Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
File:                     MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft (raw, json)
Hash identifier:          cqQXsIOBnasQjc9zLXUURjAQad656eUcr8LfWnu4xvo=
Subject key identifier:   01:A4:75:85:F9:95:9F:8C:7D:3B:4D:FC:DF:8D:0A:CA:0D:3E:EA:9B
Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
Certificate issuer:       /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Certificate serial:       0196447B435E365AF8E84221F6130495B988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
Manifest number:          0DA7
Signing time:             Thu 17 Apr 2025 16:00:50 +0000
Manifest this update:     Thu 17 Apr 2025 16:00:50 +0000
Manifest next update:     Fri 18 Apr 2025 16:00:50 +0000
Files and hashes:         1: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl (hash: p7a2yL0WtuUHdF7SA9V4tgiNxVvffwe79f3mb5IYRsI=)
                          2: jlPrG3yw9VWSwdIgD6U56n3FJO4.roa (hash: //BBruzTksW7mSOBdLHpnW4EtV41ZFbnLnxHoJuolZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:7b:43:5e:36:5a:f8:e8:42:21:f6:13:04:95:b9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
        Validity
            Not Before: Apr 17 16:00:50 2025 GMT
            Not After : Apr 18 16:00:50 2025 GMT
        Subject: CN=01a47585f9959f8c7d3b4dfcdf8d0aca0d3eea9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:2c:d6:73:c3:10:53:f6:d1:0a:84:d6:c4:
                    d1:aa:35:56:e4:0c:29:cf:bf:d7:87:1c:73:9e:b0:
                    24:f6:f1:c9:24:b9:2f:b2:ac:f7:41:54:74:d5:0c:
                    95:92:e5:c8:ef:c3:c4:df:1f:65:f6:f8:1f:c9:de:
                    3b:c5:cf:76:3e:ee:66:77:b4:c8:66:31:82:5a:c7:
                    c2:c5:17:09:1f:f1:3e:92:1c:dd:7f:e0:34:4f:f6:
                    dd:1c:14:95:51:45:99:39:e2:86:f3:95:bc:5e:c6:
                    a8:90:a1:38:34:e5:e1:30:ad:82:db:b9:2b:8e:df:
                    69:2a:df:51:a5:2f:32:22:f1:12:9e:16:1e:86:0a:
                    30:80:b5:ae:3f:aa:53:d6:86:d9:a3:91:7a:d7:d8:
                    70:48:07:30:91:83:43:ed:d1:a0:44:5b:ca:fa:78:
                    a7:c9:4f:07:f1:fc:f3:23:74:54:90:24:e4:e8:db:
                    ee:85:39:81:63:46:e8:8b:e3:6a:74:5d:1b:75:e8:
                    d5:ab:39:90:e7:d8:50:be:29:b4:6d:40:52:fe:95:
                    82:bc:37:9f:ff:73:52:8e:76:9b:b5:1e:4c:33:0b:
                    5a:bf:41:2a:8c:a5:64:d3:e7:1e:95:a7:a8:57:d4:
                    25:cc:59:a5:25:bc:09:32:f6:7b:82:70:47:86:a4:
                    e4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A4:75:85:F9:95:9F:8C:7D:3B:4D:FC:DF:8D:0A:CA:0D:3E:EA:9B
            X509v3 Authority Key Identifier:
                keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:50:71:90:b7:eb:b7:bf:72:b2:e5:2c:d8:c0:0a:1b:d7:
         d7:db:3f:c3:f0:a5:2b:0a:2e:cf:12:3e:5f:04:79:f0:2e:7e:
         8c:6c:8e:e8:94:e9:a4:88:c9:b6:77:a5:11:4e:74:c3:15:b1:
         e7:c6:c3:bc:1f:0d:fc:3a:48:14:15:76:20:df:0a:64:31:bf:
         ed:9a:7f:dd:39:2b:1c:46:ec:4c:a6:0b:13:4a:e6:5c:00:cc:
         68:00:aa:57:c2:70:3b:37:5b:27:39:c1:e9:cc:09:13:f7:f8:
         20:a2:a1:4e:e5:61:0a:62:4e:32:c0:a2:12:6c:0c:46:ee:09:
         b2:cc:c7:ec:9a:04:95:7c:a6:39:8a:5b:2d:ec:f9:b2:a8:4a:
         6b:35:a3:8b:44:c0:5a:d5:24:65:9d:65:9a:05:89:88:1d:1d:
         98:23:ac:b0:bd:57:d9:28:49:32:e3:fe:57:0b:83:16:01:ed:
         c8:9b:e0:14:b9:05:18:6c:4b:d4:96:e8:29:8a:28:67:ee:65:
         a0:9e:e4:0b:da:20:0c:6c:a1:73:eb:38:49:1c:bc:38:3e:b4:
         11:2c:70:33:83:a3:26:90:0c:73:cd:0a:64:c0:74:aa:46:45:
         b2:c6:72:8f:fb:ae:d1:0d:07:e1:eb:70:dc:0a:e4:23:56:b6:
         1d:8b:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:34 2025 by rpki-client