Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File:                     Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier:          roTXd5S9sOJtztzUauWiPRFq90JW1ou9+rXzXRH3Ga8=
Subject key identifier:   24:96:E1:95:FF:64:4C:EC:58:F3:81:A9:16:C2:A4:1B:71:CD:23:87
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer:       /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial:       019645FB5E41995AEA24E939780B48A429D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number:          1327
Signing time:             Thu 17 Apr 2025 23:00:23 +0000
Manifest this update:     Thu 17 Apr 2025 23:00:23 +0000
Manifest next update:     Fri 18 Apr 2025 23:00:23 +0000
Files and hashes:         1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
                          2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: 1iSYfXFBTKqvTmq4JYNdnHy0D5eaGB2ioV9iWDHyKeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:fb:5e:41:99:5a:ea:24:e9:39:78:0b:48:a4:29:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
        Validity
            Not Before: Apr 17 23:00:23 2025 GMT
            Not After : Apr 18 23:00:23 2025 GMT
        Subject: CN=2496e195ff644cec58f381a916c2a41b71cd2387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:6d:ab:61:e8:cd:6b:e7:99:7b:88:00:e6:
                    2b:71:50:75:1a:d9:1f:a9:23:72:25:1c:c2:71:8f:
                    0c:69:7c:05:41:89:dc:ed:6b:f5:62:40:6e:e6:16:
                    4c:45:f3:e9:b1:53:40:f6:73:7c:42:ee:19:ac:2a:
                    5a:66:e0:5d:0f:ce:f1:bf:fb:89:76:21:57:c2:b6:
                    f1:4c:92:2a:48:8b:7a:b9:8d:0d:2d:63:c9:33:4a:
                    a8:80:be:54:64:b3:be:8d:9f:90:f6:25:c8:b6:a2:
                    8e:a5:33:60:96:3c:ae:a4:3a:1a:72:b9:83:98:16:
                    15:47:49:48:21:b3:a8:1e:d7:c0:2e:9b:d0:57:d0:
                    ce:6e:53:cd:3d:16:9e:ec:af:86:0f:58:43:59:d3:
                    e6:8f:63:57:95:7b:83:b3:e8:1b:98:d2:b4:95:85:
                    a8:3c:df:bf:d6:cf:85:b0:5a:32:7f:23:52:c9:31:
                    70:32:20:95:81:9b:88:b7:00:ca:6c:8a:a4:a8:b8:
                    f3:34:93:c9:06:5c:eb:26:dd:07:3d:d2:24:3f:47:
                    21:51:ea:18:b5:e6:91:fb:06:70:73:e5:80:32:54:
                    07:44:bd:3f:31:81:76:b6:7d:5b:69:34:93:a6:22:
                    e1:c6:8b:ef:4d:00:c1:ac:f9:dd:e3:97:55:57:e3:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:96:E1:95:FF:64:4C:EC:58:F3:81:A9:16:C2:A4:1B:71:CD:23:87
            X509v3 Authority Key Identifier:
                keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:41:dd:6d:51:9d:95:30:4b:ca:a4:37:0e:46:99:da:0f:df:
         68:a9:33:83:b6:d5:29:93:99:39:37:90:68:8d:89:63:7e:7f:
         53:8a:f0:af:74:34:1c:a7:cb:62:c5:4c:14:2e:a3:3f:f2:c8:
         2f:5f:3d:da:c5:04:5d:ea:40:dd:b9:b5:de:6f:18:d3:ab:87:
         73:81:4f:5c:93:f8:e9:c7:70:ad:ae:ea:36:2a:93:1e:ad:72:
         00:a3:d9:b1:89:c7:96:88:df:1c:49:ee:6c:b4:af:89:8b:c5:
         35:1f:c4:c7:23:7e:15:51:32:51:bb:42:9a:84:61:83:88:f3:
         cc:9a:83:66:8e:02:cf:1f:50:80:35:d2:da:f7:a9:28:4f:20:
         8d:79:a0:0f:64:b3:6f:9b:1d:46:45:e7:bc:a8:6f:8c:0b:23:
         ff:bd:77:b5:eb:d8:97:e8:f4:fb:23:a4:96:36:89:60:40:fd:
         9a:81:26:23:c6:0d:5a:a8:1b:7c:60:f4:4d:33:cc:11:1a:48:
         b6:b5:67:49:da:dd:55:15:42:a8:85:b6:d4:62:ae:b0:c6:df:
         dc:ab:50:8b:c1:57:b0:0e:08:79:78:71:e7:00:18:e8:d8:8b:
         31:ce:b3:5f:47:31:75:0d:87:e4:0e:58:2a:34:c6:fe:c9:50:
         e6:f6:5f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:18:20 2025 by rpki-client