Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          Whe/c93Otj5lLe66kwj3iJ2r7Fxgi5VjmXd0ZK4OSko=
Subject key identifier:   AB:F8:B0:EB:67:24:C4:C2:37:D2:83:18:41:D4:AD:7B:D5:54:3D:56
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       01969E2C8BFE6331A09EA7403EF3636419FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          29
Signing time:             Mon 05 May 2025 02:00:41 +0000
Manifest this update:     Mon 05 May 2025 02:00:41 +0000
Manifest next update:     Tue 06 May 2025 02:00:41 +0000
Files and hashes:         1: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: NadM0kDuXEUrYkgAPTj6qmWW51Z7+RGAcyKWcU2LDg4=)
                          2: yJQwQMARRrVe9vIkjsREE8o5TT8.roa (hash: eXLzlsDPHHeDqRfh3yuG7C5MD8Da8VfpIofRm28xfrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:8b:fe:63:31:a0:9e:a7:40:3e:f3:63:64:19:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: May  5 02:00:41 2025 GMT
            Not After : May  6 02:00:41 2025 GMT
        Subject: CN=abf8b0eb6724c4c237d2831841d4ad7bd5543d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:cb:a3:f6:d2:5d:9e:03:1d:9c:9f:cb:3c:
                    74:2f:a9:ac:29:47:0b:a3:01:b0:f3:6d:18:9a:70:
                    8e:3f:ee:d0:70:09:d0:f3:2b:d5:df:ee:54:50:e7:
                    11:cd:d2:a5:69:52:a7:2f:cc:55:dd:6f:eb:24:02:
                    00:86:0d:25:2f:ba:f6:20:72:9e:8c:8c:27:74:f8:
                    c3:3b:2b:66:df:37:93:4f:69:a1:1a:a1:d0:8c:b1:
                    01:08:a8:41:7d:9f:a6:8f:c8:ce:2f:32:bf:26:ad:
                    79:7b:1c:d3:81:02:64:6d:86:80:f0:7b:10:7f:c2:
                    19:24:fa:d8:16:33:7c:f6:de:23:4d:71:6a:fc:d2:
                    f6:6f:0b:ce:4f:34:c3:a5:93:0a:23:33:31:2d:72:
                    e8:ac:2d:52:7b:1c:cc:22:e5:6f:23:ce:d3:24:86:
                    60:80:e0:ba:d4:b1:d9:ca:18:73:99:68:62:35:e4:
                    3c:76:96:a2:52:31:29:af:4c:62:c6:f7:58:a9:38:
                    52:fe:3d:7c:b8:d6:79:59:d4:e9:59:e5:52:c0:98:
                    94:ac:51:9c:51:54:57:86:8d:4f:8f:1c:b7:d2:d7:
                    9a:17:0d:67:44:9e:4c:63:2f:cf:7d:32:1c:ba:63:
                    1e:f8:c8:ab:12:90:8a:86:2d:07:50:09:dd:6c:bd:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F8:B0:EB:67:24:C4:C2:37:D2:83:18:41:D4:AD:7B:D5:54:3D:56
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:1f:ca:f7:ef:31:e9:df:dd:c8:84:27:fc:bb:d5:db:54:74:
         ae:2a:39:c1:c0:fe:b6:c5:24:e9:d2:50:4a:ae:da:20:8a:c3:
         7d:ed:a9:a0:80:93:69:16:3b:eb:a4:28:a5:78:6e:e3:2f:aa:
         1d:3c:f4:e5:25:08:60:36:e8:f6:97:28:47:33:ec:84:de:b6:
         28:d9:34:cf:5f:cf:12:8e:5a:21:1f:16:73:7f:e4:43:17:1d:
         db:95:0f:9b:a3:bc:40:4c:d4:a5:01:94:ac:c7:55:3d:16:84:
         d2:cd:ff:0b:00:9c:f9:17:9e:35:0a:76:7c:16:30:a6:76:21:
         ec:9d:18:90:f7:21:a1:d5:01:43:51:64:02:e2:4b:ff:21:27:
         34:3b:46:53:e0:cd:ac:26:49:6e:36:7f:26:3b:81:e2:8a:15:
         00:05:a6:7b:aa:70:15:46:a9:93:c2:91:cb:6c:d8:fa:7e:29:
         6e:53:7f:e0:b0:ad:dc:16:8c:77:46:75:4f:fc:00:1b:d8:79:
         e3:8b:2b:39:0a:15:2a:59:28:7f:a8:29:95:10:55:1f:1d:5b:
         ce:5a:2c:ce:43:49:35:a4:f4:3c:88:2f:bf:a9:22:6e:9e:ed:
         12:0e:ba:3c:4e:2d:c2:b7:8a:ec:60:0c:e7:a9:ce:64:fa:bd:
         1e:db:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:27:53 2025 by rpki-client