Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File:                     W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier:          gNniTWmO2//UTQuSZkuRAwkrGa6YazJy04Qw9QbZNLU=
Subject key identifier:   CC:64:A5:F9:60:D5:72:9F:9C:43:A6:D2:4B:34:4D:47:02:D0:4D:96
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer:       /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial:       01964F6CD700DDF20CEB3BB022530E144C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number:          0A9D
Signing time:             Sat 19 Apr 2025 19:00:55 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:55 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:55 +0000
Files and hashes:         1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=)
                          2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: 8Y3uMc9/6iVYhONkG3c2yYyyOL2vnmOP1WTUrt+OwQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:d7:00:dd:f2:0c:eb:3b:b0:22:53:0e:14:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
        Validity
            Not Before: Apr 19 19:00:55 2025 GMT
            Not After : Apr 20 19:00:55 2025 GMT
        Subject: CN=cc64a5f960d5729f9c43a6d24b344d4702d04d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:66:af:5e:15:79:c2:28:91:bb:5b:b5:a0:
                    e4:39:c4:83:d0:16:2d:10:5a:71:4b:92:d5:ff:63:
                    f6:91:87:4b:cf:7f:1c:06:11:d0:90:4a:38:4b:38:
                    e5:42:e6:c7:64:9b:48:aa:85:08:89:c4:b7:27:c1:
                    d6:07:3e:c0:d9:48:3f:93:f5:28:76:30:77:aa:7a:
                    07:0a:31:ad:63:0d:6e:78:7b:d2:5d:bf:2c:1c:f3:
                    30:72:30:20:01:a7:6a:43:5b:d8:b6:04:a7:ea:5b:
                    32:38:3d:03:bf:14:05:6f:99:0d:a1:ee:a4:f4:a5:
                    c8:c6:9b:1e:50:d9:3d:41:9f:c0:aa:06:25:69:ea:
                    37:30:52:ca:40:31:64:6f:b4:a6:86:18:84:a6:c7:
                    9c:5b:82:7e:05:67:0f:0a:5a:57:d7:61:16:57:b1:
                    68:bb:c3:c9:9d:4f:11:23:62:95:57:e2:3c:ed:fc:
                    76:a4:3b:59:28:f9:28:f5:9a:08:9b:8b:70:8b:52:
                    06:a2:19:3d:09:18:cc:c2:35:b6:55:bb:fc:88:2e:
                    ac:0b:00:6e:14:e5:f7:73:0a:c4:17:6a:a2:d3:ce:
                    a9:56:7c:70:42:fe:26:0b:6b:f4:cc:1d:f1:ad:17:
                    7c:b9:e7:37:4c:33:23:89:2c:98:3e:b7:30:b5:cb:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:64:A5:F9:60:D5:72:9F:9C:43:A6:D2:4B:34:4D:47:02:D0:4D:96
            X509v3 Authority Key Identifier:
                keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c8:3a:e9:ad:84:1f:69:49:15:53:73:a6:3a:ee:cd:f2:b6:
         12:f3:73:24:97:47:42:59:c8:6b:1e:b8:5b:a7:6c:60:54:e7:
         f4:43:b3:98:3a:df:79:b5:1f:ea:93:0a:98:07:41:3a:96:9f:
         2f:08:ff:02:66:a8:62:17:e2:e5:e3:80:e8:b2:28:e7:ef:5f:
         34:58:70:be:2d:d7:1b:30:a5:4f:7a:b1:1a:92:8c:6e:c2:5e:
         aa:af:27:03:25:9b:80:65:f9:8e:3d:04:6a:48:d9:41:b6:a3:
         0a:19:14:4d:dc:82:c8:d9:59:48:32:0d:b2:5c:65:58:f4:0d:
         70:95:90:61:27:4b:f2:c2:9e:aa:e3:f6:89:47:2a:ab:4d:98:
         4e:11:74:4b:16:4d:d3:ec:18:41:5c:33:0e:fc:0a:36:d2:d0:
         57:fe:28:dd:4b:54:2c:b3:8a:c6:bd:4f:e9:34:91:a0:37:31:
         aa:c2:5a:b2:d3:3e:43:14:bf:b3:7f:a8:bf:6d:d0:49:6b:5b:
         9e:e6:54:6f:ea:9d:3e:d3:82:c1:82:f6:10:b1:a0:99:55:09:
         fb:68:7f:24:95:6b:e8:2d:32:75:8e:5e:57:95:54:42:96:80:
         58:85:f4:f9:4a:31:04:f1:35:ee:e8:51:19:15:79:92:d5:8c:
         df:60:d8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:37 2025 by rpki-client