Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File:                     WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier:          wV27p0WRzpWINpXR0JGa59QfRiEnTISBLlnfcXsRI18=
Subject key identifier:   AE:66:EC:30:01:A4:97:5E:3A:2C:D4:DE:A8:76:32:93:8C:58:DB:0F
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer:       /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial:       019651FFF3C2152431188B5893988FA12210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number:          041E
Signing time:             Sun 20 Apr 2025 07:00:50 +0000
Manifest this update:     Sun 20 Apr 2025 07:00:50 +0000
Manifest next update:     Mon 21 Apr 2025 07:00:50 +0000
Files and hashes:         1: 0se6oPOZ9FSI_6qzearxcjxlYSY.roa (hash: g6cZT2b3ImLhGYVmMKzVx9c34caYKC+s1u35aPIl42k=)
                          2: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: 9jMRCXZV8sJatV+8HxB24ZJ+jTMLcRDLh/W5uNG3ja4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:ff:f3:c2:15:24:31:18:8b:58:93:98:8f:a1:22:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
        Validity
            Not Before: Apr 20 07:00:50 2025 GMT
            Not After : Apr 21 07:00:50 2025 GMT
        Subject: CN=ae66ec3001a4975e3a2cd4dea87632938c58db0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:31:d9:73:8d:22:19:59:ba:70:c0:d0:4a:ce:
                    cc:7f:16:af:9e:a1:e0:99:19:e1:fd:80:30:8a:46:
                    5d:39:45:5d:05:96:3f:53:da:af:18:aa:45:73:8a:
                    da:30:bc:06:d5:ca:18:0a:ae:8b:db:77:7c:3c:3b:
                    5b:03:ae:43:eb:21:48:c2:75:ce:78:06:38:b7:cf:
                    24:10:fe:5c:bf:66:a4:e8:8f:29:5d:05:ab:9d:c2:
                    7b:2f:a4:cf:c8:b3:da:64:a0:1b:41:fa:bd:98:9a:
                    9b:2c:4f:4f:dd:6d:d6:5f:93:c3:b5:5c:e1:d8:72:
                    cc:18:a1:a2:c6:da:37:fa:e5:93:8c:7b:26:8c:b8:
                    a0:d1:a4:3e:55:f9:5b:7c:a7:85:b8:65:a0:7c:39:
                    a9:64:96:12:fa:95:0a:cc:37:13:f4:9f:4e:87:ec:
                    a3:19:0f:9c:f0:1d:5c:31:38:ec:62:12:9b:44:90:
                    0e:bd:88:92:75:f9:32:20:ae:69:9b:bd:4d:27:40:
                    a9:da:e8:1f:92:07:09:c0:ed:53:49:ee:04:37:d1:
                    5f:d6:ff:06:62:10:4d:94:a1:e7:ae:46:1b:7e:f1:
                    37:d6:05:c4:52:9f:43:a6:a8:48:a3:48:17:85:a9:
                    57:d9:32:50:9e:c5:bc:55:30:ce:b8:c9:70:55:c5:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:66:EC:30:01:A4:97:5E:3A:2C:D4:DE:A8:76:32:93:8C:58:DB:0F
            X509v3 Authority Key Identifier:
                keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:10:05:9d:5c:6f:61:39:ea:f4:cd:be:75:59:b9:c0:d5:25:
         59:1b:25:c0:25:83:a3:42:7f:25:3f:f6:61:04:5c:98:a1:63:
         48:64:74:1a:94:df:25:36:81:30:22:3f:29:33:53:dc:df:e0:
         1a:8d:5b:dd:a3:de:17:f8:18:dd:e0:3f:81:7a:fd:2c:8b:c1:
         5b:4e:c5:b9:6d:2e:25:37:81:43:d9:0c:3e:73:d6:2d:15:46:
         b6:6c:6d:d7:77:05:09:77:bb:e5:b6:9d:92:8b:9b:04:e6:ff:
         5a:a2:24:7e:ee:b4:dc:41:90:1c:cf:66:c9:3e:8f:e2:50:19:
         25:d1:a6:70:87:46:e9:18:8a:3f:b0:3d:e9:ab:71:c1:49:0b:
         d5:a2:1a:26:06:7b:5d:e2:88:20:09:20:23:b4:a0:25:37:b1:
         98:7e:03:e8:d2:cc:5d:06:85:f4:ac:a6:cb:b3:e1:db:89:bd:
         cb:0b:cf:4b:90:15:f1:45:9e:1a:0d:5d:30:95:7c:d9:01:47:
         ea:6e:7b:3e:09:63:fd:9d:18:19:91:c3:55:56:81:3e:66:18:
         72:9e:07:9b:21:d9:37:fa:2a:10:f1:06:c1:30:d8:ac:21:06:
         69:82:81:df:53:bc:d4:c4:19:90:d6:7d:6c:a6:02:7e:64:a6:
         db:19:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:33 2025 by rpki-client