Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
File:                     WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json)
Hash identifier:          qp+kbO0AH/TwP/ERPUSfDTebo+9JVhLOuvhEUEWwvgA=
Subject key identifier:   5E:73:27:9F:B0:36:2D:1D:76:F1:4E:9F:25:A2:44:3B:F7:F6:EC:7A
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Certificate issuer:       /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial:       01964DEC7D80F07D4E7EAAB390EF5759C4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 12:01:06 +0000
Manifest this update:     Sat 19 Apr 2025 12:01:06 +0000
Manifest next update:     Sun 20 Apr 2025 12:01:06 +0000
Files and hashes:         1: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (hash: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=)
                          2: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: hDlG+d4FU+NYb5T3iA1CmNVapyAy/WADSBLiB7x70zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:7d:80:f0:7d:4e:7e:aa:b3:90:ef:57:59:c4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
        Validity
            Not Before: Apr 19 12:01:06 2025 GMT
            Not After : Apr 20 12:01:06 2025 GMT
        Subject: CN=5e73279fb0362d1d76f14e9f25a2443bf7f6ec7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:87:fe:e5:5e:84:4f:9b:97:47:bc:8e:af:
                    f3:31:3e:ec:2e:48:d9:24:3c:52:fd:c8:ab:03:fd:
                    ee:88:24:11:af:ff:8f:e7:b2:61:6d:11:9c:e4:e9:
                    ac:8f:96:2f:3a:48:90:28:ad:52:2c:2e:2f:01:9c:
                    11:72:d7:b7:db:ac:3e:ed:43:7b:94:7f:4c:5a:f6:
                    bf:b7:b3:27:ee:d1:3f:18:9d:fa:c5:31:29:44:a4:
                    26:9a:02:42:c9:f0:d4:6c:87:98:36:1d:47:bd:fa:
                    bb:c0:3f:02:e3:1b:59:1b:5c:9f:4f:3e:f5:f6:25:
                    35:ed:72:80:ff:66:fb:a7:19:8b:d8:3f:f3:4c:38:
                    be:f0:f0:8e:59:14:fa:4c:9b:fb:4b:a3:53:53:e7:
                    3c:b2:60:4e:d1:3a:6d:ba:c7:e1:82:6f:91:d5:8a:
                    44:26:d4:d7:dd:44:e0:bc:46:2c:61:3b:d4:43:60:
                    e8:33:23:57:3c:28:fd:7d:6e:af:2f:37:6b:3a:8e:
                    67:e4:45:aa:6e:41:c4:e1:84:25:13:d1:4a:a8:dc:
                    c2:b0:2a:86:cc:93:ee:2c:e0:62:8c:7f:15:46:90:
                    25:1a:69:c2:8b:c8:2b:2f:c1:0b:b3:f4:a6:61:47:
                    f5:2e:d6:95:2c:b0:5c:78:1c:97:e1:7c:15:b3:d0:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:73:27:9F:B0:36:2D:1D:76:F1:4E:9F:25:A2:44:3B:F7:F6:EC:7A
            X509v3 Authority Key Identifier:
                keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:74:87:43:42:f4:9d:c7:5a:c9:f5:d0:11:8c:a5:72:dc:
         83:64:89:bc:e8:6a:66:33:b7:3d:03:9a:85:f2:e1:58:59:39:
         e7:41:00:2c:e5:fa:0c:e0:fa:b2:63:79:d9:ae:53:32:ec:2a:
         70:a5:3b:be:bb:b8:e7:05:ac:56:88:4a:ec:60:8e:e9:83:b1:
         86:da:b7:b1:bb:b9:b3:33:a9:eb:2d:b6:9e:21:c3:7e:06:61:
         3f:d9:7d:dd:ec:ca:5a:cf:15:06:6f:f8:11:6d:1a:d4:bf:db:
         41:e0:0c:e8:47:ab:7a:fd:43:e5:b8:38:3c:8c:3a:0b:1d:27:
         1a:c8:08:99:ad:99:f8:3e:d6:95:ae:fb:75:13:f0:84:e6:7e:
         97:3f:06:54:ed:3a:b9:8e:b2:14:13:ec:bc:53:0e:77:c7:50:
         00:e4:f7:8b:6a:ed:c0:19:6e:25:27:64:86:86:cd:1f:3a:98:
         a9:50:9b:0a:71:40:5f:e9:e6:22:e7:29:12:d0:48:59:0d:d7:
         e2:20:b2:00:60:82:d4:7c:7c:c3:a3:bd:ba:13:8d:0f:7c:5b:
         85:6a:61:67:59:dd:ad:e1:b5:1b:8e:29:17:f3:8e:7a:b5:43:
         4e:6e:1e:94:1c:f7:80:b6:ea:12:7e:10:e0:af:37:1e:40:42:
         a0:c0:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:13 2025 by rpki-client