4=)
                          3: _V9pWsG5mKkT0hA55j0yMIJFyYg.roa (hash: R+SUqygHtXUgXmQoQ+KnwbPjcscerG2zrxcHzWTA/qY=)
                          4: gRpdjkHl2Gq1MAKFRORb5pPq8PM.roa (hash: LY5M9Qpbq9NOsf+7d/+wVFe9puRCS44w4zFcim4Zfnw=)
                          5: l1RkBmRrPMovkJGjGAhqwG2TomQ.roa (hash: ja8aqL5wAU8Vk71Npu6WMYrryMZZjLGwpBOYQMZ/L/o=)
                          6: nOlap_eSkN0DuMkgqLYZtcf9o8o.roa (hash: satBk4ZVOcEhBt8FgPxbQTlQ/8tPeh7CEI+elm33h/g=)
                          7: p1itVAUNMpcg9efrkUlXwcxkTHc.roa (hash: lZrPbq0O52HxoU/DZm26/qI3xpj/wD998L13o21F+bc=)
                          8: u1FUL9P2Wkc4fYqdagqSagQaDdM.roa (hash: V3LfQzQEPdq88kGKzJvMGhfw6LsMIXH1yzOGmzYQ0Sw=)
                          9: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: eKQURZpTjt8clL7pLar/k2B/D7G0Hr72XRoj2dJi+eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:04:cc:72:61:7b:b1:f8:e0:86:be:37:25:18:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
        Validity
            Not Before: Jun 28 13:01:35 2025 GMT
            Not After : Jun 29 13:01:35 2025 GMT
        Subject: CN=08177148861e32473a929bb0c4056d06348988c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:5f:1b:cb:34:2d:38:d0:99:b1:a7:de:b5:
                    68:d3:0a:b2:c6:9f:4f:c8:a6:ff:1c:83:12:97:a7:
                    22:fe:3a:da:9e:5a:92:2b:16:c7:d8:fa:fb:b8:77:
                    17:cd:35:7b:9d:08:32:f7:25:e6:c9:2e:92:53:81:
                    67:13:ca:60:8d:8c:f2:f2:a3:09:66:a9:3b:1d:77:
                    d9:f1:f9:5e:68:96:89:09:ca:2e:c4:e2:e9:9b:57:
                    4f:ff:14:47:82:29:5b:22:ff:fb:95:00:52:2c:6a:
                    6a:f5:c2:c2:75:7d:49:67:ae:35:d8:37:03:67:14:
                    16:b6:bd:7e:f5:2c:c1:19:1c:59:89:6b:f7:0a:a9:
                    0a:bf:ff:1d:0c:93:b0:85:db:cc:bf:4a:ea:7c:cf:
                    37:46:33:9e:a0:22:0f:59:37:92:b0:63:76:38:24:
                    f7:54:54:51:dd:a7:0e:c9:dc:4b:92:c3:3e:ac:28:
                    2d:b3:a7:01:13:ba:33:16:d2:69:f1:4f:2f:cd:44:
                    dc:df:94:cb:b6:1b:c5:ed:9e:13:ec:cc:5b:a9:09:
                    16:65:65:23:72:64:da:c2:9c:ec:e9:e6:24:2d:ca:
                    bf:3d:85:76:cf:ea:cf:ac:27:08:29:3e:55:ef:13:
                    ce:77:f5:bf:9e:90:e1:c7:ef:7d:02:da:6a:f8:6f:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:17:71:48:86:1E:32:47:3A:92:9B:B0:C4:05:6D:06:34:89:88:C7
            X509v3 Authority Key Identifier:
                keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:67:f8:65:ad:f9:40:13:17:42:5b:c9:2a:1a:15:94:41:47:
         e3:98:ce:16:a8:4b:64:7d:7d:63:ed:53:f3:98:11:ae:68:72:
         9a:5f:85:93:f6:75:4a:f0:dc:f7:e1:e0:71:07:b2:8d:40:f8:
         43:a3:34:f8:59:13:16:ff:8c:9f:68:d2:39:83:f5:63:88:ce:
         19:f2:72:b4:f4:54:43:f3:d0:c0:8a:5c:19:02:49:38:43:d1:
         b8:c6:1d:7e:ef:50:95:90:b3:d2:7a:a5:d2:43:30:fa:74:0f:
         b5:d1:0c:22:a6:f1:7d:9e:4c:23:44:ba:a5:cb:47:d8:1b:0e:
         e3:7d:1e:fe:b9:5f:3f:62:63:09:da:f7:8c:7c:2f:86:11:35:
         48:b0:e7:43:de:35:61:ec:4f:1c:68:02:97:64:9e:96:a1:a7:
         25:93:b5:e1:b2:80:14:b1:2b:f9:a3:de:4d:58:53:59:31:66:
         5e:d2:72:ad:84:28:05:ce:5a:fb:74:c1:f0:d2:d5:d4:13:7d:
         e8:13:b4:7c:1a:35:a7:38:a6:d1:1d:6d:03:81:0f:34:3d:a1:
         0c:0d:0d:1d:fd:f4:a1:b2:97:77:84:82:8e:cb:ee:30:3a:59:
         d0:4e:07:a3:b0:89:6a:a7:1e:b4:65:c8:4a:be:93:76:a4:5e:
         11:f5:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:41 2025 by rpki-client