Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File:                     wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier:          chJ3MkZPekNnj+ZHZaC3GM9OvGeTItpJVGt9dsBF0Gw=
Subject key identifier:   0B:94:83:51:C1:52:96:9A:91:99:98:F2:03:6D:B6:65:1F:FB:CF:B0
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer:       /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial:       0196515B00D0A5C027B3BC14C2BE3A2B513E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number:          038C
Signing time:             Sun 20 Apr 2025 04:00:40 +0000
Manifest this update:     Sun 20 Apr 2025 04:00:40 +0000
Manifest next update:     Mon 21 Apr 2025 04:00:40 +0000
Files and hashes:         1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=)
                          2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: hLNs1RmfFkAXL5N+Ax5mQfLGy7nzS03mQDitMIXobzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5b:00:d0:a5:c0:27:b3:bc:14:c2:be:3a:2b:51:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
        Validity
            Not Before: Apr 20 04:00:40 2025 GMT
            Not After : Apr 21 04:00:40 2025 GMT
        Subject: CN=0b948351c152969a919998f2036db6651ffbcfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:ab:ef:e2:5a:c4:3b:a9:17:be:43:80:19:
                    af:72:3a:c6:76:a7:89:01:3f:f3:f0:9b:fc:10:46:
                    43:05:6e:c6:a3:1f:c7:1f:42:25:96:1e:0e:70:d7:
                    ca:fd:90:cc:5d:bd:b7:47:57:14:68:a0:6b:0b:c4:
                    ca:46:f5:fa:a1:e7:0a:69:5c:7a:27:25:c4:0c:13:
                    4f:a4:f4:04:e9:8f:89:82:cd:d2:b2:81:29:d5:88:
                    38:fc:26:cb:93:cd:32:ba:c7:b8:3d:fb:4f:0d:c3:
                    52:69:8b:4c:2d:9d:d6:54:4e:76:6e:f2:dc:ac:a9:
                    4f:cd:17:50:03:6e:43:70:97:2f:f0:d2:0e:d5:78:
                    c0:f1:19:18:ee:81:b2:64:be:0a:06:12:77:8c:3a:
                    31:ea:8b:55:e3:d5:2e:b2:2f:55:45:e4:82:6c:09:
                    a0:d1:42:b2:61:e0:be:59:95:7a:ee:7b:2d:dc:23:
                    8d:e8:67:a3:38:29:46:4f:63:98:91:1f:12:30:1e:
                    20:bc:8d:78:25:5a:d0:87:bb:50:aa:64:06:e3:9a:
                    0a:36:f9:a0:51:cb:f4:92:af:99:56:d5:1f:fa:d0:
                    23:87:39:85:da:79:13:d9:07:da:36:a1:5b:51:4e:
                    47:a2:b0:e0:93:cc:91:e5:b9:8f:fa:80:e0:e6:09:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:94:83:51:C1:52:96:9A:91:99:98:F2:03:6D:B6:65:1F:FB:CF:B0
            X509v3 Authority Key Identifier:
                keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:d4:20:8b:52:30:92:21:41:d8:95:30:f2:d0:7a:68:44:
         7d:e5:17:97:98:30:24:54:d8:14:12:d8:fc:c2:02:41:90:f7:
         61:ed:ad:32:fa:61:e5:2f:02:0b:16:15:4c:9a:7b:63:7c:da:
         1c:91:94:81:57:da:c9:58:61:0b:32:d1:98:3e:c6:7a:8e:7b:
         34:65:76:71:34:99:96:95:6f:04:c1:c0:96:55:d4:cd:dd:a5:
         f9:36:05:b6:2f:f3:da:91:a7:e5:fb:59:db:34:26:ef:29:ce:
         0a:64:17:5a:75:ba:9e:24:13:59:be:b4:c1:91:6b:a2:b2:52:
         fe:49:a0:d8:f0:3d:6b:59:6c:2b:4c:9f:87:8c:9a:91:e2:e6:
         3e:9d:3d:14:bd:ff:dc:10:e0:65:3f:6d:e4:31:ae:9c:e1:6f:
         e2:6d:c2:52:89:83:73:8f:36:46:a0:99:cf:eb:44:f0:71:01:
         ab:41:7a:d0:41:5d:e8:e2:1b:bd:fc:43:70:55:85:11:ab:2c:
         b8:f8:72:dd:cb:6f:1a:57:b0:0d:ab:06:01:45:9d:6f:be:12:
         30:18:a4:e0:80:f1:ad:96:5d:bc:2d:46:1c:b7:30:50:70:67:
         f7:47:52:76:7e:21:2c:c3:59:01:c6:5a:27:b8:77:eb:bc:e4:
         2a:a5:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:28 2025 by rpki-client