Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
File:                     WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json)
Hash identifier:          zhVvYPiGX4VmQ7DlTqmjl777Mgi61ndVJCg049elepk=
Subject key identifier:   91:99:7F:66:2F:6E:CA:77:CE:CB:91:06:5E:9A:72:62:2D:26:5B:E8
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Certificate issuer:       /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial:       01958B84BCFC062A883CC5EF929EF85F9D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
Manifest number:          0DE9
Signing time:             Wed 12 Mar 2025 18:01:26 +0000
Manifest this update:     Wed 12 Mar 2025 18:01:26 +0000
Manifest next update:     Thu 13 Mar 2025 18:01:26 +0000
Files and hashes:         1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: deQE5exZ2OOQ6DNwe2wQ67Ct5V9RMnYQijxhGOI9GaA=)
                          2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 18:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:84:bc:fc:06:2a:88:3c:c5:ef:92:9e:f8:5f:9d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
        Validity
            Not Before: Mar 12 18:01:26 2025 GMT
            Not After : Mar 13 18:01:26 2025 GMT
        Subject: CN=91997f662f6eca77cecb91065e9a72622d265be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1c:1e:fc:c2:2f:9d:1b:db:1a:2d:25:53:af:
                    c9:9b:21:2f:01:84:17:4d:ec:68:74:9c:13:34:30:
                    f2:33:a1:27:59:6a:30:73:e4:e9:ca:36:ab:01:33:
                    5d:dd:79:a6:4b:05:06:6e:ea:11:72:14:01:90:3c:
                    50:f6:3a:5d:40:a8:f6:8e:6c:57:4e:f1:81:40:21:
                    b8:ef:7a:03:99:db:d6:a5:67:90:b7:96:70:9b:40:
                    77:cd:1a:ed:61:14:e9:e2:6e:af:64:8e:16:32:1e:
                    88:89:b8:29:5f:a5:44:b6:78:b6:25:ed:56:a5:90:
                    a9:1c:91:3c:33:00:1a:72:7a:99:65:c0:85:63:20:
                    03:76:a7:ec:cf:13:d9:14:c8:4c:75:5e:1b:b5:5e:
                    ac:88:ca:72:5c:7b:fc:4b:a2:d0:9d:34:40:48:14:
                    23:f3:e3:e1:84:23:2c:58:86:f3:7c:31:7e:cc:13:
                    21:a1:cd:f5:6a:2a:6d:fa:97:b3:28:28:5c:b3:46:
                    db:a1:32:46:ac:c6:e9:b0:00:ca:cc:be:d6:a6:9f:
                    03:6b:b4:f5:0a:6f:d2:de:82:ba:86:dd:2f:5d:de:
                    b4:37:57:78:39:aa:0b:b5:2b:d9:53:38:2f:ae:c6:
                    4b:01:26:fb:94:f8:f5:1c:3e:b7:e0:0f:e4:e0:cf:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:99:7F:66:2F:6E:CA:77:CE:CB:91:06:5E:9A:72:62:2D:26:5B:E8
            X509v3 Authority Key Identifier:
                keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c5:76:f5:9d:7a:7e:a6:16:40:5a:e4:56:d7:2c:11:67:25:
         53:49:04:61:ed:26:d7:79:55:f1:70:99:e6:3a:59:87:d3:5c:
         9b:9e:19:94:90:e2:76:91:af:61:e8:9b:81:29:d0:63:ea:ab:
         6d:b9:7f:12:4c:35:3f:6d:89:dd:f6:b9:57:3a:f5:b7:fc:e7:
         3a:a2:2c:db:f2:e3:6f:6c:16:79:88:9a:39:0a:bc:b5:f5:7b:
         3a:e2:79:01:c5:0c:a4:85:c6:b3:d4:d2:98:f1:e1:65:c3:4d:
         c2:0b:87:9f:e0:94:8a:16:97:fe:ee:37:32:a3:e0:24:35:f2:
         71:01:c8:52:81:f9:11:a7:11:0b:a2:4d:34:af:8b:52:0d:8f:
         55:6d:22:48:ab:ff:bf:c5:71:10:ea:23:40:90:77:2a:85:f8:
         24:1e:b4:61:7c:45:bb:f0:7a:09:c3:9a:ac:b7:fe:6a:ce:c2:
         39:ee:9e:c3:2f:06:e1:d9:e2:34:46:3f:0e:2a:b6:89:61:a4:
         f0:3f:da:46:c7:e7:fc:17:0f:a1:fe:b5:c3:8c:19:15:ac:11:
         df:d2:46:54:aa:55:ab:c5:99:02:30:1c:6e:fe:3d:98:90:9b:
         01:96:8b:a8:8f:ef:f3:40:99:84:e5:7e:3b:3c:2b:98:1f:92:
         de:fc:3a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:34:34 2025 by rpki-client