Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          M/lLIXkzGgMz0tUMYtu/HTxJ6LDVw/r5YxHpbZ4UGbQ=
Subject key identifier:   F6:70:D5:AA:D0:EA:61:D5:87:44:81:83:5F:19:BA:A8:6D:06:AC:6F
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       01963C8B14D1DFB116DFFACA5607C311E520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          14F2
Signing time:             Wed 16 Apr 2025 03:01:09 +0000
Manifest this update:     Wed 16 Apr 2025 03:01:09 +0000
Manifest next update:     Thu 17 Apr 2025 03:01:09 +0000
Files and hashes:         1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
                          2: MrwCb1VshNGuSjy8-ZcrQ_jjBz4.roa (hash: RL8Yc0SUjE/2UAMDk7eU+CcumrO0VbncY+6nMnTALA4=)
                          3: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
                          4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: 9GcjsQhpmZw6VtX6YagMBI6gf9foUV1VJgM211CRihM=)
                          5: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
                          6: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
                          7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
                          8: rrWx_KVK0nRTRlZQQB4TJRqTC28.roa (hash: BETaqE0/0r4sYx0mpie4wQWJFL1T5S0trn7rIn0+6Eg=)
                          9: txKA05gc1PNEhcuQ9gw4JRL4SOg.roa (hash: ZxoTI5LHLJfIjBc6aAlc7tJn+4E9R4JWht3d4AMJtIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:8b:14:d1:df:b1:16:df:fa:ca:56:07:c3:11:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Apr 16 03:01:09 2025 GMT
            Not After : Apr 17 03:01:09 2025 GMT
        Subject: CN=f670d5aad0ea61d5874481835f19baa86d06ac6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:52:cc:69:2e:c2:81:a1:12:ae:e1:69:21:
                    e2:f5:5c:11:bc:c9:e4:1e:73:4b:19:ca:d1:51:ce:
                    f9:66:a2:74:c4:bd:30:53:db:27:15:4e:c1:7c:dc:
                    8d:3c:29:6e:23:bb:04:eb:68:0a:cc:86:4f:61:ba:
                    5b:79:3c:17:be:df:58:f9:39:1a:4e:1f:ca:ac:6b:
                    87:09:07:a5:2d:bd:3f:1f:35:6a:a4:12:4d:b0:fe:
                    53:a9:2c:10:9a:ae:c7:67:da:f3:0e:d4:fe:6e:ad:
                    ff:79:51:86:8f:87:cf:7e:4e:dc:49:7a:2a:9b:1f:
                    a6:86:9a:a2:ab:db:a9:61:5e:a1:dc:fc:56:f6:fc:
                    17:cc:9f:87:b0:70:68:c9:1b:40:0d:2c:81:af:c7:
                    5f:22:83:23:1a:79:55:42:1f:d4:93:db:76:8a:bd:
                    0c:ef:b6:38:ca:ab:1c:13:da:9b:98:1c:50:eb:45:
                    76:f2:e4:32:cb:83:6a:27:4a:a4:c2:70:b5:4e:2d:
                    9d:a1:d6:88:c6:0f:f5:20:3f:56:56:9f:56:eb:cb:
                    3d:50:80:ea:85:3d:44:1c:d5:95:8e:92:54:ce:c6:
                    c8:fb:5e:97:8e:20:d8:71:6a:34:b6:86:5b:77:df:
                    c5:4b:5f:c8:85:03:e3:a3:84:6e:7c:c0:5b:ff:87:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:70:D5:AA:D0:EA:61:D5:87:44:81:83:5F:19:BA:A8:6D:06:AC:6F
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:22:2f:72:69:78:e2:b4:20:b4:9f:b6:c1:0b:ce:c4:b9:44:
         2e:37:d0:aa:f8:bc:77:fb:16:ef:db:17:95:be:98:21:6a:67:
         44:1f:7c:9f:98:9b:32:61:34:71:6f:57:e1:3c:c9:77:aa:33:
         d1:f2:96:dc:5f:9d:1b:d4:8a:86:04:b2:3b:23:35:69:db:a5:
         21:82:68:85:31:17:07:19:7f:5f:3f:a7:38:d5:74:a4:72:e6:
         fd:23:0a:c2:6e:5c:69:77:0f:26:15:18:bf:6f:2b:22:54:3c:
         64:1c:b4:1e:87:fe:36:a5:cf:43:7d:c1:23:c0:13:25:7b:40:
         f4:62:ed:b7:21:a6:7b:fe:cc:da:0e:a1:00:12:86:6e:bb:14:
         4a:d9:7c:34:d1:41:21:28:8d:0b:62:9f:89:b0:dc:ca:8c:d6:
         45:64:61:73:b4:cf:ba:67:94:f2:d9:35:93:a6:1b:38:ed:7f:
         99:44:fc:38:e3:3d:21:7d:89:f2:3e:0f:d6:83:19:10:e3:9a:
         b8:b4:25:fd:f7:92:53:40:70:97:70:4e:8c:71:5e:83:38:f3:
         0c:62:b8:6e:c7:aa:a7:87:1a:63:82:8d:1c:ba:f7:8d:0f:f5:
         be:86:e2:cd:32:20:e9:65:66:77:71:19:1b:22:49:db:ea:2d:
         94:45:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:47:50 2025 by rpki-client