Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
File:                     wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json)
Hash identifier:          xsRSJ4kE8WExaSPGq32fy3IFLn22Q9czZZ/iHPMGMnE=
Subject key identifier:   26:A4:CA:71:EB:EE:5F:E5:2F:58:E2:C6:FB:F0:52:57:00:4B:B3:D6
Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
Certificate issuer:       /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Certificate serial:       0196572684D4E2A914CE466F84F29313E7E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
Manifest number:          08B9
Signing time:             Mon 21 Apr 2025 07:01:04 +0000
Manifest this update:     Mon 21 Apr 2025 07:01:04 +0000
Manifest next update:     Tue 22 Apr 2025 07:01:04 +0000
Files and hashes:         1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: tUtljddT1XxRpSC5pkX7LETcL6PCeh92xB2z16aYNpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:26:84:d4:e2:a9:14:ce:46:6f:84:f2:93:13:e7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
        Validity
            Not Before: Apr 21 07:01:04 2025 GMT
            Not After : Apr 22 07:01:04 2025 GMT
        Subject: CN=26a4ca71ebee5fe52f58e2c6fbf05257004bb3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ca:7c:04:9a:a8:1e:ea:de:12:07:ad:cc:5c:
                    8c:19:54:b8:1a:1c:6f:f3:aa:f1:b6:6b:30:4b:3f:
                    33:25:0d:8f:d5:c7:ee:e2:a8:37:36:52:eb:76:e6:
                    56:8c:39:df:f5:80:ef:84:3a:2e:9f:c5:b8:3c:a0:
                    a3:51:dc:53:ed:8b:16:d0:52:47:63:8b:b7:92:64:
                    0f:d9:dd:4c:ed:e1:b5:ea:01:37:c4:67:84:d5:af:
                    27:b1:98:63:62:df:09:28:0d:2b:13:1d:74:42:1b:
                    6d:c6:10:d7:57:c9:7a:e2:7b:09:2c:bb:4a:ca:f8:
                    59:54:21:9a:f4:57:9b:c2:78:b3:1f:b8:14:c0:ce:
                    2f:d7:1a:2f:2e:91:e1:22:39:0d:e6:06:e5:c4:fb:
                    46:68:7c:87:99:f5:30:0d:4e:71:be:86:48:15:ba:
                    27:ee:0a:91:8e:0c:d3:a3:dd:15:f0:fc:f6:14:90:
                    c9:48:01:d1:c9:7e:81:5c:8a:53:96:67:d0:18:af:
                    5e:9d:43:d0:f3:23:0c:36:66:e7:e0:3f:2c:ed:12:
                    27:5b:e4:fb:4e:be:03:b2:00:3b:0b:a7:7c:52:d0:
                    0c:82:35:77:27:c0:6f:ba:4d:82:2b:07:a0:26:7b:
                    a1:84:ab:da:36:97:9a:cf:dd:8d:a2:12:aa:39:68:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A4:CA:71:EB:EE:5F:E5:2F:58:E2:C6:FB:F0:52:57:00:4B:B3:D6
            X509v3 Authority Key Identifier:
                keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:a4:4f:17:78:e9:0b:ed:5d:d6:b7:e2:28:13:1e:71:da:
         cb:44:0e:57:fc:37:ee:84:2b:df:b6:30:ff:fd:83:9e:a5:13:
         d6:59:aa:53:ef:fb:4a:b8:d7:35:a0:de:f2:ec:9e:50:f6:b9:
         cc:42:2c:a5:8a:9d:5f:24:d1:b4:37:ec:38:00:bc:76:f5:d9:
         e0:d4:4f:49:0b:30:1b:7e:2a:fb:74:d7:c6:4a:21:40:3e:e4:
         ce:f1:3e:47:55:1c:89:e0:35:88:00:a4:2f:0c:43:eb:29:95:
         d0:1d:c9:d6:03:96:a9:ff:74:e0:48:df:01:71:be:fa:3d:9d:
         a8:8a:55:ca:2a:bc:04:cb:08:06:6e:43:68:6f:13:b6:95:e6:
         23:f7:9d:d2:c7:ec:26:1a:f1:f4:ba:ac:d9:d3:6a:70:68:92:
         20:80:a3:72:52:26:ac:59:fc:a0:55:41:bc:04:4d:17:c3:bc:
         fc:ee:5e:95:27:f0:55:f9:71:c0:e9:20:18:d4:e7:27:0c:9a:
         94:e0:5d:72:05:eb:ab:c4:7b:02:81:74:78:e4:87:17:14:1b:
         42:4f:12:e7:5b:28:0d:a3:fb:ad:1b:98:0c:f8:3b:03:3a:90:
         23:c9:23:f8:6e:9d:d9:69:4a:ad:b5:80:62:69:68:bd:39:26:
         6b:a7:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:00 2025 by rpki-client