Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
File:                     we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json)
Hash identifier:          wXuk8LTJ8p+8sIYzNGjxHqc8D+evg7dKT9hmUvSgFHQ=
Subject key identifier:   FA:FD:A1:C6:C4:5D:EB:EE:7C:2A:A9:2D:A7:88:CC:C5:A6:FF:A3:D8
Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
Certificate issuer:       /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Certificate serial:       01965500F554D61F6B21983C9B4C08E4C439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
Manifest number:          DE
Signing time:             Sun 20 Apr 2025 21:00:48 +0000
Manifest this update:     Sun 20 Apr 2025 21:00:48 +0000
Manifest next update:     Mon 21 Apr 2025 21:00:48 +0000
Files and hashes:         1: iCajC07N1wXhLZhUBQa5qaDtpkc.roa (hash: TBjsHC2hLzzwIzsyf+O4ISG2vQbLL5AsHhFZzfGik5g=)
                          2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: veze4Soo1LWcCkH5eKNwT5uOWP3o6LPDbCmZcRuz6IE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:00:f5:54:d6:1f:6b:21:98:3c:9b:4c:08:e4:c4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
        Validity
            Not Before: Apr 20 21:00:48 2025 GMT
            Not After : Apr 21 21:00:48 2025 GMT
        Subject: CN=fafda1c6c45debee7c2aa92da788ccc5a6ffa3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:70:98:e7:2e:b6:e7:4e:fb:f4:97:14:ad:
                    6f:d0:5d:d5:46:85:10:58:1c:9b:78:4d:42:36:4d:
                    f5:7e:0d:5d:2c:3c:89:41:2f:ec:35:bc:91:7d:6d:
                    77:ef:b3:1d:f8:68:6b:31:bf:f9:03:76:9d:35:1b:
                    59:a0:e4:ce:57:89:fd:ac:9d:5d:92:89:3c:0e:67:
                    d9:98:86:c8:e5:65:af:96:f6:7a:18:1b:67:91:ca:
                    19:e1:98:7d:fc:51:91:0e:64:6f:f7:57:3f:7d:67:
                    83:16:9c:1d:50:34:c8:28:65:3c:d0:44:0d:a0:c3:
                    f1:01:32:bc:6a:17:5c:85:12:d8:17:31:3b:a6:6b:
                    c8:26:3e:2b:75:a3:6a:e0:82:0f:5a:3d:c8:37:ed:
                    24:99:30:61:8e:f8:bc:ef:a1:f4:5d:47:06:d3:7b:
                    61:fb:f0:fd:73:3a:e7:b4:75:31:25:d0:d1:97:ab:
                    04:e9:6f:ac:45:95:27:00:8c:a3:ae:75:65:e3:53:
                    c8:19:8f:c4:95:63:6a:2f:e2:dd:6a:4e:bf:f7:e4:
                    5f:4f:e1:d5:0a:74:ea:62:6a:87:8a:f0:d5:8b:f4:
                    fc:b0:e8:d7:b2:32:f6:0d:d7:be:10:ba:90:35:47:
                    67:d8:8f:f7:62:0e:e7:ac:1c:cd:65:3e:f2:d4:08:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FD:A1:C6:C4:5D:EB:EE:7C:2A:A9:2D:A7:88:CC:C5:A6:FF:A3:D8
            X509v3 Authority Key Identifier:
                keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:69:a8:33:02:80:73:f9:e4:6d:88:7b:d4:62:e0:09:e8:
         27:a3:a6:e9:21:a9:1a:c5:02:3c:11:11:ab:12:dd:14:00:65:
         83:a3:bd:6b:f9:b4:c9:9c:67:5f:63:07:57:3c:83:32:d6:f5:
         e9:34:a2:bd:ae:5c:68:3a:ff:ee:65:5a:01:83:5f:e4:4b:0e:
         cb:bd:81:4a:a1:6a:96:dd:23:ec:e7:b1:06:ac:0c:01:60:ff:
         19:63:f6:48:12:15:7e:55:b2:30:7d:4c:fd:15:8e:4a:9a:61:
         98:17:08:4e:a7:1a:ca:67:9c:ca:3c:05:6c:1a:06:64:22:fb:
         d4:4f:e0:ce:89:38:d4:4b:52:eb:d8:ed:a0:d1:90:70:c7:b0:
         b4:3e:45:cf:a0:33:19:1e:21:fc:89:29:19:92:21:12:c1:49:
         58:b0:a8:f8:a9:52:2e:43:0f:a7:f8:e1:5e:93:aa:5a:f7:45:
         e9:2f:09:6d:5c:99:80:f6:d2:34:f6:32:fe:6f:1d:69:e2:ce:
         72:e4:78:d3:95:e2:5b:bd:6b:87:4a:0c:a8:07:c1:f9:65:cc:
         77:26:af:68:4a:42:47:2a:e3:8d:20:54:ad:93:65:0c:5f:40:
         21:43:e4:37:a3:fa:9e:f3:ed:ea:59:4d:3c:45:c1:f3:14:b3:
         39:88:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:00:23 2025 by rpki-client