Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File:                     Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier:          7R8nQ7kUbP0y8V6konXno+ubFIlnX5EQut1LfC3KnrQ=
Subject key identifier:   6B:31:7A:3A:EA:5B:4F:28:E9:05:14:89:F9:EE:47:EC:63:54:FD:C5
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer:       /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial:       0195797E1B88854B12F0FB90B5E8850CCBF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number:          08CD
Signing time:             Sun 09 Mar 2025 06:01:02 +0000
Manifest this update:     Sun 09 Mar 2025 06:01:02 +0000
Manifest next update:     Mon 10 Mar 2025 06:01:02 +0000
Files and hashes:         1: QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa (hash: VNqFUdRBsRfrCU4DQ7mXN2LJBOfMOJgZg+HVbNE534A=)
                          2: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: LfiCfLDm7tLuke9WTILmRqIrHaIC5HSZQTuBLandpms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:79:7e:1b:88:85:4b:12:f0:fb:90:b5:e8:85:0c:cb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
        Validity
            Not Before: Mar  9 06:01:02 2025 GMT
            Not After : Mar 10 06:01:02 2025 GMT
        Subject: CN=6b317a3aea5b4f28e9051489f9ee47ec6354fdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:3b:7e:99:7d:a4:2c:4b:18:0d:07:2e:c0:
                    d3:0c:54:ce:cc:69:0d:e6:75:26:9d:8c:45:36:3a:
                    84:00:0c:52:d8:8b:4d:52:65:b5:94:6c:d2:33:1a:
                    a3:2d:3d:a6:00:a5:67:0b:33:eb:4e:87:ee:b5:84:
                    c2:85:4b:82:9a:9a:4d:86:9a:53:31:20:7d:f5:59:
                    8a:0f:d9:64:1d:6b:da:c9:50:9a:9e:03:76:25:1a:
                    2b:e2:7a:d4:73:d5:53:09:f3:52:a5:2c:90:81:99:
                    a6:5d:7a:6e:7c:c8:1b:35:3f:f2:03:5e:3f:66:07:
                    ab:fb:7c:56:17:ca:8f:08:45:cf:25:3f:aa:dd:fc:
                    19:9a:c6:10:04:50:a3:40:1f:f8:9b:ca:4f:50:13:
                    51:97:d5:e2:c2:47:ce:52:1e:9f:90:f1:c8:f0:31:
                    69:02:05:e2:ca:b4:dd:6f:54:ca:2f:c8:89:1e:7d:
                    89:50:da:6a:30:83:22:bb:04:af:07:d8:17:0d:85:
                    74:38:34:2d:f3:b3:97:0d:64:de:ab:b0:c0:29:79:
                    01:75:a1:d1:1c:1d:31:ec:89:36:1a:14:da:47:c1:
                    38:e7:0f:98:8d:9e:a0:00:54:a3:1b:b4:42:79:e6:
                    85:6f:86:3f:db:8e:0e:b4:7d:12:be:b4:9c:6d:c4:
                    ef:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:31:7A:3A:EA:5B:4F:28:E9:05:14:89:F9:EE:47:EC:63:54:FD:C5
            X509v3 Authority Key Identifier:
                keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:33:b7:be:9d:8c:db:fd:21:a7:15:30:2e:87:d2:52:a4:89:
         d8:48:d6:2f:b0:c8:93:5a:f9:90:a8:58:b5:13:9d:b4:de:b1:
         e2:9c:56:3d:81:7b:84:ef:61:00:3e:fd:f8:20:28:5f:d3:54:
         64:90:15:a1:54:d3:de:cd:d0:19:41:a0:6f:c3:9b:c5:b3:15:
         6b:1e:9d:f8:df:86:4a:a0:39:22:f1:50:03:b3:60:af:8a:ca:
         01:1c:d0:32:c8:46:68:58:b8:2c:37:f8:c7:d0:0f:2c:cf:72:
         77:62:6b:89:10:97:ed:82:30:d8:fc:e4:38:18:e8:3f:01:d4:
         0c:aa:5c:69:5d:dc:e4:fa:57:ae:d9:dc:e5:74:18:ee:f0:c9:
         c4:54:de:e5:58:ff:36:22:d8:b3:eb:c2:9e:31:08:f5:7c:93:
         0e:4a:21:25:4f:c9:80:73:a9:84:c7:e3:f8:3f:74:75:e2:5b:
         37:01:aa:51:27:d8:9f:e4:33:4a:fe:11:58:78:02:29:77:28:
         14:3d:57:2d:d5:41:36:8f:dd:42:4b:3f:5f:13:1c:c1:4f:98:
         64:ba:00:b9:b9:e9:e9:7d:f6:ba:46:d6:d2:24:c3:8e:d8:02:
         8b:67:57:4e:61:24:49:21:97:b2:92:cd:e3:b9:c3:ee:f8:c3:
         74:a1:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:49:20 2025 by rpki-client