Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File:                     wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier:          /P5uMU8mgccrz6S5jDG/PkSbEZX8x25k5N3+w5jktCI=
Subject key identifier:   8C:B5:AC:1F:02:4A:9F:20:AB:5E:20:AC:42:A2:F5:24:6D:90:7B:9A
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer:       /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial:       0196451FAF3C52E414D2FCA4A6349E1BC6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number:          07FB
Signing time:             Thu 17 Apr 2025 19:00:26 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:26 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:26 +0000
Files and hashes:         1: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: 1ZBAhNMXegkQ1N9fmxWsDmLZfkLxgzN8dy4k2nUH3+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:af:3c:52:e4:14:d2:fc:a4:a6:34:9e:1b:c6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
        Validity
            Not Before: Apr 17 19:00:26 2025 GMT
            Not After : Apr 18 19:00:26 2025 GMT
        Subject: CN=8cb5ac1f024a9f20ab5e20ac42a2f5246d907b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:17:8b:52:9d:12:a1:ee:0f:f8:23:7a:75:9a:
                    3f:35:74:b1:6d:57:ee:fc:fa:ad:3a:c6:56:91:ee:
                    b0:35:2b:c1:6d:cb:07:98:03:a9:9c:d5:1f:be:3a:
                    b3:98:63:3f:b9:4c:f2:ab:96:6a:c4:42:b5:71:3a:
                    e3:c0:39:bb:54:a8:63:a5:9a:16:ec:0e:3d:56:e9:
                    4e:1a:17:5c:0a:9c:2a:be:35:9f:3d:11:ac:7b:73:
                    e6:65:61:9c:7d:1c:2b:68:1c:5e:86:40:0f:72:62:
                    20:ff:3d:63:c6:7a:fa:55:96:de:b9:0f:de:7e:ae:
                    c9:65:4d:50:61:f3:32:00:67:7a:2c:c1:5d:31:bd:
                    c2:62:79:dc:76:9e:fd:cb:93:c7:7d:7e:2a:25:89:
                    3e:e4:29:90:0a:ed:ca:3f:53:e7:12:1a:1e:12:79:
                    2f:15:ee:6c:80:1c:77:9f:56:38:bc:cf:b5:58:ec:
                    e9:3f:4d:2b:28:df:fc:f1:7c:ad:b2:6e:65:08:02:
                    ea:f8:d3:f9:f9:53:36:f5:6a:43:a9:e9:8a:1a:c2:
                    8e:2e:0b:9a:27:03:b8:1a:44:ea:92:77:af:ef:a7:
                    aa:2b:89:3d:b2:08:48:9d:a2:8a:33:36:c7:6f:27:
                    38:4b:7a:67:48:e7:af:cd:31:05:dc:8d:69:be:bf:
                    49:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B5:AC:1F:02:4A:9F:20:AB:5E:20:AC:42:A2:F5:24:6D:90:7B:9A
            X509v3 Authority Key Identifier:
                keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ee:bc:1b:8a:15:4b:32:c5:25:38:49:ea:61:e5:6b:4f:46:
         cf:2f:fe:11:b0:d5:4c:ce:32:98:5e:50:c7:c1:35:4f:14:5d:
         49:c0:75:68:44:5e:77:cf:28:46:e4:d2:00:cd:60:77:30:da:
         aa:ca:c3:49:5a:ca:dd:43:5e:6e:48:63:df:20:c7:ad:9a:06:
         97:d3:0f:49:5f:bf:c3:18:2c:9f:58:e2:00:d1:88:da:9b:3e:
         46:92:c8:38:47:2e:20:53:d3:1a:e0:dd:02:1a:7d:d8:26:1e:
         a3:27:4f:f0:cb:e9:69:90:2d:31:63:2e:47:24:61:05:55:41:
         bf:76:32:82:8e:a5:a2:dc:22:3d:34:3d:82:d1:04:d7:31:d2:
         6a:4a:93:b7:f9:be:ea:f4:c4:75:28:cc:ac:cd:84:35:39:8d:
         d1:c8:ee:71:c7:75:ed:f4:e2:c0:00:f0:7a:bf:17:c9:b4:df:
         c0:a1:04:c9:6a:52:75:bd:b7:0d:b4:d7:ea:8d:42:bd:29:c7:
         92:92:6a:0b:93:e8:bb:45:28:dd:6d:6a:fb:ee:60:8e:7f:00:
         da:51:f4:bc:b8:13:af:10:08:17:82:77:dc:69:83:26:0e:93:
         42:bd:b3:04:3c:0d:92:92:69:5f:28:56:29:16:b3:f6:fb:68:
         ae:06:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:35:25 2025 by rpki-client