Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
File:                     WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft (raw, json)
Hash identifier:          BL6ywHAql59VK05o4hIdGJ65Qd0a7oxFofPBXaj6zbU=
Subject key identifier:   97:9B:16:35:74:58:F9:D7:EB:F5:E6:19:2F:5A:05:99:77:7D:7A:DD
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       019651C970F8CE5F78F899DAB77E73D670EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
Manifest number:          150F
Signing time:             Sun 20 Apr 2025 06:01:18 +0000
Manifest this update:     Sun 20 Apr 2025 06:01:18 +0000
Manifest next update:     Mon 21 Apr 2025 06:01:18 +0000
Files and hashes:         1: 4hbMBM1nzDwcq0Z5poawjitTY60.roa (hash: XP1CU+CY23GAE6mFffgmeePRICbliFurLSIMPRQ5f40=)
                          2: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (hash: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=)
                          3: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (hash: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=)
                          4: 9IywKX9fS2qo6y4BwiBKFOJ_RRo.roa (hash: Ac1uBlsnhCZRDyKHF7yrUh45o1zwGsvgTvH8xD0tKfw=)
                          5: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (hash: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=)
                          6: GKke9u-g19ORaszjeZzhH6pAcUM.roa (hash: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=)
                          7: Ig1WTTEJWSAB8ImVaoKPLwHQgbc.roa (hash: UMRsVJllHBv632Y31OJYoImld0QNRvOFUdYe6AzQydE=)
                          8: IwPxKQ0cH2VtiVJXXV7lwrIiVdY.roa (hash: Vp7I9HovJoiuEC9VCO+6KWFaSrjYJto9LxrxlUDp/FE=)
                          9: N5rVf1hY_OzEZp1xY8pg3j4it1A.roa (hash: Ue3CSgwWVTQ+G81bsGOQJFm164xkm8Ru6ylUCKhvmpA=)
                          10: PcjnIOs0xHAadMUPf6vwApxUGPI.roa (hash: ahUECt5ec83Dg9RUG/tnn3VXtR+x9lfVVXmvWME9edo=)
                          11: SOIu77MViH9HrW2wOhBa4ctl-s4.roa (hash: EeJItN2QFTFRmLAW0Mvz7rV5W+XgeuLcsUy4tvkAsoI=)
                          12: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (hash: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=)
                          13: TaAWX6RunIkoavVYyto4LyLZbsg.roa (hash: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=)
                          14: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (hash: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=)
                          15: WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl (hash: MhvfPCrxSydoFjE2Zmc6EbaxKBlEfpktedUBfM3aZLU=)
                          16: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (hash: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=)
                          17: Wj9UBZ8lyGpizZyCVs5Soop7w2k.roa (hash: nghObD8IVMMvgf7Cs34GYm/ZtGFtMr/E9cOGO8F0TDk=)
                          18: dy952eRiBCdIkDatCGm3tM-NtSw.roa (hash: oIhly5TECVRnL4ipTnAWtgg017FDltluQ713TVuz5pw=)
                          19: j8S8_OZUpxB9k7LHRFPXRAKfkWU.roa (hash: k8mQUf/NuQPokL0zcpiZfvFdtMY/J1/bRRQuRB+KB/M=)
