Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File:                     1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier:          SRupwKocnb1JlZCGGd9+vCcJGISAIIec8T04UWQlW1E=
Subject key identifier:   79:75:4A:67:36:DE:D1:F2:E9:24:A8:3D:B3:FC:C1:29:D3:14:A3:FC
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer:       /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial:       019650487F3D957D13A5ADF261DC0F77CAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number:          0439
Signing time:             Sat 19 Apr 2025 23:00:50 +0000
Manifest this update:     Sat 19 Apr 2025 23:00:50 +0000
Manifest next update:     Sun 20 Apr 2025 23:00:50 +0000
Files and hashes:         1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: uWFuvNXlwJwMsyZlO/NF2++4lLKxcGGIXoCkMz5jtu4=)
                          2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:48:7f:3d:95:7d:13:a5:ad:f2:61:dc:0f:77:ca:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
        Validity
            Not Before: Apr 19 23:00:50 2025 GMT
            Not After : Apr 20 23:00:50 2025 GMT
        Subject: CN=79754a6736ded1f2e924a83db3fcc129d314a3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:7f:16:7b:64:80:a7:84:b9:e2:c9:8e:0c:
                    04:1d:7b:9f:6d:35:25:1a:0b:c8:cb:00:7e:60:ee:
                    12:53:22:37:c1:28:66:67:9d:5a:b0:9f:6b:04:27:
                    f0:df:be:44:63:96:fd:d1:e2:3e:eb:84:07:cf:78:
                    97:bc:b6:f4:7d:ae:8e:f4:63:0f:c3:88:34:6a:2c:
                    aa:5f:fd:2f:36:a0:44:9b:f0:ff:93:87:57:e2:c6:
                    04:bb:63:02:c7:4b:9c:ca:99:74:6c:0d:dc:e6:01:
                    65:7d:ed:a6:43:59:aa:e6:5f:e7:12:de:40:a4:a8:
                    1c:2f:5c:11:7f:5b:91:a5:e5:8a:18:1f:30:4a:c9:
                    33:69:66:09:e9:8b:e9:84:96:7d:64:30:e2:a8:1c:
                    08:72:64:47:66:43:b7:ef:aa:c1:c0:37:f1:b5:66:
                    65:21:f4:51:1b:fd:12:54:69:1e:72:e1:69:92:ae:
                    0a:aa:f0:72:bd:9b:9f:da:d5:bf:7d:1d:16:43:46:
                    fb:ed:bc:87:96:91:1f:9d:58:e5:e9:c2:15:e6:86:
                    fa:f9:22:fc:86:ae:fa:fc:61:d2:02:27:81:ba:8b:
                    ea:ae:73:9c:7f:69:bf:12:f0:33:44:e1:6b:15:12:
                    dd:d3:e2:5f:49:b9:16:2d:59:82:28:c9:13:5e:8c:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:75:4A:67:36:DE:D1:F2:E9:24:A8:3D:B3:FC:C1:29:D3:14:A3:FC
            X509v3 Authority Key Identifier:
                keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:26:e1:45:63:63:7e:b4:43:44:82:22:ba:2e:b4:d4:9c:
         dc:01:27:28:c6:d4:03:36:68:9d:89:c8:9a:91:ce:ed:4f:94:
         67:ee:95:0b:3d:94:3d:31:12:e1:d2:4e:c3:6d:68:6a:b0:19:
         99:a6:6b:de:29:49:b9:74:92:2b:24:4d:65:f9:b7:52:b5:d3:
         4b:d6:ea:6d:f3:91:28:11:79:6d:a5:5c:72:16:bd:7b:e8:15:
         eb:76:02:5f:8c:53:0c:a2:71:0b:63:71:5b:a1:de:62:0e:a9:
         63:27:84:d9:a7:70:cc:4f:fb:0b:ae:db:ca:f4:5a:65:f0:e0:
         10:b4:14:0f:d2:ca:d2:bc:93:a1:ba:72:be:40:e4:cc:9a:58:
         a7:63:fe:cc:a7:a6:ef:fc:a1:22:6a:fd:7c:e1:d9:d8:4c:03:
         6e:03:b0:ae:c5:d2:80:fc:92:69:d9:f6:3a:3f:5b:5b:4a:8d:
         98:19:63:a0:06:56:af:b8:75:ce:66:48:e8:29:35:11:a1:87:
         71:90:a5:76:e1:34:09:64:31:f0:58:bf:d5:24:3b:d5:6b:dc:
         a3:33:ff:ac:b1:0b:af:c4:00:3b:3c:db:7f:49:7e:3f:12:89:
         93:56:21:a3:52:bf:e2:3a:eb:46:1b:9a:19:ae:c2:2e:88:e3:
         73:09:7c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:05 2025 by rpki-client