Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File:                     W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier:          XqjDVLWNNsSjd1df62+vkrTXFdjXWbizllu2NNhepPM=
Subject key identifier:   75:3E:AD:6C:24:0B:AF:5C:B2:73:B7:32:B5:8D:E9:48:10:2A:C2:76
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer:       /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial:       0196AE0DD2FEFBE762641CD96FDF1BB8BEE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number:          0178
Signing time:             Thu 08 May 2025 04:01:03 +0000
Manifest this update:     Thu 08 May 2025 04:01:03 +0000
Manifest next update:     Fri 09 May 2025 04:01:03 +0000
Files and hashes:         1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: lMm0FzE7Ub5u4ZP4cxAxoR6Lyh/Ow/46AhklZACSFgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0d:d2:fe:fb:e7:62:64:1c:d9:6f:df:1b:b8:be:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
        Validity
            Not Before: May  8 04:01:03 2025 GMT
            Not After : May  9 04:01:03 2025 GMT
        Subject: CN=753ead6c240baf5cb273b732b58de948102ac276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:c2:da:a7:7c:62:7b:0d:02:3b:f6:83:f6:
                    9a:b7:b0:37:91:90:fa:67:bb:37:09:1d:9c:23:7a:
                    d1:a8:09:50:3b:73:6d:2d:76:9c:6b:42:ca:17:f2:
                    0d:41:45:12:f3:c8:12:06:96:f6:fa:91:1c:8b:a2:
                    c1:37:e6:fe:44:46:b2:f7:3b:6d:26:2e:72:e4:30:
                    18:5a:d1:10:2f:70:87:a3:fe:60:21:08:8a:fc:02:
                    b7:c3:d1:a7:83:19:1c:90:a2:e6:b5:7c:45:3c:64:
                    74:1f:96:67:4e:40:25:00:fa:b8:18:4e:f7:fa:24:
                    01:f3:cf:95:d4:ff:4a:97:e5:8f:96:2a:19:35:bf:
                    c1:b9:25:d6:22:a1:89:bd:81:0f:86:23:d3:dc:71:
                    bd:8d:1e:87:15:de:92:63:32:e2:67:f4:08:90:12:
                    42:f8:17:b7:f3:dc:87:e5:53:52:7e:82:72:54:54:
                    a3:d3:4f:e6:eb:ff:e8:eb:58:85:a7:7c:cf:07:56:
                    3f:79:2e:af:25:0c:dd:4f:dc:6b:b2:89:f0:8b:12:
                    b5:5b:ac:6a:81:03:69:af:e4:16:e7:9e:3c:4d:3d:
                    9b:c1:39:7e:85:2f:0a:38:30:77:26:f1:99:93:55:
                    7c:04:ed:fe:05:fb:42:4e:1a:f1:35:c4:30:49:c2:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3E:AD:6C:24:0B:AF:5C:B2:73:B7:32:B5:8D:E9:48:10:2A:C2:76
            X509v3 Authority Key Identifier:
                keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b7:08:58:89:a2:cd:3d:f1:56:f9:51:fd:a2:be:65:06:86:
         06:a9:6e:ca:e8:79:55:80:1a:6d:fd:91:96:0c:0f:d7:8e:97:
         d9:9b:95:21:28:02:f2:b7:34:78:c1:f1:35:e8:a2:68:3c:30:
         a1:b3:aa:e9:56:ea:47:43:f7:39:88:76:67:d6:f6:36:d3:d7:
         ca:a6:c9:44:72:32:d8:f3:e6:49:17:52:5c:bc:2a:95:d4:e6:
         06:41:55:92:78:47:9d:25:e3:31:98:65:1d:e0:b5:42:05:a2:
         f9:7d:10:a2:19:00:f6:b3:88:3a:de:71:0b:9c:27:a5:0b:41:
         df:04:92:79:b2:5c:41:ce:2c:19:5e:79:3c:ba:16:9a:d2:77:
         83:99:81:fc:66:8d:e8:d4:cf:95:5e:8c:97:96:c2:32:0a:b0:
         b4:93:db:26:17:06:f9:8e:57:52:d3:1c:8f:83:4c:3d:09:6d:
         89:21:87:3a:8b:62:3d:cd:c3:8a:79:73:5b:6a:a6:b1:a1:45:
         e8:10:02:f8:93:21:6f:75:1a:68:19:e8:5d:e9:a0:a4:64:36:
         a8:77:0d:44:5c:f5:4f:68:37:41:90:9d:3f:32:ec:b4:b2:c9:
         60:69:4f:74:d9:54:8e:49:22:8d:ba:2b:1a:97:2a:ec:f2:77:
         04:65:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:27:06 2025 by rpki-client