Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
File:                     WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft (raw, json)
Hash identifier:          T2xcLp5gFKHs4qI+GYFOUQDpdcznQc0aVKFa9gBkHXI=
Subject key identifier:   3F:E0:9C:B8:33:44:2E:6A:8A:6F:73:D1:06:43:AC:A6:A7:1E:5B:65
Authority key identifier: 5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D
Certificate issuer:       /CN=5a1568199d29239a2745ad43b696fbdc2e06706d
Certificate serial:       0196BB929B8363F6552FF6772E09047D8315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
Manifest number:          14FB
Signing time:             Sat 10 May 2025 19:01:09 +0000
Manifest this update:     Sat 10 May 2025 19:01:09 +0000
Manifest next update:     Sun 11 May 2025 19:01:09 +0000
Files and hashes:         1: WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl (hash: uoN5qeIcwA/Yg4qKb+cj2dWsRN3zK/MyriJlgJFW7Ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:9b:83:63:f6:55:2f:f6:77:2e:09:04:7d:83:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1568199d29239a2745ad43b696fbdc2e06706d
        Validity
            Not Before: May 10 19:01:09 2025 GMT
            Not After : May 11 19:01:09 2025 GMT
        Subject: CN=3fe09cb833442e6a8a6f73d10643aca6a71e5b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:30:9e:f2:48:f4:9e:37:76:3c:b5:84:a4:
                    39:7b:aa:e6:14:52:1b:d8:db:49:6d:39:64:f8:e8:
                    3f:2c:b8:87:ec:ee:eb:0a:56:54:30:13:76:78:f6:
                    de:58:51:83:6a:5c:57:ad:1a:9e:ff:01:11:51:1e:
                    25:40:69:33:a9:39:80:b7:8c:ce:43:8a:58:dd:56:
                    d0:bc:3a:5b:ff:91:8d:c4:43:f4:0c:df:f8:61:22:
                    b8:e2:42:e3:e6:7c:e6:17:0b:12:62:19:85:52:e8:
                    37:c9:b2:0e:44:f4:b5:98:83:4a:c0:be:2a:d7:b2:
                    8d:16:a8:28:5a:40:2f:86:3f:5e:4e:f7:7c:a7:ea:
                    4d:10:a7:e0:4b:19:72:2a:cf:f5:48:1d:1a:01:14:
                    00:5c:85:e5:aa:f9:19:75:10:27:33:d8:4d:10:b2:
                    51:e7:b4:8b:57:00:37:fe:1b:3a:25:d8:2d:2d:39:
                    e0:2d:14:1f:db:21:6c:e0:1f:12:5f:e9:bf:13:5c:
                    48:1f:79:f2:00:d7:61:43:6a:43:06:9b:47:9c:86:
                    37:e5:93:65:e9:04:de:81:96:be:0c:6c:63:1d:0c:
                    80:45:9b:9b:19:a0:db:35:38:f6:2f:95:38:57:c2:
                    2d:6d:c9:07:d2:a5:e6:f3:80:c1:35:a8:17:54:e2:
                    81:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:9C:B8:33:44:2E:6A:8A:6F:73:D1:06:43:AC:A6:A7:1E:5B:65
            X509v3 Authority Key Identifier:
                keyid:5A:15:68:19:9D:29:23:9A:27:45:AD:43:B6:96:FB:DC:2E:06:70:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVoGZ0pI5onRa1Dtpb73C4GcG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b92213-5c34-4fc6-92cc-5be96860afc4/1/WhVoGZ0pI5onRa1Dtpb73C4GcG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5b:0a:8c:3e:95:d3:f2:fd:09:3b:a3:b1:82:04:fa:20:fa:
         3e:67:70:70:4c:28:f8:eb:0c:af:bb:9d:75:d8:e9:1d:22:a0:
         92:c0:21:67:dc:42:bd:93:e3:c4:23:43:91:2c:e5:58:96:20:
         6d:7c:62:08:dc:4c:66:32:c9:2e:72:cf:ee:31:f2:a9:30:ff:
         2e:76:f3:47:92:c0:7a:7a:b9:09:2d:2f:80:e0:9e:de:29:34:
         92:06:f4:f2:ba:b8:fd:73:c5:86:d4:22:1d:48:61:e2:6e:93:
         c6:81:86:74:f9:57:06:17:cb:f5:18:02:6a:4d:d0:f8:ca:41:
         a1:b9:63:e5:34:22:68:fc:70:70:f1:46:f2:d0:1b:08:10:1a:
         fb:23:3c:b7:88:2b:65:c7:0b:c0:e8:89:09:8a:41:6d:4c:d0:
         50:f0:d2:be:05:80:17:6a:3f:45:4c:ed:85:3b:59:9f:c2:1d:
         3e:99:6f:1e:fc:b3:b2:7d:93:0c:d7:e4:f5:d4:b5:03:a7:cd:
         a9:08:81:41:1a:9b:cf:41:fe:96:61:fe:e2:20:66:29:4b:25:
         46:00:9f:ae:c2:ee:78:0d:a5:3c:1c:29:81:9d:2e:c6:68:f2:
         c8:b2:62:cb:f9:a6:ba:a9:f9:5b:f1:1f:7a:5e:9a:84:d1:b4:
         18:6c:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:17:42 2025 by rpki-client