Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
File:                     w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft (raw, json)
Hash identifier:          J67Qm/qV8Pk4vvo/seL++JAb62h3JeiNvnxwhjMTHb8=
Subject key identifier:   53:42:51:78:54:F9:42:60:9C:31:8B:91:7D:06:18:C6:58:16:68:2D
Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35
Certificate issuer:       /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
Certificate serial:       01963F5463F4BE2734B7504AEBF23E9C6262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
Manifest number:          0A5E
Signing time:             Wed 16 Apr 2025 16:00:17 +0000
Manifest this update:     Wed 16 Apr 2025 16:00:17 +0000
Manifest next update:     Thu 17 Apr 2025 16:00:17 +0000
Files and hashes:         1: ZZxnLfkQZZe868Ymmh1h6vi9FK4.roa (hash: FUPgIKTRbD3IVqEoytl9TWolLWbbwFaaKQfjRWOMZxY=)
                          2: w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl (hash: 3WIqZQXfiwwzsQdXbb8UtjSLIQLhTBeVe+Lb2khCZes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:54:63:f4:be:27:34:b7:50:4a:eb:f2:3e:9c:62:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35
        Validity
            Not Before: Apr 16 16:00:17 2025 GMT
            Not After : Apr 17 16:00:17 2025 GMT
        Subject: CN=5342517854f942609c318b917d0618c65816682d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fc:25:6c:e1:fd:df:45:15:f1:76:da:28:a3:
                    d4:76:12:3e:81:d7:ba:6b:73:ba:84:9a:ce:c1:2d:
                    c7:b6:8c:9b:9b:89:09:eb:fb:93:b1:fd:a5:28:56:
                    30:be:00:7d:0e:00:fd:24:4c:db:c5:d9:9e:bc:5b:
                    7a:ec:30:d7:e8:37:c1:08:e2:2d:e0:5b:24:68:86:
                    f0:1f:eb:90:80:57:17:2d:65:3c:22:f6:3b:f1:00:
                    89:54:b2:f2:83:d1:b0:da:fc:3b:0b:1b:88:83:84:
                    89:c0:d3:3d:f0:5f:b2:17:aa:34:ba:3a:4f:f3:6a:
                    81:0f:d6:3e:0e:00:53:34:0d:bf:f1:2c:ae:87:f4:
                    8c:76:92:51:3e:16:fe:44:3f:b9:85:6b:f0:b1:00:
                    b9:56:9b:25:2c:e3:0f:4c:d2:e1:69:12:67:b5:bc:
                    ee:6d:20:88:3e:e9:20:4f:de:28:06:51:50:27:6c:
                    c2:30:21:17:9d:92:90:60:d7:6a:a0:26:ba:45:e6:
                    5a:12:e7:ce:26:ec:9e:b7:e2:76:12:be:91:20:7c:
                    18:ab:65:84:f4:98:c9:95:ce:af:06:5a:27:30:9e:
                    d2:82:5d:cb:53:6b:33:81:cf:4f:c1:fd:52:65:56:
                    a9:cf:99:fb:33:2e:3b:b5:5c:8b:86:b0:a8:46:e9:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:42:51:78:54:F9:42:60:9C:31:8B:91:7D:06:18:C6:58:16:68:2D
            X509v3 Authority Key Identifier:
                keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:34:08:54:ef:25:bd:8b:ba:c7:30:12:b3:bf:52:a0:bc:e8:
         df:c6:03:d5:9a:7c:d1:b5:4f:cc:88:2a:66:5d:5b:c0:6d:7d:
         a3:43:71:9a:8b:b1:82:4e:4f:57:29:79:ff:23:ea:af:a4:84:
         14:f7:31:2b:ee:6f:10:8e:59:7f:11:6f:0a:cf:a3:ff:1b:bd:
         08:e2:db:d9:a9:4d:a3:a8:b2:4d:e9:a6:37:14:d7:0f:47:ec:
         db:8f:f1:98:fe:56:bb:a6:57:2b:9b:2f:eb:6a:b4:aa:c5:80:
         03:a1:6c:c4:87:5b:38:90:44:13:6c:5a:ab:14:52:16:d7:44:
         ec:50:66:0a:d2:1f:d7:ae:3c:11:48:ce:81:50:8d:35:87:69:
         9d:79:e9:c6:7a:0a:ee:72:69:ba:4f:9f:cd:77:2a:5a:80:61:
         c4:15:cd:00:8a:7c:a0:a3:1c:c0:c1:ac:bb:dc:a4:3a:05:69:
         bd:a7:f3:ee:7c:e0:53:05:5c:2f:e2:e0:88:eb:0d:37:95:a3:
         45:80:80:e6:dc:35:f4:e5:75:c4:3c:a7:a9:6e:90:2b:c5:5e:
         23:57:d6:74:8d:f4:7a:2b:1d:5b:f2:4b:13:36:b7:4e:ad:a4:
         e8:00:6f:75:c2:04:b2:bd:06:88:ff:bd:a4:2a:b9:0b:11:62:
         88:21:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:35:36 2025 by rpki-client