Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File:                     wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier:          mvsjFuyI4cUK6V1gYDLPFN4h+EFWkG2bfOaTiDjpCzE=
Subject key identifier:   0D:4B:95:7E:8C:2D:76:57:0D:0A:28:F3:EF:B5:03:6A:73:4D:80:8D
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer:       /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial:       019609E8016E47820348350E8AA9191D35C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number:          06FC
Signing time:             Sun 06 Apr 2025 07:02:01 +0000
Manifest this update:     Sun 06 Apr 2025 07:02:01 +0000
Manifest next update:     Mon 07 Apr 2025 07:02:01 +0000
Files and hashes:         1: 0iMFk8Lfng7XvalPLjNNFDCKCXk.roa (hash: RGgyt63YX02pCUWXH4nSFvIeyVgvG587fQXMrvVwyd0=)
                          2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: 0DEd+oQOeyG1bQvOxVm5WfyR89K8Kco5pwR5Op3VKfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:e8:01:6e:47:82:03:48:35:0e:8a:a9:19:1d:35:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
        Validity
            Not Before: Apr  6 07:02:01 2025 GMT
            Not After : Apr  7 07:02:01 2025 GMT
        Subject: CN=0d4b957e8c2d76570d0a28f3efb5036a734d808d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:f5:d6:dc:53:51:4a:72:e2:c6:29:b7:65:
                    fc:bc:db:61:93:0c:20:a7:75:48:3c:42:6d:3e:4a:
                    d7:e5:30:c1:8a:4a:41:4f:9c:19:30:6e:84:de:05:
                    04:ff:28:93:c4:03:fb:97:35:9d:08:08:62:b2:c3:
                    dd:c9:b6:1e:a8:04:d2:40:dc:56:e9:28:3c:a6:fc:
                    cd:07:52:ea:e1:36:23:d1:45:87:7d:a7:f9:e6:f3:
                    13:15:ff:f4:72:ec:f6:8b:02:31:d1:5e:40:2f:66:
                    4b:2e:43:34:35:4a:9b:a0:a4:c6:39:6b:37:f5:70:
                    69:98:a4:e5:fb:6a:f4:16:be:95:c0:de:c6:da:02:
                    80:2e:ea:01:f0:7d:42:31:99:91:20:1e:e6:c6:45:
                    4e:23:5b:84:5a:f5:7d:31:89:c4:8f:eb:19:c1:5f:
                    80:e2:d3:1e:31:8c:3c:7f:88:25:c2:70:a3:91:71:
                    ff:f7:2c:42:d1:d4:59:9c:97:f4:7b:34:c6:8d:48:
                    5f:5c:d6:77:d1:2f:68:d2:2c:14:ae:1a:40:02:57:
                    51:20:ee:0c:a2:bd:ef:20:3c:02:42:e5:e2:35:1a:
                    40:fe:5c:b6:04:92:df:39:15:39:bc:2f:68:5f:fd:
                    b8:97:7a:f5:35:cb:58:c2:ac:02:f9:28:67:1b:c3:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4B:95:7E:8C:2D:76:57:0D:0A:28:F3:EF:B5:03:6A:73:4D:80:8D
            X509v3 Authority Key Identifier:
                keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:1d:b2:6e:cf:9d:2b:99:70:87:30:35:ed:dd:63:6e:07:7d:
         57:16:a4:5f:d1:ca:5b:9e:d3:fe:d2:61:c4:59:d2:d6:27:67:
         64:90:c2:61:8b:d8:df:91:40:47:64:bf:2b:3b:92:ec:e7:69:
         8c:84:a4:2f:74:b0:15:69:ee:f0:42:17:e5:76:95:2d:06:23:
         0f:87:b9:bd:0c:31:03:af:c9:86:f9:70:c9:b6:f2:5e:3d:e4:
         c9:ea:66:9d:21:b7:fc:fd:82:17:97:06:d6:b4:39:c9:9b:29:
         96:59:c1:ce:f8:91:68:44:2d:e8:e7:04:b9:bc:40:9f:3b:7a:
         f4:68:0d:e8:7d:44:6f:a8:f4:38:97:76:7b:49:75:78:3c:cf:
         57:71:af:57:00:fb:49:a6:2b:96:00:b8:11:7c:1b:23:73:1a:
         36:c6:61:1f:52:fd:e4:40:25:63:9e:02:77:3a:f0:3e:19:64:
         1e:f3:31:ec:cb:d9:ac:29:12:97:6d:86:52:41:df:97:0f:5a:
         b0:a2:95:fe:d7:9b:da:41:aa:fa:71:51:b8:33:d0:26:19:e4:
         df:7c:4d:5d:4e:cc:70:b7:b4:a4:36:b1:ab:47:86:c2:be:b3:
         00:8c:5e:4d:5e:05:9f:93:da:e0:2e:af:4c:04:13:a9:8f:ed:
         5e:92:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:57 2025 by rpki-client