Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
File:                     wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json)
Hash identifier:          5+ubnMTLRrYmIUV+AAfzajCv1qDgsDQI5jrvXFj50gw=
Subject key identifier:   73:DB:42:DD:BD:1D:39:90:30:A3:84:BE:74:0A:86:EA:37:7A:A6:95
Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
Certificate issuer:       /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
Certificate serial:       019629721C337F82A84918080CC430906BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
Manifest number:          14E4
Signing time:             Sat 12 Apr 2025 10:01:06 +0000
Manifest this update:     Sat 12 Apr 2025 10:01:06 +0000
Manifest next update:     Sun 13 Apr 2025 10:01:06 +0000
Files and hashes:         1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: yTJI6m3zpuPCKZqpBEceEZMDfJ3N1ypKX57HTAJ6mQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:29:72:1c:33:7f:82:a8:49:18:08:0c:c4:30:90:6b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
        Validity
            Not Before: Apr 12 10:01:06 2025 GMT
            Not After : Apr 13 10:01:06 2025 GMT
        Subject: CN=73db42ddbd1d399030a384be740a86ea377aa695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6e:cd:24:6e:03:79:18:25:b1:80:cb:d3:6b:
                    e6:1a:43:ba:e2:89:5b:2e:27:e7:18:33:29:86:a8:
                    e4:c5:1c:ea:dc:6b:38:fd:c7:dd:4b:a6:d9:e2:db:
                    01:54:07:da:64:b7:06:5d:52:c9:27:ef:7f:63:b7:
                    b2:ca:e9:ae:81:12:55:3b:f1:e5:83:8d:d3:e1:79:
                    31:6d:b5:cc:43:8e:a6:52:e1:83:c7:da:23:75:eb:
                    a2:ee:b5:2e:be:0b:ea:6f:dc:fd:8a:1d:6c:27:2d:
                    25:f4:ce:e1:99:c6:ca:0e:36:78:e9:3f:2e:25:58:
                    1d:1d:41:f7:eb:8b:3b:a5:3c:cb:ff:53:d3:fa:3c:
                    0d:f4:dc:6e:e7:27:d1:be:67:35:c2:99:4e:5f:12:
                    1b:4b:a1:8a:cf:e2:40:e2:d8:a6:e6:b6:57:8e:45:
                    29:00:ab:3c:80:4c:b1:ee:a3:52:4c:5d:66:c8:48:
                    32:59:95:8d:27:86:1a:44:a0:2d:0f:33:02:a9:fb:
                    d9:d3:f4:c2:4a:fd:9f:ee:1f:37:29:99:be:03:9b:
                    1f:07:74:8f:7b:cc:bc:b1:3a:f7:a8:47:08:d6:5f:
                    58:22:e6:fb:e9:c9:9a:36:d6:e8:b4:c5:17:f8:84:
                    10:7a:0a:8a:97:38:1b:41:28:06:fc:c2:74:3b:13:
                    3d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:42:DD:BD:1D:39:90:30:A3:84:BE:74:0A:86:EA:37:7A:A6:95
            X509v3 Authority Key Identifier:
                keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b0:0b:84:bd:fd:23:f2:73:25:b4:cc:07:c8:aa:0a:9d:90:
         ee:ab:2a:b6:99:16:4c:ce:0e:d2:fd:30:dc:96:82:eb:de:15:
         85:fa:e5:0e:5e:2a:e7:ec:2a:a3:09:cd:c7:cb:eb:ae:98:5e:
         35:21:0f:da:c2:a1:5f:48:0e:3f:4b:40:89:7d:4b:a2:be:0b:
         bd:b5:66:34:45:6f:b5:01:e2:47:b5:7a:24:27:16:30:50:2d:
         c6:f9:f3:10:90:9c:6e:95:a6:e4:f7:0c:84:40:4f:45:cf:d5:
         54:27:d5:99:fa:77:58:6f:e1:2f:70:27:21:cb:ee:c3:0c:e8:
         5c:e4:56:33:af:de:60:e4:c0:eb:5c:af:8f:76:ee:1e:79:b6:
         a9:49:a2:64:95:20:03:9c:4b:d2:e1:2f:7f:94:6b:1a:c9:7d:
         9a:33:c7:82:ce:53:48:6b:07:41:0b:6e:1d:b3:35:7f:2d:c9:
         4e:7d:4a:cc:93:23:6b:a3:49:f0:9e:d2:03:86:15:9a:82:70:
         65:6d:d5:2f:7a:10:5c:c1:ed:e6:d3:37:eb:35:80:6a:df:9c:
         44:51:4a:c7:51:e9:12:9d:a0:6f:b2:61:ac:34:39:a1:f4:79:
         e0:74:4e:8b:aa:81:1e:4b:07:d8:9e:96:a5:1c:00:97:3f:b3:
         56:ac:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:17:05 2025 by rpki-client