Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          e41Rm0nq8sM6NoRCLqf6GILdxnNm0bwpC6KkNndwn0g=
Subject key identifier:   0E:4D:DA:71:4E:A8:01:DB:15:53:C0:4A:79:39:4D:50:64:18:F4:D4
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       01962AF29CB33C4009A0941B806AB5FB9458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          0554
Signing time:             Sat 12 Apr 2025 17:01:04 +0000
Manifest this update:     Sat 12 Apr 2025 17:01:04 +0000
Manifest next update:     Sun 13 Apr 2025 17:01:04 +0000
Files and hashes:         1: 4utseU6Q3hlSlIBKbVfQJ2ZOYjU.roa (hash: rTdAUHdl5wiC79NgKtzrfB/hwpa04O/1YKALBUA/O1M=)
                          2: 6q2XvWJDNyZHxwhNEFaixSgzMO0.roa (hash: SodjqclNB5A2qS0eo5CdNTzrUFgVRNH441CvrbgX6vE=)
                          3: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: /37v+f+Rl/cfVAMYh3W5z3YZq39n6tRGbjwusmuKJmI=)
                          4: g1RkWavRHDLIMciTbQ2oPMtXKtc.roa (hash: +9+QsepfCqVXx8S9YRw8NNKDXd346R/NXG9imOdNPxY=)
                          5: vrfv77jJYuxmSZEVkmyNCntD1Fk.roa (hash: xlpnBzbGV6oY57oPpaVnACDRZObeSx9+3WvllQ26oOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2a:f2:9c:b3:3c:40:09:a0:94:1b:80:6a:b5:fb:94:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Apr 12 17:01:04 2025 GMT
            Not After : Apr 13 17:01:04 2025 GMT
        Subject: CN=0e4dda714ea801db1553c04a79394d506418f4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:48:09:3f:9c:dc:ce:80:ee:01:7c:82:42:d2:
                    f1:95:ff:eb:26:1b:37:63:0d:60:5c:b0:cf:d1:b5:
                    d1:3a:0a:3b:39:3d:80:22:64:0c:da:73:04:c1:35:
                    83:ba:34:15:23:c1:af:7f:ae:04:0d:49:31:e8:b4:
                    af:5f:39:ae:1b:fc:39:3e:22:6f:35:88:57:b0:bc:
                    fc:79:60:e2:61:5a:6e:55:70:0c:1a:98:26:ae:d9:
                    31:df:12:81:bf:5d:a5:a2:94:78:76:ec:93:38:59:
                    ac:03:c9:fa:47:a1:83:ad:6d:6d:11:8e:05:1d:d1:
                    53:85:aa:25:09:4c:15:69:0f:79:e8:c9:50:8a:1b:
                    92:1a:09:88:fe:43:11:e8:49:1c:7c:e9:14:cc:26:
                    8e:85:1a:ec:1e:ad:22:1b:fb:8e:a8:5c:da:13:df:
                    25:48:62:8a:09:f5:c1:10:20:cc:4f:a0:d4:7a:57:
                    fe:ea:27:be:76:74:70:46:c5:5e:4e:ee:fd:87:a2:
                    00:33:c9:dd:64:b2:37:18:68:6e:1d:4a:02:01:f4:
                    e9:fb:ee:b1:5f:d5:8f:9a:0d:bf:98:95:85:3b:dd:
                    a3:7c:4c:20:2d:29:e7:8b:8b:09:7d:d6:bc:73:78:
                    ba:10:6e:a1:3f:6c:c0:76:f9:6a:60:f7:9f:32:43:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4D:DA:71:4E:A8:01:DB:15:53:C0:4A:79:39:4D:50:64:18:F4:D4
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:aa:3f:91:e2:01:ae:7c:00:62:6d:4d:e5:c0:fc:20:96:15:
         c9:d6:ec:95:b1:5b:1d:6d:3d:b9:5e:6f:a0:ec:d6:b2:56:91:
         de:83:e5:ca:f5:d0:4f:b3:89:db:f8:59:de:af:a2:35:1a:ed:
         9c:02:3f:40:7f:96:e4:1b:8a:7e:e1:98:d6:82:c3:82:10:78:
         04:e8:d9:67:bc:91:31:6f:29:a5:21:de:aa:ab:9f:c5:11:68:
         b6:a2:38:e0:f1:a4:5c:15:fd:d3:1c:f6:36:59:c2:ef:83:ae:
         3d:1f:cb:30:75:e5:70:e1:3b:37:ba:de:c6:00:94:d7:44:71:
         78:97:00:c8:a9:03:b5:ee:90:7a:8a:c2:fd:dd:c4:d1:ce:dd:
         eb:86:2d:a7:81:ba:79:a6:c7:45:48:b2:7d:d5:52:05:53:1a:
         06:d8:f5:eb:54:d1:f9:63:94:ee:17:b6:a7:2e:e6:57:55:34:
         15:1c:53:01:73:53:12:97:c2:23:90:4e:20:82:e6:63:95:8a:
         2e:cd:a4:f3:52:91:49:6f:73:da:de:94:35:45:0b:3f:b0:0f:
         4c:92:bd:70:96:d7:59:76:3c:c6:54:9e:5b:f8:8f:f4:4d:dc:
         87:c1:d3:f6:05:b8:0c:96:77:bc:11:fe:65:e3:ba:f0:fa:32:
         74:2f:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:23:46 2025 by rpki-client