Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
File:                     WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json)
Hash identifier:          hVoFmUeXVJJOvAjndmjR3T/BuilM3iRH85GX1HfmQlk=
Subject key identifier:   0E:70:F3:F7:66:66:B7:E1:E4:6E:79:47:0C:FA:72:14:88:C1:E7:05
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Certificate issuer:       /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial:       01964C34A13E3DACC7AE0E9C0E9444B65CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
Manifest number:          05A2
Signing time:             Sat 19 Apr 2025 04:00:39 +0000
Manifest this update:     Sat 19 Apr 2025 04:00:39 +0000
Manifest next update:     Sun 20 Apr 2025 04:00:39 +0000
Files and hashes:         1: K0PX8tAD77x55aOB4lGVD3Te4QM.roa (hash: UD1F2ZNVLCoZ48JUjpO0xFjx7uROUMFlQ4rjADgkheg=)
                          2: UJ3xF6-J16Fa8k3eaGL7GyfbMsM.roa (hash: +l2bpUdZY142qcpXeo96uEK0+oOCrNS16D7kEOarOhI=)
                          3: UwiSYqu907lovqaGg4NrpGn_w58.roa (hash: WU+BWR/d5PWzJ2OdHrznAwNZSWnmyCygcFXxl/zP2K4=)
                          4: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: WLnbrr7KFbJom9uACdt27aslr0kuZSBgaro2p9MKrxY=)
                          5: XExZy3xfPa1cjEoGNup9lp-X8-0.roa (hash: 2iOx91qP9fUpsmi2JFq2RvxeQJsiSVTDFwUu6ATpiUM=)
                          6: qTVlhtMwwYSmdU4s4aw8LX1HUQk.roa (hash: 1OoG2vJGoOMZAkIiJXpkJz8avwOwz/vrOZSTQO2Gud8=)
                          7: sonKZ6RLZeWxN59PkZsMbIW_dgQ.roa (hash: U+YmmIIsbPg2a19Hq1tCZyulxVqTtZ1DrsXtoHgjVqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:34:a1:3e:3d:ac:c7:ae:0e:9c:0e:94:44:b6:5c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
        Validity
            Not Before: Apr 19 04:00:39 2025 GMT
            Not After : Apr 20 04:00:39 2025 GMT
        Subject: CN=0e70f3f76666b7e1e46e79470cfa721488c1e705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:7e:65:b8:3a:d7:7f:74:a0:d8:83:66:a1:
                    18:18:96:c8:87:c4:09:80:a3:5e:4f:a5:43:92:1d:
                    3c:87:21:b0:6d:66:77:29:ed:43:97:6d:55:d5:5f:
                    32:d7:1f:04:23:2d:47:d8:bf:0f:3a:cf:d8:20:31:
                    09:5c:73:53:e9:3c:fb:6a:cc:17:15:2d:18:79:1d:
                    fb:b3:48:ff:2f:cb:7c:ba:f7:95:f3:40:3b:c1:7c:
                    5b:f9:2b:1d:dc:a8:78:a4:ec:bb:e7:2a:5c:fa:b9:
                    16:19:75:d4:ac:35:8f:3d:aa:14:64:9c:e6:d7:77:
                    b9:73:a7:d9:25:2c:95:d0:77:eb:74:2b:58:5c:73:
                    df:5a:94:25:ee:ef:34:52:e1:d3:c6:3f:ca:7c:9b:
                    7e:04:41:64:7c:e7:0b:19:3f:23:0b:a7:99:d5:4a:
                    7d:33:12:7f:3e:3d:72:08:d1:f9:8f:65:c2:f3:51:
                    74:7f:bb:bb:68:b4:33:2b:97:2d:42:bf:d9:e2:d7:
                    7e:64:70:6d:7c:bf:df:96:7a:2a:11:e2:94:6f:15:
                    fe:2c:10:e2:04:3e:48:d6:30:14:41:81:94:95:af:
                    5f:96:ae:16:7c:aa:fc:09:45:27:cb:d3:8d:69:d7:
                    ba:4e:09:70:7e:3e:62:25:33:6e:b3:f2:10:23:5b:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:70:F3:F7:66:66:B7:E1:E4:6E:79:47:0C:FA:72:14:88:C1:E7:05
            X509v3 Authority Key Identifier:
                keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:37:f6:74:27:4b:c3:69:44:21:49:f3:75:e9:37:a5:56:67:
         2c:aa:45:90:11:dc:77:c2:c2:a7:6d:54:70:b1:92:d8:83:a3:
         62:04:3a:78:bc:bb:76:82:36:87:eb:c3:c9:92:0d:66:5a:15:
         0c:e2:00:a2:20:e7:db:85:9d:1f:fc:82:31:ad:07:49:4f:62:
         b9:04:88:8f:ae:62:57:2b:2a:ca:15:22:35:2a:d3:10:ba:3e:
         0e:c1:58:89:17:ee:fe:94:b3:7b:e3:0c:7e:51:a9:7d:10:4a:
         23:a7:ac:84:ff:93:97:4a:dc:81:51:d9:a4:19:9e:36:c2:b3:
         b3:6c:54:fe:df:00:dd:3b:5e:5a:8b:cc:ef:c7:a5:83:e9:ba:
         38:b6:d3:9e:ce:ee:d9:8f:ba:2e:63:4e:09:6b:6e:5d:5f:45:
         ed:62:c8:ec:c4:06:66:31:c3:28:38:25:bd:01:bb:45:fb:7a:
         ee:07:34:2f:8e:ae:3e:ee:e4:62:64:dc:8b:a3:5c:00:75:07:
         68:0c:32:2e:87:b1:fb:6b:b5:46:d5:b4:d2:0e:4d:1c:43:cd:
         bc:7b:72:81:f0:15:64:96:6a:f2:e7:81:56:3a:b2:c7:ea:ab:
         17:58:8e:e2:ba:83:84:b8:8c:42:8a:6f:7b:c4:9b:c9:2d:29:
         66:3d:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:51 2025 by rpki-client