Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File:                     waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier:          4fJIZ6VFjwE3DnPXugLohRq/todzVBrfRKrtO3EUTFs=
Subject key identifier:   90:7A:01:78:A3:F9:00:C0:FB:1C:31:D0:B3:3A:65:F3:85:2E:69:6C
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer:       /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial:       0196AC1FAA688C3B16DDEE6DCAF0BAEBF633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number:          152F
Signing time:             Wed 07 May 2025 19:01:18 +0000
Manifest this update:     Wed 07 May 2025 19:01:18 +0000
Manifest next update:     Thu 08 May 2025 19:01:18 +0000
Files and hashes:         1: YhlJJJSXn0316GXMCt3evKM4RRA.roa (hash: GoRGuSI9MFxsC15qVirr/MrX3xBRfDPgJUjig6NxAVs=)
                          2: fcUl98sKluiY4Z6HclXCv7bDmnU.roa (hash: SP5xh1GaA83MywFSUlhztkzJVmjQdJpF6NtlQuuubs4=)
                          3: ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa (hash: Cbk3gKO+GYUzaeJI/vrLpgkHk9pkTZFjphWYEpQbc/Y=)
                          4: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: K5rozAYP2PE0yakwVmK3NodMgmc041mqmpLhMs5Ubjo=)
                          5: xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa (hash: UU3ufwB67xN9A6E6STJlvefFGKYdsphPt8rIQ8rp99U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:aa:68:8c:3b:16:dd:ee:6d:ca:f0:ba:eb:f6:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
        Validity
            Not Before: May  7 19:01:18 2025 GMT
            Not After : May  8 19:01:18 2025 GMT
        Subject: CN=907a0178a3f900c0fb1c31d0b33a65f3852e696c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6e:80:2c:2c:f4:70:dd:c9:f6:67:01:b0:f2:
                    6d:5d:f3:3f:26:e0:9b:f5:d0:e4:f5:49:ef:9d:4f:
                    da:b7:b4:23:65:e5:9a:fc:7b:88:8f:af:36:e8:b7:
                    8e:80:99:6a:05:6c:cd:37:3d:8c:cc:bb:4f:56:4f:
                    01:0b:c7:21:ba:68:85:88:cd:50:d5:13:9a:28:8a:
                    c1:1c:56:cb:56:f2:06:a5:0b:6d:4e:6e:3a:53:2d:
                    9c:ea:ba:99:81:fa:63:39:c3:bd:8c:36:10:c7:18:
                    79:fd:34:33:f3:91:2c:91:80:d5:d8:73:6c:d5:92:
                    9e:ea:ee:75:98:fd:36:3d:17:e7:29:76:82:c9:c8:
                    2f:a7:77:aa:2a:77:9c:70:73:9a:71:8a:b3:be:55:
                    bc:f6:bf:25:e7:db:af:7e:1b:87:90:c2:ca:c3:79:
                    f5:a9:6b:79:2e:88:3c:f6:d5:cb:44:d4:dc:e2:bd:
                    3f:cf:43:d7:d2:1b:70:ff:5e:c2:d5:05:33:a7:82:
                    87:b9:cd:94:bf:ec:77:bc:1a:3d:c3:7d:d9:71:f6:
                    36:6c:fa:37:65:1a:27:3b:32:0a:ba:60:49:96:9e:
                    c8:1c:a9:fc:3c:1e:24:8f:bf:d3:69:62:0d:6a:a5:
                    cd:ab:2d:fc:69:50:27:58:96:86:29:b9:36:a4:92:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7A:01:78:A3:F9:00:C0:FB:1C:31:D0:B3:3A:65:F3:85:2E:69:6C
            X509v3 Authority Key Identifier:
                keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:53:a6:a3:2a:32:6c:3d:3d:38:67:8a:35:c5:65:83:6c:
         33:02:dc:2c:22:5b:82:ec:7e:5d:42:77:e5:b5:a5:71:71:ae:
         16:a9:e1:c3:80:05:73:9b:b3:d9:cf:e9:b3:8d:2e:50:e7:94:
         c5:e3:83:bb:ae:eb:c5:5f:43:50:a5:db:1b:df:b4:3e:1b:16:
         0d:4d:be:6c:0b:ab:fb:0c:17:dd:4e:c1:14:58:d8:0b:87:29:
         aa:1e:1f:bb:84:76:bd:ae:75:0a:79:6a:42:b9:4c:6b:9c:c9:
         51:dd:79:b6:6a:e6:6f:15:7c:d6:49:4a:fe:db:15:8f:bc:76:
         c1:ba:77:b5:7c:e6:83:dd:4e:c3:77:b5:e1:51:70:3c:4f:28:
         fc:54:28:ee:00:25:ed:c4:37:37:e4:9a:d0:9a:0d:63:c6:b0:
         b8:6d:5e:54:36:9e:c6:f8:d0:68:1d:5d:82:ec:e3:80:dc:f6:
         b4:73:fb:b6:ee:bd:50:6f:5a:3c:b1:df:9c:fb:d2:ac:7d:2e:
         ed:c9:2c:6c:fa:11:58:c0:9b:2a:bf:ce:2b:5f:d6:77:bb:41:
         40:22:bf:30:27:b9:b1:fd:8f:80:39:ec:96:e4:7e:05:d8:4e:
         d4:c3:aa:ad:5c:d2:7b:82:c2:4d:c6:8a:5f:96:99:6d:d7:ca:
         fc:11:80:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:02:55 2025 by rpki-client