Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
File:                     wly3EywZ99UfAC7UrYEa7PWyD1c.mft (raw, json)
Hash identifier:          LwPCSVdaynbQV+oK1tSWSej/FEclhVqX2lRZRcIl2Nw=
Subject key identifier:   2C:95:9E:65:E9:FC:1D:DE:58:EC:9F:26:C8:27:37:E2:FE:EA:87:A8
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Certificate issuer:       /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial:       0196146AFE2C8034EE8538D8945AE88B7852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
Manifest number:          06D9
Signing time:             Tue 08 Apr 2025 08:01:18 +0000
Manifest this update:     Tue 08 Apr 2025 08:01:18 +0000
Manifest next update:     Wed 09 Apr 2025 08:01:18 +0000
Files and hashes:         1: 0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa (hash: rrGUPdLm/yz0jAaBzRKBfGiiUHE1bJZVAlwYqWnvc2g=)
                          2: Mr7THJO68NohwknMfTQKnqHV-vc.roa (hash: knt9VF7cf9YizkNpPo4OGyLEE0z8MhXR+E+kt4mIdVA=)
                          3: TB6H5V1Ni-tKp6BX2r-SHLcytb4.roa (hash: 0fhq54aZgsVM/k0+CX/b9ZvdCc1x5cY4r3GXAZAMq6M=)
                          4: qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa (hash: woIS65FxXCdUB0qPb1Sk66filHI9SQzJMbXAm2PrCSk=)
                          5: wly3EywZ99UfAC7UrYEa7PWyD1c.crl (hash: U5kUwQBrCPh/3Yu/klM8CJm3WRG4/oAyeRnvm5JFYtA=)
                          6: zSfZVih6hBceUixRgoQRbTOqrPs.roa (hash: azI0MEflNFx/avYXf2xzg+zXEruqyuhKpmbLg+R7a0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:14:6a:fe:2c:80:34:ee:85:38:d8:94:5a:e8:8b:78:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
        Validity
            Not Before: Apr  8 08:01:18 2025 GMT
            Not After : Apr  9 08:01:18 2025 GMT
        Subject: CN=2c959e65e9fc1dde58ec9f26c82737e2feea87a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:74:16:a0:2e:6b:56:eb:93:a7:55:f0:3d:
                    5e:fa:7d:7d:8e:ad:2f:61:7f:00:a1:b6:c9:d2:a8:
                    1e:45:3f:f9:11:ce:9e:ad:f4:80:8c:de:ab:32:14:
                    15:fc:f2:21:18:e9:3d:34:f4:97:85:4d:8f:56:4b:
                    f3:56:e8:03:96:d8:cb:f2:f0:96:c5:1e:37:39:ff:
                    56:4c:e7:3a:f7:78:7d:98:a3:ef:97:73:0d:0c:38:
                    c6:91:f9:86:6c:be:18:68:b7:5e:45:35:30:6a:c9:
                    3a:74:e8:09:59:0e:57:e8:ef:86:79:14:69:5f:55:
                    78:b2:41:fd:da:a8:cf:12:d8:47:a7:df:4d:31:71:
                    2e:97:42:69:61:56:ee:47:c6:17:b2:c9:52:ec:13:
                    d2:b1:f0:b7:50:fa:39:66:30:a1:a8:5a:03:5d:7c:
                    ef:28:f7:00:07:da:d0:52:75:2e:c0:0b:6f:43:fa:
                    7d:89:ad:3b:21:4a:57:7f:9f:f9:aa:75:8a:09:7a:
                    60:7c:aa:a5:c4:47:6b:ac:e9:86:3b:5c:38:44:f8:
                    6a:97:51:99:32:37:e9:8e:dd:50:71:4f:93:89:d7:
                    e4:55:23:21:24:63:1f:6d:17:04:aa:c5:b1:58:bf:
                    80:de:69:2c:23:40:0f:5d:0d:cd:45:2f:33:d7:3b:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:95:9E:65:E9:FC:1D:DE:58:EC:9F:26:C8:27:37:E2:FE:EA:87:A8
            X509v3 Authority Key Identifier:
                keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:7a:66:a3:40:2c:32:20:5e:e8:36:87:98:39:14:e9:3c:
         02:0f:cb:d9:77:9e:cf:12:1c:e5:27:f2:9e:4d:b8:d9:6f:c1:
         b1:d9:96:46:ee:84:c9:ec:d8:5f:84:a5:b5:bf:78:62:5a:6c:
         03:27:de:a0:a4:b9:59:67:90:98:ad:d4:9b:18:f0:ac:63:fa:
         30:bf:aa:11:ad:09:3c:d2:b3:54:f6:69:4b:ec:ae:12:29:2d:
         2b:65:22:97:57:c1:fe:a2:5f:23:37:5a:ad:e5:4b:db:64:6e:
         c9:43:37:f0:4d:2a:f3:ab:2b:81:ba:64:7c:23:2b:f7:0a:29:
         9e:3b:4a:4f:34:8e:54:ff:26:83:08:9e:85:13:b6:01:b6:87:
         e2:82:a8:c7:58:ec:20:c1:fe:25:61:ed:21:41:eb:93:8d:94:
         03:e9:c6:61:4e:92:9e:56:51:a8:85:f3:9b:8b:ac:b1:b5:f2:
         3b:96:14:dd:ec:f6:80:5a:2d:d8:e5:7d:76:df:62:0e:5d:e4:
         60:8e:ea:c5:ed:66:e0:7e:99:13:7b:49:14:8b:f0:6b:5f:01:
         55:e7:8a:f0:63:9b:73:c4:57:90:a0:0f:55:b7:28:d5:77:5d:
         5e:ff:d0:65:14:68:ea:9e:9e:59:23:31:88:e2:fd:d9:01:b3:
         0c:7d:d1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:23 2025 by rpki-client