Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File:                     WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier:          Ia+drGf5bkTVJCB1Rl9Ef/zt1Q7v8KtLAf0gqsCkuqQ=
Subject key identifier:   75:FF:7B:A9:4E:E5:8B:B7:74:3F:27:F9:F0:7C:ED:30:ED:26:30:39
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer:       /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial:       01969E2C561B474BF08E16DBE0D24CB48728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number:          0A46
Signing time:             Mon 05 May 2025 02:00:27 +0000
Manifest this update:     Mon 05 May 2025 02:00:27 +0000
Manifest next update:     Tue 06 May 2025 02:00:27 +0000
Files and hashes:         1: THjGQAeNJPBtPCUTy4-J94YQkPc.roa (hash: F+YBL5AUhg2W6omBaT2Kp3w7xlj8utNYDQNQuh7FdXU=)
                          2: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: g345eAaKsbByDuCfrCbGIwMIXKGOcRiJrRQyn8jC5fg=)
                          3: bHWPrUheTISW_XZwqIKxaRaFivE.roa (hash: ek7H7pyvxLeP4/K0w5pzvcUQRE5xOhHM0k+4ZCxv0OA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:56:1b:47:4b:f0:8e:16:db:e0:d2:4c:b4:87:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
        Validity
            Not Before: May  5 02:00:27 2025 GMT
            Not After : May  6 02:00:27 2025 GMT
        Subject: CN=75ff7ba94ee58bb7743f27f9f07ced30ed263039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:c6:21:ca:a6:7c:af:30:fc:f0:63:51:40:
                    7b:67:1d:25:84:23:90:3d:36:2e:51:db:86:06:7d:
                    49:66:dc:bf:8a:49:85:81:2d:4e:c3:e3:d9:6c:f0:
                    b9:66:b3:b7:3e:79:dd:83:cb:1e:f8:12:1d:2d:73:
                    9d:5c:18:96:94:3d:ad:f6:8f:68:d7:96:fa:62:d3:
                    09:3c:c9:f7:36:9e:99:ac:f5:04:c2:e7:3c:95:89:
                    f7:8b:14:1a:82:6e:92:dc:94:fd:7d:4b:9a:5d:05:
                    38:b7:c7:55:0f:f8:5e:88:d4:28:ab:44:d5:43:23:
                    d7:6a:7e:ac:b8:7e:f2:35:c3:b5:1b:2e:db:11:42:
                    bb:55:4e:71:a0:7c:c7:25:4a:26:d4:e1:0b:6d:5b:
                    01:7a:76:43:20:c3:35:47:ff:dc:3d:1b:70:f8:b3:
                    73:86:95:e7:1d:cb:d3:d3:08:48:fe:bd:f0:e4:cb:
                    9e:51:81:b9:94:6b:1c:5b:93:ab:f4:00:d4:63:b5:
                    6b:04:2b:54:d6:88:16:9b:60:f8:50:be:32:47:29:
                    3d:62:9e:fb:52:ae:a4:fe:fa:f7:31:fc:9b:72:ac:
                    eb:cc:ce:ef:7f:02:cc:30:1c:07:59:ff:c3:00:46:
                    89:62:c7:f6:ec:74:8f:ff:30:6a:9f:1d:77:a2:8d:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FF:7B:A9:4E:E5:8B:B7:74:3F:27:F9:F0:7C:ED:30:ED:26:30:39
            X509v3 Authority Key Identifier:
                keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d9:c5:a6:99:5b:1d:bc:63:fa:77:8f:7b:58:91:24:fb:e4:
         e3:5d:fe:27:0d:12:af:d4:cf:98:bb:81:4c:c4:69:75:db:ba:
         a3:3f:18:cd:12:ea:89:da:92:68:ed:70:b0:36:37:df:83:ef:
         d0:8d:8c:14:fc:98:fe:27:cc:c0:c1:7b:ca:16:17:86:2c:2c:
         e4:49:71:5e:ac:a5:f7:0a:e0:f7:85:cd:8b:22:a9:14:5b:c1:
         f9:f6:41:4a:1c:9a:2c:c7:5c:d3:4b:68:b7:1a:cf:92:8b:d3:
         56:3a:e3:b7:4a:87:76:87:d7:ce:73:61:28:62:71:8e:a7:16:
         fb:c4:47:0a:89:4d:4a:ed:8b:9f:9c:c7:27:61:1d:ef:e0:de:
         ab:71:f5:87:ce:96:1c:68:db:99:2e:83:a7:95:58:a5:d8:25:
         3e:ca:c6:db:c7:03:85:b0:2a:1f:1d:8b:61:9f:ee:ff:c0:45:
         1d:52:8e:3a:06:6a:6d:83:12:f3:f7:be:3f:d8:88:80:f1:4f:
         d6:38:87:85:ac:92:05:c0:d3:19:b5:fb:c2:a4:5c:94:f8:ca:
         77:0f:51:8c:91:66:08:a4:f4:9b:a5:cf:7a:6c:55:f6:b1:2c:
         ce:37:88:70:68:8d:47:46:a7:cc:dc:39:ac:72:57:20:0c:67:
         62:b0:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:41 2025 by rpki-client