Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File:                     WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier:          JoGMJd6ljuqhepX26EWTCocYtfetw3MQJ4qORO/cvhk=
Subject key identifier:   D4:71:7B:2F:C8:76:7C:61:67:1C:AE:74:4A:48:D7:0F:E2:24:1F:3F
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer:       /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial:       01958BBB82CBD50377AE99A707A6054FAA31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number:          1492
Signing time:             Wed 12 Mar 2025 19:01:16 +0000
Manifest this update:     Wed 12 Mar 2025 19:01:16 +0000
Manifest next update:     Thu 13 Mar 2025 19:01:16 +0000
Files and hashes:         1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
                          2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: K8vLSZ64pQXRRKsARiuQ9epy4TUosGXdDKrOE4gXjvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:bb:82:cb:d5:03:77:ae:99:a7:07:a6:05:4f:aa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
        Validity
            Not Before: Mar 12 19:01:16 2025 GMT
            Not After : Mar 13 19:01:16 2025 GMT
        Subject: CN=d4717b2fc8767c61671cae744a48d70fe2241f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:fe:97:30:32:ad:ae:e0:6d:d1:12:28:11:
                    e8:d5:cb:94:7b:7f:bc:5d:76:ca:bd:69:eb:c1:2c:
                    14:06:c4:a5:9a:4d:7d:71:d6:56:db:3e:57:a8:ce:
                    3d:57:6c:11:13:2d:dc:ed:85:8a:57:46:35:b3:8f:
                    53:b3:d7:59:68:6e:90:40:31:41:f8:a7:9c:97:92:
                    2a:56:04:dd:fe:06:b9:f4:2a:91:b2:86:1a:5e:1a:
                    f7:e4:01:ba:01:05:5d:b9:02:86:b1:60:04:71:23:
                    2d:ea:e4:2c:0a:a9:d8:3d:f2:03:df:66:f9:5c:39:
                    9c:3c:ba:6c:78:bf:a9:91:01:19:03:d7:f8:e6:39:
                    2f:a8:d5:c4:a5:9f:34:52:48:23:d5:e6:fe:1d:46:
                    90:8a:06:43:92:93:76:e4:f0:96:d9:79:aa:8a:7a:
                    41:7b:94:c1:6b:0a:02:f4:76:6d:23:c1:ba:50:62:
                    e4:6e:13:58:69:1b:3c:3c:a2:d4:18:36:c7:c6:40:
                    ce:bf:37:c2:a5:3d:bb:5a:db:f6:f0:f6:e4:a4:26:
                    df:be:7c:ed:f8:02:0f:d0:b6:96:6d:8d:f6:43:2c:
                    42:3c:25:ab:93:a0:ea:0e:dc:7c:4c:38:09:0f:c6:
                    17:44:35:37:3b:c1:dd:c4:5d:77:78:4f:0f:64:69:
                    c1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:71:7B:2F:C8:76:7C:61:67:1C:AE:74:4A:48:D7:0F:E2:24:1F:3F
            X509v3 Authority Key Identifier:
                keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ec:a5:d0:e1:7a:c0:7b:35:f0:26:95:84:08:f8:cf:0e:0f:
         cd:82:f3:45:23:40:67:da:e3:b6:b5:1f:e1:62:c7:0c:7b:5d:
         e5:a8:01:fa:39:3b:10:be:d2:bb:3e:60:dd:fc:0d:1c:11:50:
         48:e4:d1:ab:ab:81:39:9a:ed:d5:22:df:e6:76:70:e5:06:4c:
         45:3b:45:18:a8:71:24:45:3e:de:85:f1:80:95:48:fd:8b:f9:
         4f:bd:23:65:12:d0:cc:91:5b:12:f1:0d:b4:da:33:c7:9e:c5:
         f5:49:d9:41:33:10:22:d8:3b:c4:89:22:2a:4d:15:18:6f:6d:
         0e:fc:e1:97:01:28:80:8c:8b:a2:f1:9d:bd:30:7b:7d:38:ab:
         c1:d9:74:d3:40:ae:84:d5:ed:4f:11:63:83:f5:f9:b9:be:98:
         63:e6:57:1a:76:ac:eb:2a:e3:12:cf:4b:95:9f:8b:f5:fb:77:
         4c:86:b4:e8:91:55:d5:ab:e7:96:69:e4:75:f3:19:f4:29:66:
         64:d6:92:7c:f5:37:13:81:71:88:91:8e:e4:22:60:f2:c2:a0:
         a6:17:63:40:94:a2:9b:bc:38:22:6b:d1:17:46:e0:79:af:03:
         d2:2e:e7:74:f6:2a:62:3b:ac:8a:6f:5e:49:ee:7c:b2:4a:60:
         2b:0d:47:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:55 2025 by rpki-client