Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
File:                     W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft (raw, json)
Hash identifier:          eiuSrwlTfI9nVzeRSmkpqI1kHmy9WPBYGFtMeQBcSR0=
Subject key identifier:   1A:4C:12:00:B5:70:77:34:FB:8A:C5:3E:F1:FD:D4:4C:97:8C:D4:CD
Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
Certificate issuer:       /CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Certificate serial:       0196ADD63BD208E2132B7F3F53E95EEDC93F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
Manifest number:          14CC
Signing time:             Thu 08 May 2025 03:00:20 +0000
Manifest this update:     Thu 08 May 2025 03:00:20 +0000
Manifest next update:     Fri 09 May 2025 03:00:20 +0000
Files and hashes:         1: Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa (hash: PzV+Hvm8wXtJUXwK3RxNsLo6F6xHiBk0IePHLXsbPqk=)
                          2: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl (hash: P8+oFSw1iaccRY5dQvgYWaog5NMYheb6LSnu8nHz9I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:d6:3b:d2:08:e2:13:2b:7f:3f:53:e9:5e:ed:c9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6
        Validity
            Not Before: May  8 03:00:20 2025 GMT
            Not After : May  9 03:00:20 2025 GMT
        Subject: CN=1a4c1200b5707734fb8ac53ef1fdd44c978cd4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:ce:b8:95:90:bf:0a:bc:86:35:cd:0c:e8:
                    3c:15:db:19:c4:f8:29:1c:2c:65:69:3c:f6:14:9f:
                    e0:51:71:10:1e:5f:d9:e5:99:70:2a:fa:02:e1:a8:
                    0d:76:63:8c:71:fd:ca:39:16:12:1e:61:88:35:7a:
                    63:ea:d0:7a:19:ac:43:88:a2:f9:31:ea:eb:a7:52:
                    43:24:f9:c7:a3:12:61:a1:20:2b:89:a5:fe:3f:82:
                    35:60:7d:94:14:36:4b:3f:cf:fd:8e:c8:bb:b1:2d:
                    8b:fc:5e:09:53:99:6b:e1:e1:83:3d:9d:00:0c:4e:
                    8b:4d:90:49:3e:19:35:b6:3a:eb:00:18:95:f5:2c:
                    a7:eb:d1:2c:07:27:e6:b6:bb:f8:37:dd:85:4d:e0:
                    ef:e0:6d:ac:96:d8:1f:bb:52:99:2c:a7:1d:56:7e:
                    48:9b:c2:ef:03:2a:bf:35:eb:92:12:9b:cf:82:ec:
                    7c:b7:a5:96:d7:b9:29:24:a0:53:35:dd:b9:49:cf:
                    4d:0c:04:fd:cc:fa:62:8b:e0:05:e9:04:8c:48:dd:
                    82:29:85:ef:89:aa:72:92:13:a4:2c:e2:d3:3a:81:
                    b8:f9:e3:71:2f:2a:db:a9:b4:f5:34:27:a4:fe:de:
                    5e:08:f1:be:c8:88:36:09:6f:30:1e:7b:aa:9a:fd:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4C:12:00:B5:70:77:34:FB:8A:C5:3E:F1:FD:D4:4C:97:8C:D4:CD
            X509v3 Authority Key Identifier:
                keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3c:3c:6a:55:9e:4d:fc:02:f4:13:a8:62:3d:ba:4a:34:34:
         9f:b3:c1:7f:44:80:c4:b9:2a:e9:e5:82:fe:fe:5f:77:86:0e:
         4b:fe:c6:2a:30:f2:1a:f3:af:9f:6e:a4:a6:09:0a:28:5d:7f:
         35:cf:d8:a1:13:18:14:15:f3:3e:f1:bf:25:5f:ad:e5:46:7f:
         e2:57:4b:72:2a:15:82:38:1a:15:54:4f:23:7b:00:3d:35:60:
         5d:71:18:b8:60:2e:97:3e:de:52:9c:4a:09:12:d3:ad:45:97:
         49:e9:20:95:2a:5f:7d:38:8b:af:c4:6a:6f:7b:54:e7:5d:00:
         79:c9:69:be:0e:d7:d4:b8:15:b4:0e:d7:be:ca:a6:69:4a:44:
         a9:e3:ec:2b:80:5f:aa:53:86:a5:8a:3e:67:b0:a3:f8:4e:69:
         1a:a6:18:b2:5e:0f:0f:20:db:a6:f2:71:4c:e2:43:b2:17:63:
         d3:a2:5e:29:e2:ad:8f:4f:05:92:39:38:18:df:96:d6:36:70:
         8a:de:64:ff:d8:85:25:71:78:13:62:44:95:ce:07:66:83:ba:
         43:84:cb:ca:9f:33:6e:ad:92:b8:1e:9a:3f:46:de:3b:2d:2e:
         a7:df:a2:23:fe:90:50:b2:da:44:02:1f:5e:28:b8:22:d5:f0:
         87:bb:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:07:04 2025 by rpki-client