Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
File:                     w9yyPepY-X-tWnl7RXdB1b_msbA.mft (raw, json)
Hash identifier:          p/CF6IOQKhkVbxIG2RaTbue+0yXMYqS3eKGNYiPOz20=
Subject key identifier:   03:89:A4:4B:26:FB:FB:8B:CE:35:67:0E:7C:26:D1:94:45:E9:DC:F0
Authority key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Certificate issuer:       /CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Certificate serial:       019656817D02FBCD9B36E3C356946FFAF44A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
Manifest number:          14FF
Signing time:             Mon 21 Apr 2025 04:00:48 +0000
Manifest this update:     Mon 21 Apr 2025 04:00:48 +0000
Manifest next update:     Tue 22 Apr 2025 04:00:48 +0000
Files and hashes:         1: KvTnsIcL8m_pQPoNHudO5mxyd6I.roa (hash: LQX5cYypJwp0YO63rbhroJGzv3tgP3X96RXpqlbq7V0=)
                          2: w9yyPepY-X-tWnl7RXdB1b_msbA.crl (hash: t5xSZnklpaXC8JV2Xo3t0fs4b5OPokS1U6tzZkGfRWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:81:7d:02:fb:cd:9b:36:e3:c3:56:94:6f:fa:f4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
        Validity
            Not Before: Apr 21 04:00:48 2025 GMT
            Not After : Apr 22 04:00:48 2025 GMT
        Subject: CN=0389a44b26fbfb8bce35670e7c26d19445e9dcf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:bf:a7:bb:14:d3:a6:fa:6b:a4:3d:a6:9f:
                    b3:42:cd:56:c5:33:29:3d:4e:02:aa:33:43:1a:76:
                    a8:05:01:47:7e:b8:dc:7b:9b:79:4b:28:0f:a4:08:
                    76:85:b1:39:7e:fb:d2:58:67:be:c0:a3:d0:72:2b:
                    8d:cb:58:b4:96:bb:2d:67:75:73:ed:c4:a3:07:ee:
                    35:50:0f:d9:52:71:d6:25:a9:4d:d0:93:ab:5a:dd:
                    53:7a:00:7b:6a:4b:51:94:55:13:3f:64:a2:97:90:
                    ed:b3:26:ee:2f:a9:cb:64:c1:f2:47:88:d2:70:0e:
                    0d:15:7c:04:70:cd:0f:83:2c:d6:c3:dc:17:b5:b5:
                    5b:fd:d1:d8:1e:e3:0c:60:34:e1:43:db:96:1a:e7:
                    ec:46:36:7d:88:d6:48:35:34:71:4f:2c:d9:5d:72:
                    6c:11:a5:42:34:c8:79:ea:5f:3b:0d:59:06:e1:e2:
                    ca:73:f7:98:9c:4b:8c:06:26:2b:1e:65:68:3d:61:
                    2b:b7:d2:8f:fe:18:84:58:2a:2e:d6:16:c5:bd:c5:
                    dd:e6:ac:ea:7d:45:94:24:fa:63:de:70:44:fc:c5:
                    2c:d8:cd:94:0e:d9:4c:3f:90:35:40:8e:e2:ff:69:
                    51:8e:32:f4:cd:40:49:3b:96:1d:3d:0d:27:3b:7b:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:A4:4B:26:FB:FB:8B:CE:35:67:0E:7C:26:D1:94:45:E9:DC:F0
            X509v3 Authority Key Identifier:
                keyid:C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a3:b7:26:93:2b:69:02:fa:1b:d1:a7:f0:a5:39:aa:28:f2:
         2b:b7:16:60:95:d8:f0:af:f4:b4:03:12:72:39:7f:d3:86:79:
         a2:6d:05:5e:1b:c1:13:65:87:60:96:2a:a0:84:00:08:29:ed:
         12:16:84:fb:80:fd:2f:f2:b8:ff:21:c9:a3:af:e2:af:d8:67:
         1a:d0:a8:9b:cf:bc:62:54:67:95:fa:96:bc:d7:e5:9d:7a:df:
         bb:3b:de:06:a6:3a:4c:67:8d:ee:2f:97:c9:35:bb:b8:57:3f:
         f6:aa:81:51:a4:8e:58:e6:2d:ab:4e:6d:ee:92:5d:f1:b4:ed:
         6b:30:50:a4:3e:2b:b8:c3:2f:d1:ff:93:74:17:4e:12:d6:98:
         cf:78:27:94:d3:2e:f7:7c:fc:a1:7f:9c:6a:91:a1:bc:1b:61:
         1b:ab:ba:db:22:4e:8d:cb:b9:70:a6:46:c0:db:f3:7f:c0:8f:
         27:f3:34:52:31:1e:43:9a:b4:e9:1d:67:a9:af:6e:49:c0:89:
         a0:09:3f:b1:8c:ba:9b:2a:00:1f:1e:77:a7:3f:dc:b9:1c:8f:
         c7:f5:71:2a:81:04:02:a2:04:19:b9:7d:81:47:31:62:3b:5f:
         a0:d8:ac:21:c8:b1:23:a5:b5:39:5e:6e:59:68:05:8c:0f:76:
         58:5d:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:56 2025 by rpki-client