Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
File:                     Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json)
Hash identifier:          LR3Q7WsO7v3l5cbOEM4920YWQdfKfQdTFfZx4k7MXlk=
Subject key identifier:   21:AC:8B:04:08:8F:79:C2:54:CD:C3:FF:9C:39:82:61:CD:38:08:6C
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Certificate issuer:       /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial:       019659B958C4ECF2E5FF3C0A77ED02021DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
Manifest number:          02F6
Signing time:             Mon 21 Apr 2025 19:00:41 +0000
Manifest this update:     Mon 21 Apr 2025 19:00:41 +0000
Manifest next update:     Tue 22 Apr 2025 19:00:41 +0000
Files and hashes:         1: JOSO1JmulK_3UGT4DHh2rfgYfwY.roa (hash: EgfSLon34sQaHSqw1cjg97JzDl/x10iZFo3pqDa2iBE=)
                          2: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: /BUdKgUlW6sMj0MT+vV3E3S94ZiR3GHBWXp2x8IuNcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:b9:58:c4:ec:f2:e5:ff:3c:0a:77:ed:02:02:1d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
        Validity
            Not Before: Apr 21 19:00:41 2025 GMT
            Not After : Apr 22 19:00:41 2025 GMT
        Subject: CN=21ac8b04088f79c254cdc3ff9c398261cd38086c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:96:c3:8b:a4:de:2b:85:02:e4:ab:19:9b:
                    87:2a:91:f6:a1:b1:29:5e:11:cf:d2:7e:fe:bc:df:
                    ad:be:81:a7:54:e1:5d:01:69:96:fe:77:0f:fa:fd:
                    0f:79:c9:11:1c:76:ea:6e:51:bb:6e:25:cd:c1:67:
                    64:16:6a:02:83:f0:27:5c:16:e5:2a:a9:d7:78:84:
                    44:75:3f:69:60:cd:a7:b1:c9:76:4e:45:e1:43:aa:
                    f8:fa:7c:8c:4a:0e:eb:1e:f0:90:e0:8f:77:23:03:
                    ea:b4:76:cc:c1:1c:40:3d:a8:c8:18:fb:3d:1c:09:
                    70:1b:80:7f:25:49:69:6d:d2:75:fd:ee:a5:98:5d:
                    c0:f9:40:20:09:f1:89:9d:42:82:06:bb:70:66:3b:
                    19:bf:95:7f:06:1e:45:e6:bb:d5:46:ef:92:d9:a1:
                    b4:88:25:6f:8b:6d:c5:09:1d:89:a1:5b:e1:11:d0:
                    94:d9:85:2c:5f:b5:ce:fb:66:75:34:38:7b:75:67:
                    2c:d7:df:89:b8:59:3f:ac:4f:80:ce:9c:d5:80:57:
                    e7:b4:7b:85:bc:b6:8c:d8:79:23:97:8f:17:6b:cb:
                    27:19:42:11:af:d5:bd:69:c8:1b:c5:f5:d4:45:fe:
                    c7:71:ce:02:b0:91:a5:02:52:cd:df:9f:e1:15:98:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AC:8B:04:08:8F:79:C2:54:CD:C3:FF:9C:39:82:61:CD:38:08:6C
            X509v3 Authority Key Identifier:
                keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:01:9d:27:83:78:ae:73:bb:e9:aa:bb:2d:fa:c0:fb:c2:da:
         38:a5:5e:30:8f:48:9f:e8:62:fe:e3:9b:1b:70:8e:01:29:8b:
         25:62:2e:22:ed:8f:4a:9d:00:b4:3f:0c:ba:dd:b3:93:89:9d:
         eb:3f:ea:ab:76:b0:a3:62:24:be:45:c9:fc:20:bb:1e:de:e2:
         a6:34:3e:0e:ae:24:14:6b:22:c3:06:09:eb:6b:c2:3d:6f:d4:
         5c:74:5d:6e:e2:45:02:00:56:2c:b1:d9:d2:1a:ac:8c:68:93:
         97:d7:74:e1:6d:6b:0f:53:ed:20:0b:88:0f:8a:74:8e:1b:8e:
         65:e1:2b:e3:3d:4b:c8:c1:c8:4e:a8:c2:a8:13:70:b3:97:57:
         6b:c0:b6:e7:a0:74:51:84:15:0f:95:54:a2:24:9e:0a:0f:f1:
         44:c7:da:7e:58:15:44:95:3d:c1:08:87:21:20:63:74:a3:d3:
         8e:2c:95:7b:be:a9:ef:4f:bb:86:ea:42:f1:57:19:4d:be:2f:
         3e:d7:6a:91:27:c0:58:70:58:fb:1c:b8:a0:3d:34:79:77:78:
         d8:e5:77:5a:8c:63:aa:47:18:6c:e0:12:5b:49:e8:a6:24:f4:
         ec:94:df:8e:aa:7d:78:ed:d7:40:98:03:76:75:8f:cc:f9:cc:
         cb:d6:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:29 2025 by rpki-client