Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
File:                     WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft (raw, json)
Hash identifier:          X/aU01TutpEb8nh0vZyaKkXemUn0U/6yJ2HqU98GJNo=
Subject key identifier:   BE:89:A7:54:DE:83:18:2F:0D:D6:51:09:F6:61:B5:A2:F4:3E:A6:24
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Certificate issuer:       /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial:       0196B9A3D4EA80B0EFCEB806FE60FBD12215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
Manifest number:          1535
Signing time:             Sat 10 May 2025 10:00:43 +0000
Manifest this update:     Sat 10 May 2025 10:00:43 +0000
Manifest next update:     Sun 11 May 2025 10:00:43 +0000
Files and hashes:         1: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (hash: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=)
                          2: R-1q52axanYiR_uRw04t04Z8LDo.roa (hash: v5CC/At/0UFJJZBjnOeP3jsuRpec8w6C2aXVgu/IhIo=)
                          3: WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl (hash: 2ZwVUJ3G+yKUgAnGSWEaGG0ifpttAzRZSZy5qGmrSQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:d4:ea:80:b0:ef:ce:b8:06:fe:60:fb:d1:22:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
        Validity
            Not Before: May 10 10:00:43 2025 GMT
            Not After : May 11 10:00:43 2025 GMT
        Subject: CN=be89a754de83182f0dd65109f661b5a2f43ea624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:89:0b:7f:ff:9e:e8:fa:d9:54:1c:1a:51:cf:
                    fc:96:12:a1:a2:97:86:fe:28:50:0b:fc:9a:05:93:
                    25:e2:d3:76:cd:8b:79:07:b8:81:1a:cf:61:37:19:
                    a1:3a:19:59:56:f3:0c:aa:94:da:8d:7d:1e:34:f7:
                    de:42:a3:c2:97:12:c1:3e:dd:96:73:b3:b8:4a:e9:
                    3c:b8:22:3e:a1:d1:9f:39:39:5b:84:ac:f5:86:7d:
                    c1:b5:f8:4d:ad:61:21:04:41:14:46:c7:89:29:fb:
                    d8:90:73:73:37:c6:47:a9:75:66:de:de:c3:e0:24:
                    93:b7:59:ec:3d:30:4c:5b:c4:33:06:52:ad:1c:d1:
                    2b:5c:79:69:4b:44:70:36:8d:f6:7f:8e:4f:ba:06:
                    09:51:30:3d:e5:a5:07:b5:fb:3c:0a:7f:ce:ed:7b:
                    40:af:56:61:cc:f5:64:12:4b:8c:b2:c3:10:c4:b8:
                    a9:9d:a9:af:12:ca:1c:13:66:25:62:b7:82:b5:e3:
                    9a:c4:d1:aa:30:03:24:56:c4:5b:28:de:21:f4:69:
                    dc:e3:67:f2:4f:99:c0:d4:65:86:83:6a:23:53:c6:
                    ac:b5:02:61:97:5b:2f:ba:46:d0:08:b2:6d:bb:68:
                    11:52:6b:af:40:90:d7:b1:82:8f:ef:46:6d:13:d6:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:89:A7:54:DE:83:18:2F:0D:D6:51:09:F6:61:B5:A2:F4:3E:A6:24
            X509v3 Authority Key Identifier:
                keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ca:f0:78:06:f8:85:3e:0b:de:ab:64:e9:b5:68:1a:60:96:
         c7:1d:cb:fa:3a:9f:0b:67:ac:68:a9:35:b2:f0:e3:81:81:df:
         76:26:80:c5:c2:32:35:23:43:50:63:33:5e:c8:f7:40:10:c6:
         7f:70:b9:ff:b7:a5:2e:7e:a5:ba:d0:6b:09:0c:41:7e:e1:14:
         d4:5c:c5:ea:01:cf:cd:c8:65:9f:c5:b7:96:c1:da:11:21:3f:
         7a:cb:7c:88:82:13:eb:31:42:37:d4:74:c6:a8:28:96:5a:f4:
         16:95:a6:2f:06:1c:0a:f6:d3:22:b2:df:b8:3b:3f:44:a3:74:
         00:62:28:7f:e7:d8:9b:a9:ad:90:b1:a0:24:89:2d:28:3c:70:
         8b:31:2f:93:52:6e:f9:b3:29:f8:a1:e1:84:7a:5f:2b:32:c5:
         65:e0:bc:0d:5c:b6:2b:46:51:a9:cd:51:2f:d4:84:b1:af:7e:
         13:35:d8:b4:e5:56:25:89:30:57:e1:ef:4c:74:b1:7b:22:65:
         92:5d:fc:11:19:dc:85:a9:22:48:5d:aa:8d:38:51:76:8f:07:
         5d:be:d8:91:d0:2e:ce:ed:b8:f4:44:28:85:18:a2:11:f6:4a:
         ed:0f:8d:77:e0:7c:75:d6:57:8a:00:ca:fd:ee:13:a0:f1:9e:
         c4:5e:34:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:11:36 2025 by rpki-client