Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
File:                     Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json)
Hash identifier:          T9FulTwWiUQMhWDPMix/3dGni97SQlwRqqzHeLiWKbo=
Subject key identifier:   4D:FB:01:0B:9A:A3:41:1C:55:D7:20:7A:C3:0C:4D:AF:CD:65:A7:7F
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Certificate issuer:       /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial:       01958B16553898F4068CF12D18CD6299B423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
Manifest number:          028B
Signing time:             Wed 12 Mar 2025 16:00:51 +0000
Manifest this update:     Wed 12 Mar 2025 16:00:51 +0000
Manifest next update:     Thu 13 Mar 2025 16:00:51 +0000
Files and hashes:         1: JOSO1JmulK_3UGT4DHh2rfgYfwY.roa (hash: EgfSLon34sQaHSqw1cjg97JzDl/x10iZFo3pqDa2iBE=)
                          2: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: eA3rLRAHsZdhX/Vzg7RdjMvRtUZeIjtb4bw8arHz8z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:55:38:98:f4:06:8c:f1:2d:18:cd:62:99:b4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
        Validity
            Not Before: Mar 12 16:00:51 2025 GMT
            Not After : Mar 13 16:00:51 2025 GMT
        Subject: CN=4dfb010b9aa3411c55d7207ac30c4dafcd65a77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:d7:8b:c2:6f:99:f5:a7:6e:e6:03:ce:64:
                    2d:7f:f8:c5:8a:4d:c5:15:19:77:63:6d:c5:36:82:
                    3e:6c:b7:dd:45:25:d3:d0:62:51:04:61:fb:53:9d:
                    2d:a1:bb:17:be:6a:1e:18:db:4c:90:d8:dd:00:9a:
                    e0:d2:7a:0c:78:96:23:c8:c4:d4:b4:60:4c:1c:33:
                    fa:c3:61:d2:de:80:82:90:ee:fb:3f:2c:50:dd:56:
                    7e:78:f6:54:38:1c:e2:40:44:ec:8a:8d:fb:25:6b:
                    2b:bc:2e:3d:ef:11:bc:85:c3:bd:c0:40:b2:79:e7:
                    e8:e7:b8:f7:6e:c5:a5:d7:67:45:00:29:e1:d6:a0:
                    65:70:15:bb:11:81:b4:1d:88:48:cb:56:e4:c7:9e:
                    c2:47:d5:51:1c:77:ed:2f:9b:ed:01:ff:d9:a0:34:
                    03:e7:cf:5d:fd:75:94:d6:e5:0d:28:7d:c2:0a:74:
                    c8:e4:84:00:5c:df:fb:cc:93:8c:e4:e6:74:e4:80:
                    e2:6a:df:ea:fc:08:9e:d5:cb:4b:be:4e:dd:28:a1:
                    45:3f:32:f2:56:7b:4e:2f:bc:99:d3:90:af:d4:10:
                    30:1f:eb:59:05:a9:a0:44:86:9c:b3:66:32:af:16:
                    82:83:ff:77:56:5e:03:27:e5:8a:21:b8:f6:ec:fa:
                    cd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FB:01:0B:9A:A3:41:1C:55:D7:20:7A:C3:0C:4D:AF:CD:65:A7:7F
            X509v3 Authority Key Identifier:
                keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d4:e7:f4:57:50:12:64:48:c6:a7:ec:f1:ae:af:b0:ae:a2:
         aa:af:55:75:d3:3f:d7:c5:5e:20:5b:96:73:e5:40:8f:94:2d:
         96:c8:d6:e4:b5:6b:4a:af:89:20:20:28:5e:af:93:ae:35:aa:
         04:59:e0:31:b5:18:00:14:19:ed:43:7a:53:3f:55:b8:fa:a6:
         94:48:05:e0:87:1a:1e:fe:e7:c6:96:a9:3b:dc:3f:37:39:9e:
         fe:9d:8e:04:37:75:f5:59:0f:60:56:48:76:d4:7d:78:ec:f2:
         35:89:e8:24:5a:dd:98:bb:be:0b:ac:6f:53:d4:79:99:5d:52:
         8f:04:54:6d:88:9f:20:d2:51:b0:75:92:9e:71:61:80:17:67:
         64:1e:f9:cb:84:84:8f:95:0e:12:41:fc:1f:f3:40:ef:83:ac:
         50:13:2a:d1:00:09:31:ee:f1:06:62:47:7b:80:a4:95:a7:d7:
         84:59:14:ad:da:6b:99:8a:85:09:46:70:c6:f3:8b:5a:98:01:
         3f:f9:af:d5:5f:cb:cc:5e:f8:52:0d:e3:c9:41:55:de:fe:9d:
         fd:d3:be:1b:84:d4:60:51:7e:96:06:1e:52:42:d2:82:50:6f:
         0a:7b:31:f3:b0:3e:23:46:60:3a:f2:d8:0a:05:a6:8e:1c:48:
         0a:a4:bc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:35 2025 by rpki-client