Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
File:                     WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft (raw, json)
Hash identifier:          gP5Immz26AdB5VosHgALRBjRvWium0mRasvSC00B/J8=
Subject key identifier:   09:45:D4:3B:22:3E:2E:D6:88:EC:7B:7E:DC:EB:4B:49:3D:7A:8E:97
Authority key identifier: 59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B
Certificate issuer:       /CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
Certificate serial:       0197B96A6CFFA4F4A58B996697F34845C308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
Manifest number:          0686
Signing time:             Sun 29 Jun 2025 02:00:49 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:49 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:49 +0000
Files and hashes:         1: Vm3FZcwyN5QxEii_ssxb-za5Fkk.roa (hash: InHAGmxk/rpqwiHkXwhjwEsvW1iLiHdwr3I++HGignQ=)
                          2: WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl (hash: 6eUJc9hJRG8bIBtukTCFnpF/h02uz7dB12ojxAeuiI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:6c:ff:a4:f4:a5:8b:99:66:97:f3:48:45:c3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59457c685c5b15c3af4d43b60e4d4c0a0eeed68b
        Validity
            Not Before: Jun 29 02:00:49 2025 GMT
            Not After : Jun 30 02:00:49 2025 GMT
        Subject: CN=0945d43b223e2ed688ec7b7edceb4b493d7a8e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d1:f1:ed:6c:94:f5:4f:2a:6c:5a:e2:ef:ae:
                    f5:26:e9:e3:31:5d:5e:88:a9:4b:c1:8d:5a:61:71:
                    75:be:83:44:b8:f1:30:c1:38:93:7e:f7:cb:db:87:
                    a0:98:51:1e:2f:cd:b0:28:a7:81:d7:52:f6:d1:c1:
                    58:99:52:2c:57:25:14:f8:ef:d1:c3:e6:56:b0:f8:
                    7f:21:62:e6:59:a8:0b:04:77:e7:52:14:26:44:97:
                    a5:58:61:92:f3:cd:fb:0e:61:67:0b:bf:fd:47:22:
                    f4:b0:16:2e:5e:bd:c4:68:26:21:09:ab:49:51:e9:
                    b2:c9:71:ed:81:44:87:87:08:30:12:b4:26:9a:d9:
                    a6:b3:32:44:cb:8d:cb:9a:65:3e:8a:58:24:74:d3:
                    d5:65:08:4e:8b:90:87:54:65:14:60:d4:af:89:58:
                    dc:d1:8c:46:37:3e:0a:03:28:6d:08:d0:3b:c1:cc:
                    e1:1b:a5:5d:39:4a:b0:22:93:59:c9:20:f0:0c:d1:
                    82:d3:19:30:8b:52:46:c7:04:0f:09:04:27:87:8a:
                    45:33:e9:c6:94:fa:84:87:a6:29:c3:3e:09:84:d2:
                    f0:49:69:bd:93:49:e4:54:d7:26:02:69:2d:04:12:
                    dc:7c:b9:4b:94:6d:bf:09:0f:07:9b:f2:11:b1:cb:
                    cd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:45:D4:3B:22:3E:2E:D6:88:EC:7B:7E:DC:EB:4B:49:3D:7A:8E:97
            X509v3 Authority Key Identifier:
                keyid:59:45:7C:68:5C:5B:15:C3:AF:4D:43:B6:0E:4D:4C:0A:0E:EE:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUV8aFxbFcOvTUO2Dk1MCg7u1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f4821b-0863-45ed-a6cd-0bf2a1b2cccb/1/WUV8aFxbFcOvTUO2Dk1MCg7u1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:ad:a7:54:b5:8a:b4:90:98:25:56:21:b9:8e:2e:aa:88:
         f0:1e:03:3a:bc:ba:5f:e7:72:8d:ca:d9:f4:b3:51:71:57:57:
         8d:f0:2a:1b:1a:f6:02:19:d2:eb:b6:11:76:bf:97:4d:ac:61:
         1a:14:16:6e:62:b8:34:4e:09:24:cd:d4:d0:68:af:70:32:38:
         3e:4d:37:28:51:1c:83:03:3b:7f:cd:7b:03:2b:a1:fa:18:5a:
         3e:00:aa:cd:8a:2b:75:38:7c:8a:e1:d3:f4:b2:9e:b6:78:63:
         39:d4:1c:f2:e4:18:1e:72:10:7c:d7:11:93:5d:29:ab:4f:85:
         e1:d9:97:fc:98:fc:b6:8c:c2:a6:29:ef:26:14:46:eb:04:0d:
         ff:b5:bc:b8:c9:ae:71:e3:48:d1:c7:46:1f:c2:59:7a:82:d1:
         8b:58:ea:79:47:fa:95:1d:3f:a0:16:a3:9a:94:2d:6a:4a:e0:
         49:52:42:f9:f8:cc:22:09:98:d1:61:25:33:a4:7e:73:4d:da:
         62:14:5d:9a:32:ea:c6:2a:6d:af:86:d4:fc:f4:54:0e:26:a2:
         20:f8:c8:d4:bb:70:1b:d7:6f:8b:09:a0:a5:7e:2e:28:3b:31:
         ff:b1:1e:0d:c1:0d:79:04:22:85:a8:6e:dd:8e:98:9b:8f:91:
         19:2a:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:56:52 2025 by rpki-client