Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          S8tHwcj6pz6PyCNDXaaKKH1sXuG3HIgSWTaY0ButenY=
Subject key identifier:   A1:A2:DB:7A:B3:41:22:39:6A:53:F1:C2:AE:13:95:47:52:BE:9D:A6
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       0196BECA621F499675534C4323D9A4990A75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0C90
Signing time:             Sun 11 May 2025 10:00:56 +0000
Manifest this update:     Sun 11 May 2025 10:00:56 +0000
Manifest next update:     Mon 12 May 2025 10:00:56 +0000
Files and hashes:         1: Fuwpc4A-TRfgVPSV8ewciJSWczY.roa (hash: Y0uk9yq3kYnde4ofaqo2ePCwnF8vYGybwjzGM4J+Glo=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: lIo8AxwgG6xF2UoTf34Zk7+qMV/uwBO4EQhrEIqEHuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:ca:62:1f:49:96:75:53:4c:43:23:d9:a4:99:0a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: May 11 10:00:56 2025 GMT
            Not After : May 12 10:00:56 2025 GMT
        Subject: CN=a1a2db7ab34122396a53f1c2ae13954752be9da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:22:49:06:c8:84:a7:e6:28:dc:98:0b:96:dc:
                    31:60:6d:a8:b7:e2:b9:cd:fc:c5:61:d5:c9:ec:1a:
                    50:42:d6:1b:e2:d6:e8:6f:37:e1:1b:28:43:ba:2f:
                    1e:dd:84:18:79:a6:05:0e:5c:3f:5e:b9:ff:b1:64:
                    6a:bf:7a:14:59:cc:82:6b:dd:fa:36:26:cd:a3:62:
                    70:61:de:2b:70:a9:84:df:ce:24:65:8e:b8:42:34:
                    3c:e8:3c:4e:de:3c:a4:9c:c6:5f:c5:93:5a:b5:af:
                    40:ec:6b:02:9c:bf:91:f8:59:64:95:78:00:6d:f9:
                    8b:29:c9:e1:dd:dd:de:02:02:c3:53:8a:48:7e:99:
                    eb:0c:b0:e8:f2:50:54:fc:a1:cc:ea:7d:21:67:3f:
                    c5:3d:2e:e2:37:a0:4e:2f:0d:d9:ea:b9:09:89:72:
                    a8:6f:57:3c:d1:1a:bc:f4:c7:f2:1e:72:6f:c8:31:
                    c9:e8:a8:a2:07:7c:3c:f2:cc:5a:64:c7:32:9e:01:
                    bd:f4:35:ca:3a:a2:4d:47:4b:b4:f0:8c:c4:51:ea:
                    57:68:c6:27:c4:3c:7f:b6:98:a9:f4:c6:d3:a5:ae:
                    6a:94:0a:7f:6d:1f:49:45:12:5e:8c:87:86:ea:ef:
                    04:43:b9:11:e8:8a:c7:a7:1b:6b:13:ed:91:66:32:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A2:DB:7A:B3:41:22:39:6A:53:F1:C2:AE:13:95:47:52:BE:9D:A6
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:41:7c:1b:05:a3:21:c6:9e:5e:ea:d9:90:fc:b9:86:ca:19:
         cb:c5:0b:76:64:61:41:a2:38:b4:1e:d7:25:4d:e7:b2:b7:7b:
         8a:84:ce:1a:8f:75:87:39:3e:d4:24:e1:68:57:77:9d:c3:c3:
         06:f2:a5:2b:8c:73:16:bb:7d:67:29:c0:0b:77:5c:a0:de:ab:
         f4:35:fa:59:1f:9a:03:b7:ce:7d:17:1b:5b:04:c9:70:e4:c0:
         c9:0d:aa:45:80:12:78:d6:08:03:7e:0f:43:0d:cf:67:99:6b:
         52:40:59:5a:e8:97:e7:55:d6:d7:bc:1f:f6:00:d3:4b:2e:3e:
         86:1e:9c:3e:8f:80:fe:ea:ec:c0:dc:29:c5:82:98:f2:51:9f:
         76:da:ad:65:7f:00:6e:a7:99:15:4c:2e:dc:5b:1b:16:dd:1c:
         b6:99:16:60:41:c9:45:32:58:97:2c:79:ef:7a:ce:c8:60:c4:
         e1:f1:7b:b6:9e:3c:28:e8:e0:53:c2:c7:b7:d4:4d:f7:29:78:
         6d:f9:89:9f:27:f0:94:5b:19:d3:34:34:c4:73:42:6c:c1:de:
         8a:78:96:6f:d8:65:9e:da:ae:a1:4b:a5:cc:1a:f6:1f:47:25:
         fe:59:e3:46:c9:4d:05:81:cc:0c:0b:e7:6b:3b:dc:4a:c1:5a:
         5e:89:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:28:40 2025 by rpki-client