Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          0cZ8No54Zgnt+xvLTJ8Gu+qoKibG9zri9+24kgzVI7s=
Subject key identifier:   52:B8:B0:FD:A3:30:E8:06:8C:59:1A:A6:06:F1:EB:2F:C2:7C:1E:77
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       01963808D5CAB2F1E6F8EF1464A2F7C9EADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          14F9
Signing time:             Tue 15 Apr 2025 06:00:25 +0000
Manifest this update:     Tue 15 Apr 2025 06:00:25 +0000
Manifest next update:     Wed 16 Apr 2025 06:00:25 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: aQ15-5dar1aqgdmTJxXJsHa1LDw.roa (hash: 1rVI43V3MOJKO7UAkMxeh1LlYc7UXyA9BgVQnSxTc5I=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: DfnUZPTfNEeroycnZxd94dLb0K3JfKZ2KxKarm9xzOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:08:d5:ca:b2:f1:e6:f8:ef:14:64:a2:f7:c9:ea:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Apr 15 06:00:25 2025 GMT
            Not After : Apr 16 06:00:25 2025 GMT
        Subject: CN=52b8b0fda330e8068c591aa606f1eb2fc27c1e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:50:2e:f6:7a:52:5d:de:2c:18:1b:8a:e0:
                    eb:df:02:ed:f7:12:91:f0:20:f8:8a:c9:78:d1:4e:
                    07:d2:d3:cb:63:39:2c:23:fa:87:a5:a6:81:12:5c:
                    31:98:ed:da:69:a1:8c:d6:4c:8b:b3:59:9f:66:ec:
                    ad:0b:91:7d:b9:0a:61:31:5d:42:36:4b:f2:8a:9b:
                    68:9f:84:8a:6a:1c:12:1d:b2:92:1b:ea:10:0a:42:
                    1a:8d:34:a7:a7:e9:e2:25:64:ac:b5:07:d0:57:a8:
                    de:7c:82:ca:5c:b7:75:a7:c9:44:50:86:f0:f3:07:
                    bc:cf:a6:65:4b:cc:67:3d:37:d5:8c:d2:98:22:aa:
                    ff:ab:b1:20:a3:26:c2:ae:39:79:96:4b:90:c1:1c:
                    1b:56:4d:ed:a1:b1:5d:e1:3d:09:5a:ce:da:db:63:
                    85:0b:9d:da:25:2e:5f:ed:84:53:9c:4f:22:a5:0c:
                    c9:b6:29:eb:a9:1c:87:ad:22:f8:1e:ca:54:0b:7b:
                    24:67:18:63:76:ad:27:93:e7:13:26:43:35:50:29:
                    07:50:c5:3e:7a:94:81:cd:2c:79:0d:3b:78:24:72:
                    d6:6d:9e:80:f0:f8:98:e2:46:90:83:99:d1:6f:65:
                    63:db:97:62:54:a3:81:c4:be:ec:99:ae:6e:90:03:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B8:B0:FD:A3:30:E8:06:8C:59:1A:A6:06:F1:EB:2F:C2:7C:1E:77
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:70:23:27:f9:75:0c:ca:04:22:58:85:cd:b1:0c:dd:99:3b:
         af:0c:df:84:13:1a:58:25:10:15:2a:81:a7:d5:9a:50:c6:a5:
         53:2e:9d:89:62:15:0f:d3:1b:e8:3b:fb:3e:4c:18:b5:7d:98:
         8a:1f:4d:aa:5f:0c:14:f6:82:e2:6c:a8:d4:ea:b9:80:3c:bb:
         2f:da:f9:f5:af:bd:22:04:c8:8f:13:57:1c:21:6f:82:9e:62:
         78:93:c0:fd:5e:2e:49:ce:31:b9:74:35:2c:fb:37:82:ef:10:
         24:7b:53:1a:fb:ba:73:02:eb:76:3c:56:4a:39:95:95:a7:ca:
         8c:17:be:e2:2e:d3:a3:8b:92:0d:f2:b5:68:db:a8:b9:3b:af:
         79:3d:a2:44:5b:5c:75:43:34:75:a3:cb:d0:1b:e5:c7:8d:6d:
         42:af:8e:0a:d3:31:dd:d5:5a:25:8e:43:bd:9c:60:b9:d4:ae:
         1c:97:f5:9a:2e:16:ee:f3:78:b3:a2:6b:68:17:64:29:66:76:
         07:71:97:64:0b:61:d2:5a:33:13:f1:49:03:a3:9f:f8:f6:2f:
         43:0c:ce:ac:b7:7b:18:39:4e:cd:d6:d2:d3:3a:f9:ef:8e:28:
         bd:c7:a1:5d:e5:ba:21:3b:66:39:71:99:d9:2c:63:0f:ad:fb:
         e4:6a:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:34:20 2025 by rpki-client