Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
File:                     WP-hTfKonLZwljbysLVwq8z4uEs.mft (raw, json)
Hash identifier:          dss7L3zd+1S0dZoexiErD2qvj0sVV7KgOMvhcq/1EEs=
Subject key identifier:   A0:D3:FB:C3:26:A0:2A:E1:2D:ED:D8:91:4B:F2:59:6F:41:0C:D8:AB
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Certificate issuer:       /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial:       0196C45E730C9245E30840645322B7C1D945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
Manifest number:          0B2A
Signing time:             Mon 12 May 2025 12:00:46 +0000
Manifest this update:     Mon 12 May 2025 12:00:46 +0000
Manifest next update:     Tue 13 May 2025 12:00:46 +0000
Files and hashes:         1: WP-hTfKonLZwljbysLVwq8z4uEs.crl (hash: ABhBpB7gE3WlxdgP9oQviKDPmrKVhMy/JyOI7Wf/3YQ=)
                          2: naY9fp5NjU8tDM9SZRY3PwOYYGE.roa (hash: J2q3UXA0g3wffHsTK3B29tfni2jGtIyER66BpRGgXKA=)
                          3: yWqbv8m78zRPBYHcRQrpHDhQyj8.roa (hash: SfVZhow6dDvaY/ddg+fEVIx1y/Hb6m65rBhEpqp4rjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:5e:73:0c:92:45:e3:08:40:64:53:22:b7:c1:d9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
        Validity
            Not Before: May 12 12:00:46 2025 GMT
            Not After : May 13 12:00:46 2025 GMT
        Subject: CN=a0d3fbc326a02ae12dedd8914bf2596f410cd8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:bb:c6:72:52:75:e8:bf:bd:19:d8:e1:0c:
                    ec:1d:69:12:ab:fc:86:82:8c:7e:1f:4c:4a:a0:b0:
                    fb:d4:be:af:7b:67:81:20:c4:7a:da:ea:36:4f:cf:
                    6c:ec:b8:f2:82:ca:86:0c:63:4a:eb:01:2f:60:37:
                    7b:0e:35:f3:41:f0:40:ba:60:c8:c8:ca:bb:5f:e7:
                    10:3b:60:29:66:4c:f1:e8:59:67:4b:3d:d2:7e:98:
                    e2:68:60:b8:20:65:f4:82:42:2c:ef:79:13:8b:70:
                    82:a7:18:43:96:cd:68:b8:25:32:36:08:3d:17:c3:
                    3a:ac:b7:76:cd:32:9d:89:a0:c7:b2:54:c7:5c:a3:
                    e4:77:6d:cf:b0:f9:ae:68:34:8b:c9:12:ac:60:09:
                    7b:08:e1:84:0a:df:9d:53:5a:df:e9:2e:ae:b2:ed:
                    a9:c2:ff:a1:db:11:2f:32:08:38:2c:d4:6d:c9:79:
                    18:72:b6:6c:1d:35:f8:f3:c4:a8:7a:a3:cf:41:c3:
                    3e:a8:84:20:6f:82:f5:f9:b8:84:e2:91:da:8b:7c:
                    a4:91:3a:14:18:f2:9e:24:76:24:2f:c3:9d:dc:30:
                    e5:78:29:96:f0:84:7a:27:15:4f:57:2d:9e:33:b5:
                    21:e3:b2:a8:8f:a5:bc:3c:eb:da:75:4e:4f:4c:8d:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D3:FB:C3:26:A0:2A:E1:2D:ED:D8:91:4B:F2:59:6F:41:0C:D8:AB
            X509v3 Authority Key Identifier:
                keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:46:15:86:0a:61:6e:38:ef:b4:2a:68:9a:10:f2:e0:d8:29:
         d4:3e:9e:56:91:5e:82:e3:82:53:ad:d8:0b:da:40:d2:84:fa:
         60:d1:db:4b:5e:9d:43:54:3f:15:2d:00:19:12:bb:27:53:86:
         88:60:ee:50:8a:b6:2b:42:b8:44:e6:c0:76:dc:a5:df:a7:99:
         19:37:74:38:6f:b5:a9:7f:e4:e5:a7:7a:76:52:4d:66:d3:5b:
         39:2a:10:17:d3:68:60:d3:b0:55:ce:9e:2c:57:d4:77:0a:0e:
         c7:65:41:ef:3c:5b:25:62:0d:12:4e:b1:f0:fe:03:67:8a:04:
         73:49:02:a2:85:e5:5b:13:eb:4b:94:93:bc:6a:72:3b:cb:e6:
         08:0e:5c:25:84:53:be:15:37:7a:43:3a:6d:fc:e5:0a:76:d4:
         cc:bf:41:de:a3:af:32:6c:f0:fc:bf:27:db:fa:e1:7f:d7:49:
         82:b2:5e:46:bc:5c:5a:cc:45:e3:20:28:3c:e9:5d:61:01:3c:
         19:8d:3f:27:28:d2:68:41:9c:c9:e5:a5:79:22:ba:cd:56:97:
         37:b4:73:e9:31:98:db:bf:08:cc:b9:32:78:ed:8f:96:ca:33:
         18:b2:f7:25:3b:59:53:c8:2c:77:c8:9d:65:90:a3:d5:88:44:
         70:a5:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:51:58 2025 by rpki-client