Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          VgsWxjKjvhXBN6lBkBycZauTW+tuL9DlsT5TP6da75U=
Subject key identifier:   D6:AF:D1:EC:40:62:BE:F2:B5:46:98:D4:0F:56:38:15:83:42:14:98
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       0196466944A236444C525D1117B77C701A52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          1502
Signing time:             Fri 18 Apr 2025 01:00:26 +0000
Manifest this update:     Fri 18 Apr 2025 01:00:26 +0000
Manifest next update:     Sat 19 Apr 2025 01:00:26 +0000
Files and hashes:         1: 1wrmzG8kmHTEu12xzRLuu8ra80I.roa (hash: 9m8Zy/qea1cvB7wZZ6FL+4apCQU2vA1vbBwqJEE2WcE=)
                          2: 5GkbsIVHSNjZKlhRMzKNoaujuQI.roa (hash: ZErUA0WOYmD80Q/QFMsB/idG5rJkQAo7XEeRzYdULMM=)
                          3: T-zwd3E8gbu-MxAIPetL9QmvKh0.roa (hash: 092w0Bm8URvR9yowFyiwo856iRLSuK3dnjktNqsPJK0=)
                          4: d_5rCXad48L982aV_sE5OcfISCI.roa (hash: 90ZGQ2cxG5cZFWpNWTKz60Bz+Hn3IddK6g3bDQGxBUA=)
                          5: ulqVIFVosPowykxTM5-oqMzd4Gw.roa (hash: GyWK8Gwo9Zktpx8zDLY/DbSmWK69tqfb6z/bHNQk+aU=)
                          6: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: dt+z/KH+rWg4oD6DPCoVl/YDOhsbfX9HmskiX95RUJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:69:44:a2:36:44:4c:52:5d:11:17:b7:7c:70:1a:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Apr 18 01:00:26 2025 GMT
            Not After : Apr 19 01:00:26 2025 GMT
        Subject: CN=d6afd1ec4062bef2b54698d40f56381583421498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:2a:1b:61:e0:e8:d9:4b:ad:44:47:ab:c6:
                    48:a0:f0:78:ea:62:2c:f7:83:a2:78:ac:2f:06:3e:
                    d5:6b:80:76:05:c9:4f:23:11:eb:3e:40:80:e7:d6:
                    8d:18:5a:e8:b7:74:f4:cb:48:c0:8b:84:39:45:68:
                    d6:c3:06:ee:33:fc:bb:52:36:55:47:ab:74:3f:b3:
                    94:dc:24:15:c3:30:35:be:55:2d:d1:bd:57:c1:e0:
                    64:db:b1:8d:65:15:75:10:9d:c3:0f:4a:86:42:c9:
                    31:9d:e7:b5:25:50:f9:12:60:a9:02:d8:35:d3:d8:
                    38:db:e5:7d:f5:5a:ec:d5:cf:e4:30:32:86:96:36:
                    8b:1f:df:dc:1b:c0:88:2e:39:76:d4:5b:e5:43:e9:
                    78:2a:c0:50:30:df:c2:48:04:32:e4:83:84:40:7e:
                    78:cd:14:bd:e9:b0:be:be:67:74:0b:8a:95:f1:1a:
                    17:99:18:68:ec:d7:cd:02:b1:b9:4f:f1:f1:2d:ec:
                    76:8b:21:63:56:4b:e1:cf:c5:d2:80:ea:a0:5f:48:
                    87:56:6b:39:56:eb:0f:fa:85:e3:d3:e4:aa:91:b6:
                    3d:4d:7b:89:1a:b5:76:50:83:14:bd:a0:25:18:7c:
                    0e:b8:27:86:34:83:b3:7a:b8:ed:c6:8f:f4:b4:8b:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AF:D1:EC:40:62:BE:F2:B5:46:98:D4:0F:56:38:15:83:42:14:98
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:bd:7c:60:c8:c0:bc:9d:19:2c:41:59:3d:cb:ac:72:20:
         a1:a3:67:87:ef:d8:d8:66:68:0f:0f:96:73:5f:5c:d7:11:6d:
         15:30:db:03:b2:5d:98:9d:d8:ec:15:54:01:29:47:e7:ab:dc:
         9f:0b:4d:cf:da:99:37:fb:0a:6d:a2:aa:ce:5b:ec:30:14:eb:
         2b:b0:16:a5:63:1d:23:e6:85:6d:b7:ea:ec:9a:b1:65:da:61:
         f0:64:72:d2:7f:d7:68:51:80:86:ad:19:51:41:cb:01:65:f1:
         e9:e8:7d:0d:2b:48:de:d5:c7:1a:20:01:62:92:0e:04:b5:6b:
         2b:7c:80:b6:08:76:35:38:d2:13:0e:c8:05:b4:7f:6b:04:d4:
         f4:84:29:9f:f6:87:6b:e5:43:30:92:66:a0:ac:d9:fd:e4:a6:
         88:19:99:db:f3:05:84:f0:67:8d:c9:69:91:46:f7:35:9b:18:
         64:09:8a:96:57:dd:76:a4:4d:cf:d9:86:bd:c7:0d:5a:cc:ac:
         38:2b:46:3b:be:80:65:b4:77:47:d3:b4:93:69:7e:ee:3d:ca:
         e8:3b:3c:6f:23:25:e4:36:4d:eb:de:90:aa:6a:d6:1d:58:00:
         93:ca:cf:18:c6:bd:d8:01:0f:2e:a7:7a:6b:d0:44:2a:a4:a5:
         98:7d:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:05:20 2025 by rpki-client