Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File:                     ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier:          gh6aY7UR8Qgv3XgviIYPqqbHed8970svRJz/Z9DRlLk=
Subject key identifier:   FF:26:A1:A6:09:C2:2C:B3:85:A2:D2:CB:EF:51:1C:1D:1A:98:1D:E9
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer:       /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial:       0196496A42701A349DD957A9CB096C528424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number:          0F7C
Signing time:             Fri 18 Apr 2025 15:00:22 +0000
Manifest this update:     Fri 18 Apr 2025 15:00:22 +0000
Manifest next update:     Sat 19 Apr 2025 15:00:22 +0000
Files and hashes:         1: bXwup2eDRWJRx9GTrYPVFoErhfk.roa (hash: UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=)
                          2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: wharo9k3QwklNnv7JoJ4675krGHNANfH3qyDXKvXDDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:6a:42:70:1a:34:9d:d9:57:a9:cb:09:6c:52:84:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
        Validity
            Not Before: Apr 18 15:00:22 2025 GMT
            Not After : Apr 19 15:00:22 2025 GMT
        Subject: CN=ff26a1a609c22cb385a2d2cbef511c1d1a981de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:c3:f6:02:00:a0:85:4b:64:84:77:07:7b:
                    51:f8:99:f4:df:50:37:77:b8:80:21:a5:b5:7f:73:
                    c2:57:78:9b:49:59:fd:43:40:66:a4:31:60:47:0e:
                    7b:4c:b7:75:71:32:8d:7f:6b:5d:aa:5f:f8:43:b8:
                    c7:19:67:e0:0e:b1:98:c3:dc:d4:5f:0c:1d:66:27:
                    c5:43:fe:28:a3:64:bf:7f:ee:c4:cf:cb:ee:34:ca:
                    6c:0b:6d:ed:ac:0e:a6:4a:13:a0:d1:b2:55:1a:00:
                    9c:54:f7:d3:fc:a6:e0:7e:5a:21:bb:c3:1f:47:49:
                    a9:8d:ef:fe:8c:56:49:e4:2f:ef:55:b0:f8:e6:99:
                    30:ba:98:a1:b9:07:63:ee:71:42:bd:89:67:ac:69:
                    76:45:bf:8a:1a:f6:c5:8d:9b:11:cb:43:a6:11:fa:
                    cd:88:96:7e:68:80:bb:dd:39:30:14:38:cd:d8:3d:
                    2a:4c:ec:29:61:96:21:2e:e0:12:fa:3d:d9:c8:89:
                    bb:ce:69:a0:eb:f7:e5:60:d7:7f:3c:30:f6:68:e3:
                    fc:51:76:24:a1:1b:a6:6f:5f:01:a1:97:a3:a6:0f:
                    67:fa:85:cf:7a:65:56:2a:de:b0:a7:27:5f:0e:77:
                    70:2c:d9:85:8e:37:cf:7a:4b:a5:e3:f5:41:63:59:
                    bc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:26:A1:A6:09:C2:2C:B3:85:A2:D2:CB:EF:51:1C:1D:1A:98:1D:E9
            X509v3 Authority Key Identifier:
                keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f2:5d:29:b6:8e:14:8a:6c:09:c3:00:6b:64:99:df:53:37:
         49:e2:29:8c:c5:f8:35:9d:48:5c:8a:a7:e7:69:34:43:fd:e9:
         03:ab:cb:75:ad:dc:ac:30:26:dc:8d:79:db:c3:ae:da:7c:57:
         0a:17:16:6d:ce:95:20:a3:97:15:35:ec:ea:f2:8e:c4:8d:85:
         f1:bb:0b:26:02:04:fe:6f:0b:55:b2:a7:a5:a7:8c:15:0e:be:
         40:68:94:95:66:8d:35:0b:1b:d7:f6:44:10:04:40:9f:f5:73:
         f8:f0:f2:25:ea:cc:48:f8:af:7d:6f:46:62:e9:f5:70:cb:2b:
         9f:be:7d:e5:a9:e5:37:1e:0d:f7:7c:3a:fa:64:b9:50:41:9b:
         dc:ac:7f:9e:a8:50:0a:af:42:f7:67:15:45:55:df:09:aa:38:
         d2:b2:4e:97:f7:5d:dd:a7:3b:58:26:2b:fb:40:4b:c1:98:bb:
         0c:0a:7a:8d:46:a6:57:9d:69:8a:8e:a1:83:40:bc:fe:90:bf:
         fc:91:6a:d1:32:26:7b:26:9b:cc:d7:e5:a3:bc:83:b6:f0:ff:
         93:2c:bf:c3:21:9b:32:26:6d:04:63:da:98:09:2d:0e:ab:ff:
         e3:f9:10:27:16:dc:7e:95:fc:5a:35:b0:5a:d5:64:93:3b:e7:
         c0:05:16:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:06:35 2025 by rpki-client