Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          OJxlEjxURITejdLKkfPYAf3dhv4ntcpEGwoGWR0+t54=
Subject key identifier:   0B:05:C4:0C:C4:7C:32:F8:36:CB:A8:6A:EA:D3:E3:7A:4B:4E:96:50
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       01964CD9C0B0952F90C3AB35DF255479D7E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          0F82
Signing time:             Sat 19 Apr 2025 07:01:01 +0000
Manifest this update:     Sat 19 Apr 2025 07:01:01 +0000
Manifest next update:     Sun 20 Apr 2025 07:01:01 +0000
Files and hashes:         1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: KhQMFgOeA/mY4coL6rn8VzuByPtYSI8qbZgX55DP9m8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:d9:c0:b0:95:2f:90:c3:ab:35:df:25:54:79:d7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Apr 19 07:01:01 2025 GMT
            Not After : Apr 20 07:01:01 2025 GMT
        Subject: CN=0b05c40cc47c32f836cba86aead3e37a4b4e9650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e0:f8:d5:f3:2a:7b:c3:2c:c7:99:a9:57:0b:
                    e0:c6:22:c1:eb:76:e4:f5:41:98:ca:fb:d9:f1:c2:
                    da:d0:ad:cd:21:8a:e9:1c:34:5b:ff:61:6b:cb:c1:
                    55:7a:fc:c4:e4:29:e2:d9:22:17:8a:9c:da:c7:59:
                    97:0a:71:46:3e:2e:c2:e5:91:9a:75:d9:8b:84:79:
                    c5:05:cd:6b:f6:cd:53:29:90:ed:c4:9b:9a:10:6e:
                    6b:10:aa:25:16:c6:9f:4e:be:49:38:13:d8:06:5c:
                    07:a2:b2:d7:c7:24:82:ab:54:77:03:12:14:e8:53:
                    0c:67:4e:d4:7e:6f:bb:d4:17:f1:0a:89:32:14:82:
                    6c:b3:3d:3a:36:90:c9:21:38:75:31:b7:2f:09:31:
                    36:1b:36:7f:92:98:c9:ca:66:e7:67:54:62:d9:c7:
                    eb:d5:f0:71:05:31:08:3d:55:fe:49:c4:a9:ba:34:
                    75:aa:48:1a:d7:a2:09:b2:ce:a1:b6:db:9e:e2:8f:
                    46:10:bf:69:4f:ea:1f:af:50:44:3a:bf:12:1b:c6:
                    af:25:be:54:da:0c:d6:56:e5:20:b4:f7:95:7c:d6:
                    88:c7:d8:88:78:51:be:d3:15:8a:6b:3f:45:d4:71:
                    45:ad:b8:e6:45:15:40:2b:59:4e:2b:2e:5c:29:d4:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:05:C4:0C:C4:7C:32:F8:36:CB:A8:6A:EA:D3:E3:7A:4B:4E:96:50
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:35:a2:0a:09:47:4d:24:0e:21:cd:d2:66:25:91:4e:b1:78:
         17:35:5e:7d:0a:c2:bd:e2:20:89:cb:03:0c:a0:4d:24:99:6d:
         74:41:bf:92:36:ed:c7:ac:4c:08:55:6c:ef:cc:60:b4:b1:6e:
         d3:3c:0b:26:7b:f7:e5:78:e9:df:45:20:bb:b9:b0:f8:28:9f:
         d6:b1:0c:3e:eb:2d:ea:2a:a3:50:4d:ca:ec:5b:e7:16:7b:7f:
         ef:98:7b:a3:6c:6d:d9:aa:31:ef:a4:82:c9:87:38:96:03:7c:
         c3:b2:04:7f:21:ed:a6:2f:e2:31:6b:77:65:d6:ba:ed:73:84:
         c2:73:16:48:fc:62:fa:9b:6e:3f:ed:7b:a8:d3:d4:d3:db:46:
         4e:4b:97:0d:c4:78:2b:83:a0:a9:eb:41:61:8b:f3:40:1c:a4:
         e8:00:b6:f8:d7:94:ec:03:ac:ee:10:de:1b:c8:9a:fe:54:fd:
         33:4a:62:6d:22:05:e1:c3:1b:6d:d4:cc:fd:49:cb:2a:a1:bb:
         cd:af:79:65:03:f3:b1:5c:aa:f2:31:7e:01:05:68:27:1c:6a:
         cc:bc:a3:a4:8e:ad:aa:18:79:70:67:bc:e0:71:05:97:9c:83:
         70:19:27:b4:25:ab:7f:93:49:a7:01:da:fe:b8:15:bb:98:5f:
         f6:73:48:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:19:33 2025 by rpki-client