Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File:                     weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier:          hJlj9n0Xc1DespQooqze4BUJyFUZjZwj1HU34nccAKU=
Subject key identifier:   FB:4B:DA:AD:E4:2D:33:FC:56:AC:01:F5:A4:DB:31:36:2C:0B:98:95
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer:       /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial:       019655A62F13CD0F3D72B25A68ED9B66B390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number:          1375
Signing time:             Mon 21 Apr 2025 00:01:16 +0000
Manifest this update:     Mon 21 Apr 2025 00:01:16 +0000
Manifest next update:     Tue 22 Apr 2025 00:01:16 +0000
Files and hashes:         1: Di1VRxBiq_rnTNsIoHimbynr7Dc.roa (hash: 5B+lIpr/HovgOIMesHvI3rv+n0CtV3K27Lr276Y0YVE=)
                          2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: SOe7wPM0a8ZEMG3uVRKYUe+rdy8Pu40uok1isuelxNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 00:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:55:a6:2f:13:cd:0f:3d:72:b2:5a:68:ed:9b:66:b3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
        Validity
            Not Before: Apr 21 00:01:16 2025 GMT
            Not After : Apr 22 00:01:16 2025 GMT
        Subject: CN=fb4bdaade42d33fc56ac01f5a4db31362c0b9895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:c0:2b:f3:09:4a:1a:12:ff:49:1b:24:a3:
                    dc:61:6a:f6:6f:02:ba:8c:99:f1:8f:eb:0c:56:b3:
                    fb:a6:68:81:64:31:e3:ae:d5:7a:37:43:f3:9c:41:
                    ca:d0:3d:4f:6c:f2:ae:b2:68:83:87:3b:95:9e:49:
                    02:1a:5e:bf:7a:43:26:8f:bc:18:6b:5e:51:a4:6a:
                    27:33:e9:e2:d0:9f:27:87:f5:2e:1b:e9:94:fd:9c:
                    b6:95:f3:e8:64:d0:47:bd:b9:7f:84:39:d9:9a:12:
                    ce:c2:33:89:6f:36:96:7c:de:f7:90:f2:2d:28:1b:
                    64:49:80:31:7e:c5:78:5a:86:7b:52:d1:ee:29:b4:
                    08:56:32:73:9f:a9:e2:3a:d9:ff:ef:83:b8:4d:4a:
                    3a:a3:e4:32:64:6e:59:9b:25:1c:2c:a0:7c:85:70:
                    fd:82:eb:88:ea:4a:08:21:b7:ab:c4:40:db:88:b4:
                    91:6d:6f:c6:18:cd:a6:2b:cd:b1:3d:de:91:32:88:
                    c9:3b:39:75:5a:90:4c:a2:5a:9b:21:95:35:f1:ce:
                    fd:9b:5a:01:62:41:b0:9f:4a:1d:61:54:be:d1:6f:
                    87:8b:cd:a5:96:89:9e:ba:39:1b:cf:b2:7f:b9:54:
                    18:c3:a3:ad:7a:f2:d0:f2:e9:20:8d:f7:6f:88:54:
                    ff:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4B:DA:AD:E4:2D:33:FC:56:AC:01:F5:A4:DB:31:36:2C:0B:98:95
            X509v3 Authority Key Identifier:
                keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:20:4e:f8:d2:5f:6d:79:55:cd:df:f2:fb:98:a6:f0:ff:73:
         55:b6:5f:2d:15:fd:0a:94:49:f3:06:7a:9b:95:35:f5:d0:cf:
         04:c0:85:ea:69:55:81:60:c3:2d:35:88:87:8f:dc:4e:9d:33:
         44:e7:e1:64:b9:ad:88:2b:c7:48:e9:e6:1a:f3:62:b3:d1:7c:
         06:c2:5b:9a:10:51:41:ac:34:1b:26:b9:6f:47:ff:9f:89:90:
         c6:65:27:49:df:98:8f:5b:ea:81:82:9e:2a:ac:d7:20:97:64:
         fe:9f:b6:f8:87:20:6b:90:56:67:04:38:c0:83:57:82:b3:3a:
         6c:de:b3:a8:e3:1a:8b:2e:d0:6f:35:8e:7c:08:99:e8:53:37:
         d4:13:99:9f:21:73:b0:ae:37:0b:aa:0f:96:d8:56:f1:b2:bb:
         0b:78:0f:3b:ce:13:0c:51:6e:26:10:ae:71:06:a4:ed:48:b0:
         35:a1:6b:27:6f:7b:87:42:d6:75:9f:ed:28:70:36:ba:8c:0c:
         46:04:4c:16:48:09:10:ff:88:f2:04:f2:a0:31:3f:38:a9:91:
         27:14:ba:b7:37:75:3d:6d:a8:1e:99:5c:74:28:dc:f9:80:15:
         ad:fd:c3:95:97:51:7c:1b:8f:b1:77:72:b1:fa:71:4f:79:df:
         51:2c:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:29 2025 by rpki-client