Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
File:                     wnaouodMP73a00TQMliz4sBNe8s.mft (raw, json)
Hash identifier:          0tj95jHIQY//bw0ltQ7YrAnwhogVi78ceBJgUAHdDqI=
Subject key identifier:   59:CE:78:AD:E0:9D:5A:A5:12:FD:22:32:29:12:59:2C:60:5F:9A:82
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Certificate issuer:       /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial:       019654C981728ACBECCB999237E442A1FB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
Manifest number:          0E2C
Signing time:             Sun 20 Apr 2025 20:00:13 +0000
Manifest this update:     Sun 20 Apr 2025 20:00:13 +0000
Manifest next update:     Mon 21 Apr 2025 20:00:13 +0000
Files and hashes:         1: 0Nf_rzlffoz7wwVi3Pb2g0HuGls.roa (hash: 0LfgA8H9e4em0FQLoBAMDdwCTf6yeabJ5FzgfDm6WQc=)
                          2: Pki6gb_S1520VEM07UejShPDZGk.roa (hash: 7A7gzwXJGbe4mkaDrxLi5aJVByeCNXa6iSELALDb/bg=)
                          3: wnaouodMP73a00TQMliz4sBNe8s.crl (hash: GT5NwCz0ZQzdpyINv28/yrobXliYKlJQcIZJUoH1Uno=)
                          4: yBBzstTaOk57G_P5zLCVHKExcZ8.roa (hash: mLlsvymN4uLLcemV8g47YSkzHhZQynCIXD4Wv9H9sKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:c9:81:72:8a:cb:ec:cb:99:92:37:e4:42:a1:fb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
        Validity
            Not Before: Apr 20 20:00:13 2025 GMT
            Not After : Apr 21 20:00:13 2025 GMT
        Subject: CN=59ce78ade09d5aa512fd22322912592c605f9a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:2b:7e:30:d3:ed:8f:5d:9f:47:83:60:d1:
                    37:17:f0:0c:28:ef:c8:db:6c:12:28:39:60:74:b3:
                    85:48:5f:fa:e8:0d:1d:65:69:80:1c:5b:59:bf:b5:
                    9b:63:de:19:64:56:64:ad:35:54:46:6d:81:21:95:
                    1d:fb:f2:6b:46:3b:56:8e:b9:e6:39:36:92:94:59:
                    a1:d8:ad:f0:38:82:7f:46:84:e2:e0:c8:d8:54:bb:
                    e9:80:2e:19:92:74:f5:5b:b7:4c:72:11:9d:0f:83:
                    98:97:e5:7d:24:8e:4e:f7:0d:42:41:db:87:cf:d1:
                    90:7f:15:3a:c7:0f:dd:6f:90:66:07:ab:eb:4b:e2:
                    a4:ce:f3:64:c1:00:16:e7:38:5c:65:f8:ac:b2:a9:
                    6d:dc:db:4f:22:17:62:23:21:df:44:44:2a:c8:a9:
                    8f:07:36:d0:a2:95:ef:72:9c:3b:a1:9e:66:c8:54:
                    4a:d3:a9:da:62:fc:d9:d6:8a:ac:5f:08:f6:ea:c5:
                    ca:4b:57:75:76:c8:2a:1b:bb:9e:54:ef:0c:cd:8d:
                    5d:32:41:08:40:dd:3a:d2:e4:02:6a:ca:46:05:a3:
                    c4:db:cf:c8:88:7d:4d:03:10:1b:e1:60:01:3c:18:
                    ec:7a:a7:48:1a:9e:86:ee:53:0c:17:8c:94:b3:20:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CE:78:AD:E0:9D:5A:A5:12:FD:22:32:29:12:59:2C:60:5F:9A:82
            X509v3 Authority Key Identifier:
                keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:3a:ef:e7:2f:3a:0a:b8:4f:a2:af:80:30:fe:be:60:ae:
         d5:8d:92:fd:c2:22:56:cf:b1:70:55:66:0f:cf:d9:e3:b7:40:
         4c:fb:59:20:f3:28:5d:15:31:80:c7:1a:f2:55:b0:24:eb:75:
         77:86:9c:3a:1e:21:13:ed:45:b2:72:f9:16:eb:45:c2:c8:58:
         48:14:44:67:01:19:ec:45:4d:8e:10:c8:9c:66:0a:05:ea:e1:
         0e:7d:3b:8d:76:6f:42:3a:2d:a2:45:4c:43:8f:59:84:78:a3:
         f0:b7:c1:18:6e:0c:cd:5e:33:4c:2a:9a:a6:02:79:be:fa:44:
         4b:92:f9:6b:2f:a8:10:ce:13:37:11:71:a5:f2:c7:b5:9e:08:
         94:7d:a4:57:91:54:0d:cb:aa:10:af:31:1d:4e:71:df:47:6a:
         43:70:c8:54:71:5f:05:84:17:a6:40:ca:ec:8d:55:a9:79:0e:
         2d:23:6d:22:5c:21:cb:18:8d:71:93:5e:e6:55:a0:34:0c:15:
         74:8d:5a:fb:1c:37:83:65:7a:50:23:cc:84:0a:c6:50:43:94:
         79:0e:33:93:9d:22:fe:43:46:53:a3:d3:cd:23:ad:14:2e:f4:
         54:f4:31:4c:f6:ee:35:4b:f4:79:39:30:97:01:a4:6f:7b:10:
         87:0b:ab:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:06 2025 by rpki-client