Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File:                     WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier:          sMKOa+I0rX/BQajDBAdSNaTX0NtJRuzcGYV9SEgN7vE=
Subject key identifier:   93:6A:FE:84:AB:4B:31:94:0C:E2:7A:E5:3F:D0:A5:36:D6:0C:FB:E3
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer:       /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial:       019650B60724D8DA67E455CF3A242D9784F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number:          0BA7
Signing time:             Sun 20 Apr 2025 01:00:28 +0000
Manifest this update:     Sun 20 Apr 2025 01:00:28 +0000
Manifest next update:     Mon 21 Apr 2025 01:00:28 +0000
Files and hashes:         1: 3iX2jkkHiD5MWdLtUD1Exzmo13Q.roa (hash: 3QNrKYAXHRyi/BOzLIrAyRHDvtVW/W4+B5tMO6HApyM=)
                          2: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: SQvT6B7uzUO8iV171MJzTQ6n9wi2PQOjvLsdECdTZuM=)
                          3: ula9jfoyo-Oxj4oQTJhGSM2DQ5o.roa (hash: +U/LkfnqXi7jglNA2KgxDFsmoz1cp5+KfODGzHBZoUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:b6:07:24:d8:da:67:e4:55:cf:3a:24:2d:97:84:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
        Validity
            Not Before: Apr 20 01:00:28 2025 GMT
            Not After : Apr 21 01:00:28 2025 GMT
        Subject: CN=936afe84ab4b31940ce27ae53fd0a536d60cfbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5a:ec:4f:0f:5c:42:df:30:2b:71:09:cb:64:
                    e7:34:32:70:12:4e:ab:bd:5b:60:7f:5f:37:d6:f5:
                    fd:8e:c4:6b:31:fd:e5:2e:aa:4d:0c:ea:e2:9c:35:
                    6d:20:43:a8:36:4a:b5:47:bb:f0:ae:ca:aa:09:44:
                    74:b2:a2:2b:10:6c:7b:71:fc:9a:48:23:63:89:32:
                    2e:70:e5:05:34:27:4c:ee:f9:36:2f:4d:3d:e9:6a:
                    cc:c6:7f:87:14:ab:14:b1:ac:c8:5a:dc:0f:1c:9e:
                    d9:6c:36:3f:92:5a:fa:a9:e2:0a:ed:45:b7:a0:68:
                    67:28:9e:51:a4:ec:30:62:56:ac:1b:17:9c:c2:84:
                    40:a9:4a:0d:68:d9:c4:86:a7:eb:32:b0:6d:7c:f5:
                    01:15:4a:bc:70:e4:51:29:52:74:3b:7f:8f:e3:8a:
                    15:cc:b1:2b:8a:eb:51:b7:f5:f9:83:b1:a9:5e:4b:
                    d5:bc:09:a4:38:4f:9c:ec:62:d5:c5:cc:77:cc:49:
                    87:40:23:e5:45:e1:54:07:69:09:b5:9a:95:76:6b:
                    2b:1b:79:ae:6a:af:5a:50:17:d6:7d:73:46:0c:19:
                    2d:f0:2f:bd:74:02:bb:8d:29:49:9d:4f:41:47:2d:
                    41:ea:a3:0d:d3:96:94:f3:96:83:d0:57:b6:73:91:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6A:FE:84:AB:4B:31:94:0C:E2:7A:E5:3F:D0:A5:36:D6:0C:FB:E3
            X509v3 Authority Key Identifier:
                keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:02:d6:00:4f:01:19:65:9a:6f:96:76:d0:85:c7:8c:83:95:
         75:c4:c6:9a:e8:89:53:3d:06:bf:16:3d:d7:ca:a6:86:ad:e7:
         3a:44:8d:ea:08:4a:30:32:3d:56:7a:f1:d9:a9:11:04:16:3e:
         70:e3:11:47:c2:e8:9a:fd:f6:5c:9c:f2:b4:50:d5:5c:23:59:
         e9:62:98:c9:8d:f4:a4:41:de:df:3d:d3:f3:86:05:b6:35:75:
         6f:da:69:e5:6e:21:ce:88:3b:69:11:db:1a:70:d5:8d:60:d0:
         53:08:00:88:fa:f3:7b:53:b1:da:dc:a2:dd:e8:b3:fc:f1:51:
         f0:7b:a1:54:b3:55:b9:95:09:20:d8:be:f3:fc:82:10:df:05:
         a9:8d:2c:f6:30:7b:a8:9e:b3:6f:3e:ed:2a:f8:d8:bb:5b:62:
         4e:e8:6a:ff:95:ac:3f:17:85:df:63:a9:be:ea:0a:d0:7e:32:
         bc:82:c5:69:28:85:d1:f1:b0:c7:2c:4d:0f:22:d5:26:c6:dd:
         7d:56:10:a8:31:ab:08:29:c6:77:2c:0c:92:c3:65:ac:c0:02:
         cb:a2:36:0d:8a:64:45:1f:81:f4:29:7d:ff:95:08:bc:a1:5e:
         0c:be:ea:a5:83:2f:82:c0:6f:ee:51:d7:00:36:10:7b:14:80:
         a7:62:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:18 2025 by rpki-client