Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
File:                     wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft (raw, json)
Hash identifier:          +9DHih3rFw1lUWwYPT/GhoGVQEoCZFfMIsri8VQ1dNY=
Subject key identifier:   2E:21:7D:6E:C9:7A:52:BF:E7:2E:55:24:29:DC:30:84:C6:2A:DE:E5
Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
Certificate issuer:       /CN=c0c9413f076a782110c14490d890f1b3e98e0785
Certificate serial:       01969CABC7077292DD684D1EA20C4CF1A09F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
Manifest number:          0AD1
Signing time:             Sun 04 May 2025 19:00:25 +0000
Manifest this update:     Sun 04 May 2025 19:00:25 +0000
Manifest next update:     Mon 05 May 2025 19:00:25 +0000
Files and hashes:         1: XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa (hash: 6D9O10hjXxh7sEXhihEUoyls7053T5SpuEJHdN4TtnE=)
                          2: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl (hash: ngPjDgDsvJdipNRc9NIofrZs+BXj9JUmjvtD2jRSdpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 19:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:ab:c7:07:72:92:dd:68:4d:1e:a2:0c:4c:f1:a0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785
        Validity
            Not Before: May  4 19:00:25 2025 GMT
            Not After : May  5 19:00:25 2025 GMT
        Subject: CN=2e217d6ec97a52bfe72e552429dc3084c62adee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:58:fe:9b:e6:cb:5d:54:01:e9:26:b1:44:
                    f5:65:6b:b1:f8:a4:0d:0c:62:60:fa:c4:a6:d0:fe:
                    8a:a7:b1:7d:98:7c:32:3b:52:4c:6d:05:cc:22:cc:
                    61:9e:52:3a:c1:4e:74:41:ad:f3:8f:b3:f4:e1:a6:
                    c2:9b:73:e2:73:b0:9a:a9:cd:a4:3e:43:63:bc:04:
                    df:73:cd:92:74:ca:63:da:f1:93:0e:3d:8a:a9:ac:
                    3a:19:9f:fe:93:77:20:23:79:cb:e4:50:35:0e:93:
                    01:66:91:ec:73:01:3d:59:ee:b9:0a:dd:5c:ea:cb:
                    7e:e4:df:80:bd:f1:a0:60:66:91:f5:a8:49:79:0f:
                    10:45:5c:6f:be:ff:1c:24:0f:d7:a6:c5:08:9f:25:
                    1d:80:f5:e3:ef:71:71:d2:41:f5:b3:a3:6b:00:48:
                    5a:8e:96:9e:a0:31:07:b6:49:1d:ef:cb:a5:00:26:
                    57:00:8e:97:ca:40:c0:49:e3:e2:38:2c:49:12:02:
                    7e:54:3b:7d:74:3f:43:d5:5f:1a:56:08:9c:ae:81:
                    4b:0f:e1:01:4f:da:aa:e2:65:66:79:f9:7a:81:7f:
                    6e:41:06:c6:b5:9e:2b:b6:75:ac:46:1e:54:36:98:
                    4c:ab:b0:5f:61:0f:9c:9d:85:83:57:23:d7:14:37:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:21:7D:6E:C9:7A:52:BF:E7:2E:55:24:29:DC:30:84:C6:2A:DE:E5
            X509v3 Authority Key Identifier:
                keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:39:fa:4d:12:aa:c0:13:e0:a4:66:a0:a3:41:e1:fa:24:
         9b:73:5d:9f:e5:79:9e:a6:0b:c0:5d:18:84:d9:c4:6a:40:01:
         6a:cc:1b:b7:33:ab:c1:48:12:30:d3:99:ad:2c:e3:95:da:6d:
         27:e5:15:88:f0:2c:dd:94:c1:6e:bc:43:e8:4b:77:48:6a:c6:
         66:50:83:fc:86:1b:cc:66:ab:09:d9:76:38:34:4d:2d:82:7e:
         6d:62:26:73:76:12:29:eb:41:67:9e:6e:23:9e:f3:fa:56:20:
         61:78:e3:2a:36:f9:a0:39:fe:15:ab:55:a8:90:d0:30:96:dd:
         2c:6a:1d:42:56:44:2d:06:86:88:e1:da:d1:f3:46:a2:80:99:
         47:da:3e:22:5b:88:c2:0d:00:20:53:14:87:63:db:2c:58:60:
         d0:7c:e3:13:fc:66:f9:fa:86:97:69:63:7e:81:e9:e4:2d:d4:
         0c:af:85:a7:c3:d5:11:08:38:96:5c:26:62:77:b6:ab:15:60:
         1d:64:7c:b2:da:c5:fe:94:6f:26:25:6a:f3:12:ff:25:81:4a:
         0e:fd:2b:17:2c:ba:11:c8:ca:01:a9:fd:0f:f2:16:98:21:d4:
         ba:99:21:8b:ed:97:46:6a:b2:7a:40:49:74:f5:68:00:7d:d1:
         4f:1a:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:38:48 2025 by rpki-client