Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
File:                     wHgEdmsjU5hblxgIi1xnngw-pn8.mft (raw, json)
Hash identifier:          dNCYNUiBoDFp0nBwzKL69II94awF0NjD5v3Sqfufuyk=
Subject key identifier:   C2:EA:74:1C:4F:DF:E3:BF:F4:B7:EC:73:93:09:77:E7:6E:21:C3:9C
Authority key identifier: C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
Certificate issuer:       /CN=c07804766b2353985b9718088b5c679e0c3ea67f
Certificate serial:       0196451FE994922526CC839E14B9E85E7F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
Manifest number:          14F6
Signing time:             Thu 17 Apr 2025 19:00:41 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:41 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:41 +0000
Files and hashes:         1: JQloxPoQ9afiJp-IoXzHvRWMpm4.roa (hash: J8Wxq2Z9UXMMHjhsUvukCz7EJtE55wrWEedjgrBy+C4=)
                          2: wHgEdmsjU5hblxgIi1xnngw-pn8.crl (hash: wOTuMXqfQqCly4647/ANU4wENZG/Ypkn0WUOLPcgizA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 18:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:e9:94:92:25:26:cc:83:9e:14:b9:e8:5e:7f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07804766b2353985b9718088b5c679e0c3ea67f
        Validity
            Not Before: Apr 17 19:00:41 2025 GMT
            Not After : Apr 18 19:00:41 2025 GMT
        Subject: CN=c2ea741c4fdfe3bff4b7ec73930977e76e21c39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:23:a4:e1:a3:6d:3f:d5:1d:29:ac:23:cb:
                    70:8b:56:28:6c:62:3f:ec:8e:fe:ac:57:b3:08:98:
                    6b:c8:1c:30:d3:10:7e:38:9f:d9:97:dc:0d:64:2c:
                    c4:ee:a2:c2:bf:ce:ab:8c:c6:25:40:1a:12:67:dc:
                    20:3a:5d:11:4d:ca:28:10:87:90:18:d1:70:a7:ef:
                    ee:a6:e1:7b:4f:bc:3c:6c:41:f9:0d:cb:7f:6b:24:
                    a5:90:62:12:36:45:97:19:d2:24:e6:e0:7d:6b:12:
                    ec:89:14:f3:8b:b6:61:b7:e9:19:7f:9d:de:bd:8f:
                    1d:3f:e8:c0:e7:68:5e:94:32:39:03:39:8a:81:ad:
                    23:73:a1:14:81:f2:76:57:77:ea:f7:c9:77:62:1b:
                    b9:d0:2b:f7:38:98:bc:a5:35:17:41:48:bf:a7:e3:
                    96:eb:9c:ef:4d:b0:01:53:e8:99:0e:ea:55:65:a7:
                    bb:49:bf:8c:00:00:04:1d:d3:92:2a:7d:5f:e6:94:
                    14:d4:c4:3c:bf:a1:f9:a2:b9:8f:db:39:b3:9a:26:
                    30:ad:63:cf:9d:a3:70:74:4d:54:f4:4e:fc:ab:e8:
                    fc:7f:96:c7:51:bb:b8:66:8b:84:5d:fa:60:52:ff:
                    86:fa:99:e9:b6:cc:e1:ea:18:fd:e3:53:b6:ef:24:
                    04:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:74:1C:4F:DF:E3:BF:F4:B7:EC:73:93:09:77:E7:6E:21:C3:9C
            X509v3 Authority Key Identifier:
                keyid:C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:16:6e:33:45:8b:61:4d:d6:83:f6:26:45:2c:ff:d0:9b:33:
         b8:cc:38:70:93:62:0a:dc:9d:ed:c4:e6:9b:18:a2:fc:ca:5d:
         04:05:21:5f:3d:db:87:42:0a:81:7f:28:a7:49:10:23:dd:d6:
         ad:12:3c:52:ca:c8:bc:d3:dd:90:b4:f0:e3:ac:3b:e7:fd:01:
         18:4a:d7:4f:93:06:c1:99:22:df:e5:55:0c:ab:65:9e:97:5d:
         d3:3a:91:23:3b:1a:6b:bc:52:d0:58:8f:0c:e1:37:8e:60:0f:
         46:12:b0:ce:fe:0d:fc:1b:d9:20:2b:82:c8:10:06:06:0c:d6:
         43:ae:97:f3:78:d9:cd:86:e1:62:7d:9d:a9:3a:07:ce:14:f5:
         e5:d0:4a:9e:3a:ca:2c:cc:18:dd:e3:75:3e:4a:a7:c1:79:10:
         7e:6d:b8:95:78:f5:95:dd:24:6a:a0:e5:6d:04:fb:e2:69:22:
         30:a1:e8:b4:cb:bd:7b:b9:27:d8:0d:9d:a6:1f:87:58:1a:b1:
         e7:0c:1c:72:7d:ab:ae:7a:c4:b4:28:34:a4:f8:86:4e:ed:91:
         dd:89:f5:db:55:c5:34:70:1e:7c:98:ca:65:84:b0:ce:41:f0:
         73:11:6b:34:83:9f:48:c0:ab:e5:b2:41:f8:a9:dc:ca:8b:5a:
         0d:e1:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:27:59 2025 by rpki-client