Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File:                     WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier:          MQwA0mdnHO/6exlfzSZjJjiKu5P2H0KhJUtqlDT34gU=
Subject key identifier:   99:4A:FB:45:ED:23:33:F1:69:5F:FA:CE:AC:C4:93:69:47:1A:1F:04
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer:       /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial:       01963FC295AF770DB23968A57ADD4E90B9E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number:          14F4
Signing time:             Wed 16 Apr 2025 18:00:39 +0000
Manifest this update:     Wed 16 Apr 2025 18:00:39 +0000
Manifest next update:     Thu 17 Apr 2025 18:00:39 +0000
Files and hashes:         1: BfcfF2b1LL5M2AE__W3yCJVNAKA.roa (hash: +bgWpcxXbBLXQoTPRn9MMXKJT/S9VM5GWgJ62Kc9z/4=)
                          2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: 9u6kYMqhlnWOlCudwwkPA2fVLSnGpQkEaY65/JuQ7/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:c2:95:af:77:0d:b2:39:68:a5:7a:dd:4e:90:b9:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
        Validity
            Not Before: Apr 16 18:00:39 2025 GMT
            Not After : Apr 17 18:00:39 2025 GMT
        Subject: CN=994afb45ed2333f1695ffaceacc49369471a1f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:80:8d:45:db:62:62:a9:2b:da:43:c6:f6:
                    0b:b7:ed:86:27:37:42:b8:c7:09:b5:f5:bb:bc:d1:
                    3f:fd:cd:27:31:50:91:53:a6:79:f1:4b:9e:a9:3a:
                    53:55:68:38:e9:4e:e1:03:d6:ce:e3:48:c1:b7:66:
                    28:96:ed:7b:40:ac:e9:14:c6:f7:8a:38:29:b2:af:
                    1d:53:a2:4f:e4:94:fd:17:ea:3f:d5:a3:35:77:ea:
                    41:cc:9d:68:c1:56:59:3c:63:53:10:d6:a1:3d:42:
                    f8:c6:ce:3f:a5:ec:be:25:65:a7:2b:d4:8c:ba:24:
                    ba:ab:ec:e3:41:56:5c:9b:a4:e0:fe:ee:d2:f4:37:
                    02:a7:d2:95:43:85:09:99:e3:f7:89:30:bb:12:92:
                    86:9a:49:e0:74:e3:37:42:31:48:21:69:95:ac:34:
                    b6:b2:18:ba:dd:24:ba:d8:09:7e:24:ae:52:2d:95:
                    1d:61:4e:99:1d:86:1f:79:77:cd:0d:1a:1e:36:d5:
                    f8:19:b9:5b:e5:81:8e:e7:33:88:f4:21:bc:19:34:
                    52:b2:88:0c:e7:0f:9f:cf:52:cd:8f:39:f1:2b:cb:
                    8e:c6:9d:14:fd:1e:56:47:43:48:80:77:45:7d:1a:
                    e1:9a:d3:9c:6d:fa:84:d8:62:db:cc:18:c9:05:67:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4A:FB:45:ED:23:33:F1:69:5F:FA:CE:AC:C4:93:69:47:1A:1F:04
            X509v3 Authority Key Identifier:
                keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:10:e3:ca:85:db:03:ba:7e:6b:fc:ba:3f:07:11:79:41:62:
         3e:db:f2:c3:c0:9a:bc:38:6a:a8:2f:2a:96:8e:0f:b2:20:36:
         4e:7c:92:8c:ac:93:46:da:fb:21:7a:c1:fc:bf:87:d3:1f:6f:
         64:6f:70:47:94:b8:1d:1f:25:67:de:8d:3c:24:b6:b5:88:6f:
         8a:2c:ac:bf:fa:6f:77:69:01:a6:70:39:c1:9b:5c:fc:db:73:
         0b:cc:1e:84:9e:4b:39:68:f1:60:fa:00:e8:2c:ae:7a:80:99:
         00:6b:d8:ee:4a:57:72:9c:e1:91:d5:42:15:62:a4:27:21:f1:
         a6:8f:6a:a2:cb:c9:e0:23:f4:8d:b3:a5:cb:68:c5:0a:95:8c:
         b9:99:52:27:03:6c:dc:61:ed:43:07:09:bc:c7:20:81:78:2e:
         48:67:f1:74:74:02:7e:66:99:a7:49:ba:99:d0:fe:fd:82:31:
         6e:10:db:6f:c8:70:8f:32:91:51:a8:69:4a:83:1a:79:50:69:
         d7:dd:8b:82:b2:8e:0d:03:ff:55:b4:a5:27:d9:df:92:a8:d9:
         56:8d:ba:49:06:aa:05:83:48:bb:80:70:dc:c6:69:e8:e9:87:
         e1:01:e0:64:47:84:6e:04:5d:7c:ce:63:c1:92:ab:d5:99:88:
         78:d9:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:42:27 2025 by rpki-client