Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
File:                     WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft (raw, json)
Hash identifier:          gtkqluig64cvd668+xJtbb68ZVAbxRSiLlG0x5BNPPM=
Subject key identifier:   22:D8:F0:92:2E:93:E6:B3:8E:9F:45:B8:D1:5E:1F:C1:AF:6C:41:9D
Authority key identifier: 5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05
Certificate issuer:       /CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
Certificate serial:       0196AA30F09CBAC6B883EAFA3C5D9910D78F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
Manifest number:          0872
Signing time:             Wed 07 May 2025 10:00:56 +0000
Manifest this update:     Wed 07 May 2025 10:00:56 +0000
Manifest next update:     Thu 08 May 2025 10:00:56 +0000
Files and hashes:         1: 1-u2sU3DDBTp7tslVtZM2YXONawE.roa (hash: hY4Vnqp2FHEqA3NhSl3nyi2JgSEr1mIebkZ+fS2Quh0=)
                          2: WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl (hash: fXHoWR9n7YfOvqBZHj4AWXuZfUB3mjeLilBg5GuVTFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:30:f0:9c:ba:c6:b8:83:ea:fa:3c:5d:99:10:d7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
        Validity
            Not Before: May  7 10:00:56 2025 GMT
            Not After : May  8 10:00:56 2025 GMT
        Subject: CN=22d8f0922e93e6b38e9f45b8d15e1fc1af6c419d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:42:8d:13:21:90:69:12:e7:fa:15:5c:ca:
                    f3:c1:72:66:2a:de:cf:71:c8:52:87:31:4e:b1:02:
                    cb:ac:ee:f1:5f:47:07:26:75:66:49:59:a8:77:7c:
                    93:da:d1:15:29:01:b5:a0:97:10:2f:76:1c:12:13:
                    d5:32:02:22:0d:0d:a8:1e:37:f1:53:be:8a:4b:20:
                    5c:11:96:71:9c:11:86:45:b9:2d:45:34:56:af:5b:
                    c2:bc:12:93:7d:8f:d9:f2:f2:c2:3f:c0:38:fe:60:
                    bc:bc:63:89:f5:e7:9a:0c:ab:08:fa:83:28:cf:4c:
                    81:e8:6b:73:8b:dc:1c:0c:45:1e:e6:56:91:45:2f:
                    bb:e7:07:d5:ee:9c:10:56:40:80:d5:f3:39:2a:5f:
                    37:ff:cc:02:6e:70:9c:40:82:6b:d3:f1:9b:97:92:
                    35:33:59:1f:e7:61:29:69:28:22:11:9f:6b:78:61:
                    f8:aa:87:01:52:23:80:d5:d0:1b:ad:08:e6:47:90:
                    84:64:7e:78:da:4b:e4:fc:aa:d8:be:c7:d6:ec:d9:
                    49:b1:b9:1b:79:a9:c4:34:ea:be:6d:9f:b9:b0:c1:
                    0e:c0:be:2a:af:93:72:37:06:a5:e4:2f:b1:13:ba:
                    89:63:05:7c:70:4c:85:24:2d:5a:bc:e6:73:51:6f:
                    de:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D8:F0:92:2E:93:E6:B3:8E:9F:45:B8:D1:5E:1F:C1:AF:6C:41:9D
            X509v3 Authority Key Identifier:
                keyid:5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:df:6c:e7:37:34:9a:a1:98:fe:f5:4a:56:fe:44:11:ab:62:
         d0:90:48:75:9a:22:2d:db:d3:b2:ab:f6:0d:ef:d8:93:54:62:
         e7:75:53:5a:1b:b3:04:e4:d5:f3:8c:70:e1:e3:40:04:b6:1b:
         36:6d:25:a3:b5:f6:fe:bf:15:3a:12:d6:bf:47:0a:1e:a1:08:
         4a:60:dc:e1:4b:9a:fa:42:e4:47:5f:34:54:1c:f4:51:0c:58:
         3a:54:89:7b:8f:06:f5:36:99:e9:c6:42:87:98:43:d7:f3:13:
         0f:32:0f:ce:50:e0:38:b2:49:50:c7:5e:bc:6a:61:ef:06:64:
         92:c1:de:02:9f:5b:dc:a2:ba:5d:61:96:1e:31:5c:14:bb:e3:
         4e:6b:d4:bb:62:f6:7c:2f:1e:64:8c:af:ae:ca:d6:f1:54:7f:
         da:a5:22:47:f8:ae:ed:24:47:2b:f4:ac:c0:b7:fd:27:c2:92:
         35:a3:3e:47:3d:db:07:1f:6d:f7:87:14:2b:8a:8b:90:9a:fd:
         2a:49:a2:76:58:b8:5b:99:e2:81:22:41:06:e5:e5:58:20:3f:
         94:1b:b5:88:d6:25:6e:14:f3:4d:ef:fc:c4:2e:4d:02:4d:a4:
         31:d0:6c:f7:5a:12:bc:1f:37:68:0f:48:41:27:67:cf:b8:97:
         8c:36:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:23:39 2025 by rpki-client