                          20: qMr-LBReCBqYRhVBoJttXFZAERs.roa (hash: +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=)
                          21: skag_VnN9GBJjb3tko75iVexHSM.roa (hash: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=)
                          22: sqtDA5C4zTAF8EU1UanGLhNGqBE.roa (hash: mht2D+EpFezejVvclFV759gknFNR6V1vy0XD94YDkwU=)
                          23: vWXWhkktZWC2_i0zKz5vdi-IvuE.roa (hash: D7lRMIA1f5sBgefITMxbK3yGHotRr10qyY6m4yVQx28=)
                          24: xPuYo9ZNVfEwjuZRks156sTPvCs.roa (hash: jIHvOq1mFiR09GABf7ziDZ9sAzswkVSjcgAC+i6z4yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:c9:70:f8:ce:5f:78:f8:99:da:b7:7e:73:d6:70:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: Apr 20 06:01:18 2025 GMT
            Not After : Apr 21 06:01:18 2025 GMT
        Subject: CN=979b16357458f9d7ebf5e6192f5a0599777d7add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:0e:aa:f5:cb:79:eb:e5:e1:0f:f5:a9:82:
                    23:1d:4c:d0:4a:50:0d:5b:dd:a7:cc:bf:bc:34:fe:
                    63:1e:e0:9c:71:bc:69:a4:58:fb:60:c6:c0:3d:1a:
                    4d:de:c6:42:f2:51:b1:3a:3a:c1:42:12:eb:4a:2a:
                    53:ce:2e:f6:a2:77:bf:b4:c3:29:a1:e4:33:ea:a3:
                    c1:a0:13:94:74:d2:6c:58:cd:d6:26:5c:a4:5b:86:
                    ec:e4:67:e3:54:22:0e:62:06:d2:93:74:a3:e5:4a:
                    68:15:e4:33:09:a6:01:a4:96:ed:34:e1:45:91:fb:
                    f8:a8:95:aa:10:54:5f:e6:f8:2c:3b:05:8a:6c:ee:
                    13:30:92:22:bc:e9:7e:08:b8:e3:64:d5:ea:31:81:
                    ca:bc:45:fb:24:5a:95:6c:dd:34:7f:54:24:30:d9:
                    61:fe:5b:a3:7d:97:73:a9:d9:d9:13:17:52:27:69:
                    d1:d5:99:a8:2a:61:06:84:18:41:ff:92:f7:98:d7:
                    40:d9:7a:94:21:3d:c7:dd:15:c2:dc:fd:88:5a:cd:
                    28:d1:f7:fe:91:0a:38:a1:d9:b0:2a:8b:e9:9b:4f:
                    48:e7:a1:45:8a:8a:af:5b:1f:c2:9d:37:3f:a7:f8:
                    a9:ee:fa:91:70:fe:b7:12:63:24:85:39:29:89:12:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9B:16:35:74:58:F9:D7:EB:F5:E6:19:2F:5A:05:99:77:7D:7A:DD
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e4:34:4e:b1:cf:39:4c:bb:69:1e:a0:7d:22:c1:a6:5b:d9:
         2b:35:d2:d3:63:8a:47:a8:80:f3:90:47:92:46:c0:33:bf:52:
         64:73:03:72:64:9c:03:dc:8c:3e:21:b1:b4:61:be:bb:54:9b:
         14:39:7e:c4:ec:dc:0a:10:ab:90:96:9b:b0:1a:ee:47:cb:67:
         a6:fa:fc:40:3c:6a:88:dc:e2:10:21:e5:d8:29:04:cf:99:3f:
         d9:06:d8:f5:13:d1:e9:b0:4e:4a:ad:4e:98:8e:a1:6e:e4:e4:
         82:8b:f0:4f:db:d5:1f:2c:3a:38:5f:a1:d6:e1:49:35:1d:e9:
         63:58:8a:9b:1b:dc:a2:a0:74:c4:9c:11:73:6c:be:96:e9:31:
         97:13:0f:b5:e5:46:07:74:83:7a:1f:24:41:94:44:48:63:52:
         6b:8e:e6:cb:37:cc:2a:91:0a:94:c4:f4:cc:4b:65:02:61:c8:
         fe:35:42:5c:e3:f2:7e:91:72:8b:59:62:62:b2:58:99:d8:25:
         89:d1:6a:31:9f:94:8f:12:fd:30:36:00:97:db:aa:78:97:65:
         0d:61:63:1e:1d:a8:26:5a:9e:80:04:35:43:01:03:9e:79:68:
         5d:b8:aa:60:5f:7a:6a:a3:7f:34:1e:bf:5e:7d:7f:1c:9e:09:
         a1:0f:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:05:37 2025 by rpki-client