Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
File:                     wb6oOT9qHTeZGYndh1_FMeQIQDE.mft (raw, json)
Hash identifier:          BvlaHhFp6S0Pbf/SkBb2qwEiWvty0O9p2jppV6D0TeI=
Subject key identifier:   2A:64:FF:63:58:5B:3A:28:CB:EF:1B:EE:CE:82:6B:25:D2:E6:76:23
Authority key identifier: C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31
Certificate issuer:       /CN=c1bea8393f6a1d37991989dd875fc531e4084031
Certificate serial:       0196B82367106BCA2057D9725BA03EC26DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
Manifest number:          1175
Signing time:             Sat 10 May 2025 03:00:49 +0000
Manifest this update:     Sat 10 May 2025 03:00:49 +0000
Manifest next update:     Sun 11 May 2025 03:00:49 +0000
Files and hashes:         1: nbmVOIuVbGlA2xpA2whbaoSkl60.roa (hash: 70PvMKGXMQMI5jikM85xlBPooLtb7IA/Vc36Qg7U1Uo=)
                          2: wb6oOT9qHTeZGYndh1_FMeQIQDE.crl (hash: vPC4XCVbuAxT27MJZB7a+cQS4bhc3Y9Un98zOIEB8Xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:67:10:6b:ca:20:57:d9:72:5b:a0:3e:c2:6d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bea8393f6a1d37991989dd875fc531e4084031
        Validity
            Not Before: May 10 03:00:49 2025 GMT
            Not After : May 11 03:00:49 2025 GMT
        Subject: CN=2a64ff63585b3a28cbef1beece826b25d2e67623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:5f:e8:8e:1a:72:a0:d7:ac:84:27:fd:12:
                    b4:f6:1e:0f:83:bc:30:ff:cf:57:af:62:75:a7:57:
                    9e:ab:ce:4f:b4:ea:85:2e:f0:e1:b0:6a:62:f1:23:
                    81:6a:5d:29:85:59:d6:49:d0:d5:60:81:87:bd:ce:
                    b9:af:0d:ae:4f:5f:2f:a3:a3:ae:5c:52:ab:54:f5:
                    00:c9:b3:e3:5f:3d:96:d2:27:b1:f8:52:e0:2f:cd:
                    d1:aa:46:5a:42:16:ff:60:90:03:30:a8:7a:48:be:
                    68:f4:27:ff:ce:83:1c:1d:d6:53:ce:ba:b9:b4:c8:
                    d6:26:5e:bc:52:09:7d:8d:64:1d:e1:73:09:19:1e:
                    90:ff:19:ee:c1:d5:fa:be:4a:f2:d7:6f:cf:f0:ed:
                    1f:5f:85:17:be:5d:fe:ef:3a:4d:96:ad:b2:ed:a2:
                    2d:ff:ad:f6:40:03:02:7d:25:b7:bd:f4:fc:69:fa:
                    7c:98:ee:48:d9:31:d2:28:1d:dd:6a:e5:2e:0e:8a:
                    a8:f9:13:1c:bf:56:5a:41:0a:0f:6e:0b:f1:57:b4:
                    39:a5:ab:49:91:2e:70:8f:d5:f1:f1:a6:6a:09:83:
                    86:cc:b6:f0:69:08:91:a0:4b:6a:7a:9b:2d:68:80:
                    69:eb:94:a8:9f:42:5d:de:1c:f4:21:e6:3b:4c:ff:
                    c1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:FF:63:58:5B:3A:28:CB:EF:1B:EE:CE:82:6B:25:D2:E6:76:23
            X509v3 Authority Key Identifier:
                keyid:C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:39:f1:aa:5e:c8:2a:af:99:e5:c3:fc:20:66:11:b2:44:4c:
         d3:e6:9d:7b:6a:d5:c4:fe:95:93:2d:1f:ea:7e:72:61:65:8e:
         70:58:64:65:5f:77:6b:da:84:3c:f4:bb:c0:77:e5:62:ac:9c:
         a2:ca:72:d7:ea:22:c9:48:73:99:d1:3a:b2:77:82:f8:15:1c:
         a4:e9:8b:e9:c2:16:90:26:8d:5f:7b:78:9e:23:da:f0:bd:d8:
         e7:dc:c2:70:b1:cd:d7:a8:a2:88:d7:2e:a1:bc:ce:a4:64:f5:
         dc:b8:4a:07:3b:c5:a0:86:04:85:bd:0e:54:b5:07:ca:ee:e0:
         bd:37:4d:c9:17:b8:52:2d:5a:d2:1f:6c:44:42:73:f4:3e:5e:
         8f:cf:03:d0:fa:0e:70:64:a5:ad:9d:0a:0a:92:e9:62:50:ae:
         31:49:be:28:0d:31:92:5a:93:e0:ec:1f:58:dd:13:2c:fc:60:
         30:59:e1:dd:34:bc:de:6c:48:02:ca:94:6c:18:f9:71:29:60:
         d4:7a:e1:51:8c:8f:b3:8a:cb:25:f9:38:e9:06:e7:62:bb:c5:
         51:ca:04:4b:55:cd:dc:00:51:29:32:ed:19:fc:f7:c9:d7:8c:
         af:d0:73:a1:04:5e:bc:e6:ab:1e:0b:87:81:98:28:9c:98:9e:
         0a:71:ae:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:55:45 2025 by rpki-client