Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
File:                     wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json)
Hash identifier:          +cWh8y2LH6dlRJz7H9N6B7Ms5FstiSGKf42ldWh6KD0=
Subject key identifier:   EB:FE:6C:65:0D:EF:C1:83:D9:1C:68:33:20:18:2D:37:45:78:DB:AD
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Certificate issuer:       /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial:       01964D10444E083F625866F318C266569868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
Manifest number:          04BD
Signing time:             Sat 19 Apr 2025 08:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:33 +0000
Files and hashes:         1: w4Gkkf9ZS21h0eriMrc7iqckrew.roa (hash: 67HcmHAWHdZ07g6eRzB4FRQ1OkW0qe8J+cLuMKS0WBA=)
                          2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: 0LCPYpHdkJdpQx7wKMqCbkizNDHjQFkhCaFfyOHFb+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:44:4e:08:3f:62:58:66:f3:18:c2:66:56:98:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
        Validity
            Not Before: Apr 19 08:00:33 2025 GMT
            Not After : Apr 20 08:00:33 2025 GMT
        Subject: CN=ebfe6c650defc183d91c683320182d374578dbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:85:31:b2:0e:d4:aa:5c:df:ea:d0:99:fd:3c:
                    94:18:5b:d1:ec:04:9b:c0:90:8b:c6:95:33:37:d9:
                    33:60:b9:31:0c:fe:ea:4f:e5:3b:9d:60:4d:16:61:
                    f3:a1:78:aa:2c:cc:0d:bd:d6:87:f4:39:50:c9:03:
                    39:64:03:1d:ac:b8:e4:d4:f2:9e:6e:b4:29:2d:4b:
                    e8:b7:d3:ca:84:9d:b0:55:d4:f0:38:e8:b1:e5:2f:
                    8f:d5:c3:43:5f:58:4d:1e:5a:46:31:d9:c3:f5:47:
                    84:26:5d:1a:1d:0d:f7:39:fa:69:41:8d:f4:67:6d:
                    10:5e:88:dd:07:ec:58:0e:f0:b4:5e:bd:0a:7b:42:
                    9d:37:1c:de:22:a8:4b:c0:19:80:22:bc:dc:ff:6d:
                    a8:36:bb:56:ef:a2:a6:1b:08:ec:ae:8b:2d:70:22:
                    2e:70:b6:64:17:19:63:45:3c:39:7e:86:07:a0:bd:
                    63:e8:d0:54:dd:3d:8b:8b:72:35:92:b0:c9:a4:8c:
                    33:02:bf:80:63:22:19:68:8f:e2:68:f8:cd:59:a3:
                    6a:ec:63:a1:3b:76:b6:a6:49:57:f2:59:30:a9:89:
                    a2:d0:71:1d:84:7d:86:74:ef:4d:df:b7:97:24:5c:
                    62:f0:86:b1:af:ef:83:ca:f1:08:b5:bb:84:36:26:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:6C:65:0D:EF:C1:83:D9:1C:68:33:20:18:2D:37:45:78:DB:AD
            X509v3 Authority Key Identifier:
                keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:e3:25:c5:91:b4:ee:a7:40:26:b5:4d:a0:32:e8:f5:f1:
         0f:0e:de:d4:ac:c1:d2:19:03:37:50:3b:63:26:09:b6:9c:b2:
         cd:75:24:a7:bd:87:7f:04:58:a4:5d:df:96:77:dd:d4:a1:6d:
         64:94:23:7d:a4:be:5f:0a:fd:ea:73:19:60:a7:b3:68:28:a1:
         9f:d2:d1:92:f2:d8:21:30:36:d1:cb:ce:d8:11:9e:f6:82:f7:
         c0:16:50:07:70:35:c2:d0:aa:23:99:c4:f5:99:75:00:8d:fc:
         8c:95:1f:c4:65:a0:7b:a4:c4:4a:4f:26:fb:8c:98:23:f9:84:
         bf:92:d3:66:96:ea:16:b7:0f:3e:b2:83:97:5b:8a:c2:fc:21:
         c4:74:4a:a0:cd:51:18:43:f8:04:e3:cf:c6:0e:fc:27:59:d6:
         14:8d:76:e7:79:54:ba:c9:ad:07:d4:a9:e7:e7:02:bf:47:f7:
         51:68:e2:9d:ba:e6:97:56:7b:c8:5f:9d:10:92:5d:2d:06:66:
         c6:70:2d:fb:ed:ca:77:1f:04:3f:d8:8d:de:44:f7:e0:be:c7:
         98:a3:ed:54:bd:a6:6e:cb:35:39:79:45:d4:3f:a8:40:6c:35:
         ba:92:bf:8e:fa:82:ab:86:07:30:60:db:b5:7e:d6:3b:49:29:
         1e:59:6d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:35:17 2025 by rpki-client