Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
File:                     wj_7f9rDV5zXAB3FBjAgFT3s56U.mft (raw, json)
Hash identifier:          oNgZcLHYgmwwX6l7HJ5rq2LiSBb+mjXSOxE7yJuosGc=
Subject key identifier:   96:EF:22:DA:53:F8:EF:1A:58:99:24:73:4E:BC:38:1F:ED:CD:AB:FF
Authority key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Certificate issuer:       /CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Certificate serial:       0196534A1ACF515A5AE1804B456885208E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
Manifest number:          14FA
Signing time:             Sun 20 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 20 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 21 Apr 2025 13:01:27 +0000
Files and hashes:         1: wj_7f9rDV5zXAB3FBjAgFT3s56U.crl (hash: EVyyxYKygYzSGy8XBFXCX0RcYNDnsWhBjo2lDA4JnH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:4a:1a:cf:51:5a:5a:e1:80:4b:45:68:85:20:8e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
        Validity
            Not Before: Apr 20 13:01:27 2025 GMT
            Not After : Apr 21 13:01:27 2025 GMT
        Subject: CN=96ef22da53f8ef1a589924734ebc381fedcdabff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:b7:9b:58:89:06:49:27:53:a4:65:b3:ef:
                    d0:01:f8:1e:c2:73:8a:a8:14:23:3c:41:03:90:55:
                    7b:c0:fe:87:8b:0b:77:f7:fe:3d:aa:41:36:07:90:
                    c2:d2:37:c3:8c:d8:8f:3c:6d:9c:79:d2:54:e2:82:
                    04:73:97:eb:5c:1e:7e:2a:88:97:7a:0a:27:5f:e3:
                    69:02:c8:00:b4:ed:6f:37:8f:83:a6:9a:ea:35:af:
                    19:ac:5b:43:23:62:ce:f0:b7:91:e3:fa:d9:7c:34:
                    15:9a:57:ea:20:61:4f:bd:58:6a:4f:52:06:1e:5a:
                    51:4d:86:6f:3a:fb:a3:65:96:b8:9f:f5:cb:d5:d5:
                    e6:77:24:81:7f:4e:ee:74:f1:93:3f:39:61:7e:ed:
                    fc:66:fa:92:3c:65:ff:f6:24:c6:88:88:e7:d8:ed:
                    a7:e8:bb:c2:47:f6:c5:09:3c:a4:99:a4:4f:83:3d:
                    29:a5:d4:c5:27:e4:c3:b3:fc:d5:7a:4e:bd:d9:57:
                    5b:9a:8b:cd:bb:c9:43:ae:3d:9f:a3:4e:5d:6c:65:
                    42:28:18:db:19:21:84:a1:5a:36:21:30:4d:6d:8b:
                    2d:67:ea:25:3d:8d:ed:3d:d2:a3:ed:ff:7a:46:c0:
                    3b:ea:68:2c:d2:6d:ce:69:fc:ce:46:77:d9:c7:e6:
                    ad:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EF:22:DA:53:F8:EF:1A:58:99:24:73:4E:BC:38:1F:ED:CD:AB:FF
            X509v3 Authority Key Identifier:
                keyid:C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:8c:66:2f:db:f9:5d:ab:5a:64:3d:ee:69:b2:5f:dd:e3:
         57:2a:2f:5e:f8:52:fd:bd:e7:51:90:bb:13:8d:2e:aa:0d:e5:
         9e:13:7e:72:99:7e:3a:c1:de:80:78:b3:86:46:e8:67:52:8a:
         ef:ac:81:b6:61:7f:1a:0b:37:83:82:40:f9:71:cf:a3:b2:7a:
         5f:55:09:0f:6e:45:00:45:ea:b5:3b:f1:bf:38:cc:5a:08:af:
         14:ca:57:2b:a8:31:20:bc:5e:0c:61:4c:13:29:54:65:90:02:
         20:25:d1:58:d4:01:ae:77:ed:8f:5d:7e:5f:1f:1c:9a:7d:b9:
         ff:79:34:78:15:b3:87:bd:8c:56:51:01:8e:72:06:af:7f:4a:
         04:bf:67:58:76:b7:cd:9d:fd:a6:49:a4:92:e9:81:7d:89:04:
         a1:2e:6d:e5:92:99:2e:7b:bc:f4:c2:41:d7:45:9b:cb:f1:66:
         08:0f:81:91:58:51:2f:bc:b7:90:0b:f8:f3:58:21:e7:24:ba:
         28:79:9a:2d:54:e7:91:d7:bf:78:cc:fc:e2:2e:39:7c:ac:dc:
         ab:b1:57:25:e5:48:b6:fe:e0:eb:80:c1:25:c9:84:46:0e:2b:
         c4:a0:3d:ae:f9:8e:5b:d8:35:dc:68:68:45:55:3b:ca:a1:02:
         2c:5f:f2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:13:21 2025 by rpki-client