Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
File:                     wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json)
Hash identifier:          1poCDVpBbjJEThjVaUNnCmQeDe14JQ5agHeOcBvbEAQ=
Subject key identifier:   D5:F5:B4:1D:95:58:4B:66:6D:8F:C8:AB:2A:43:65:CA:06:F3:A8:A3
Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
Certificate issuer:       /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Certificate serial:       0196C53AB4786B7B0A3414C7A42CDEC37A17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
Manifest number:          08F2
Signing time:             Mon 12 May 2025 16:01:20 +0000
Manifest this update:     Mon 12 May 2025 16:01:20 +0000
Manifest next update:     Tue 13 May 2025 16:01:20 +0000
Files and hashes:         1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: LX/ZJgatAYuED+ubfCkfhkS4mT7zq+uMyqH+VPhDgRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:b4:78:6b:7b:0a:34:14:c7:a4:2c:de:c3:7a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
        Validity
            Not Before: May 12 16:01:20 2025 GMT
            Not After : May 13 16:01:20 2025 GMT
        Subject: CN=d5f5b41d95584b666d8fc8ab2a4365ca06f3a8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:ed:5d:63:d1:d9:ef:50:d8:38:d3:b8:80:
                    b8:c1:4d:46:15:08:a2:bc:af:31:97:d7:0d:9d:65:
                    0a:7d:7e:8b:de:66:63:1e:db:57:f1:f0:e5:53:1f:
                    43:92:f8:44:06:bb:ec:21:4b:cc:85:19:14:a2:ee:
                    58:10:a9:48:c2:03:6e:da:ec:0b:39:50:c2:cc:fc:
                    02:b3:30:f3:ce:6a:f0:c0:3a:21:73:2d:b1:cf:31:
                    04:b0:be:3b:c4:8b:27:21:a3:25:47:5b:54:7e:9c:
                    32:a1:e6:0d:fa:dd:ab:03:f1:4b:c9:44:41:13:18:
                    b0:18:c2:60:80:38:e4:d3:11:1b:bc:03:af:a4:d1:
                    30:28:55:70:36:06:7e:3f:6c:87:e9:6a:37:17:2a:
                    f7:ab:0c:e8:52:6f:2f:1e:67:21:6e:97:ab:90:01:
                    e2:0f:f1:51:42:dc:2f:88:f6:75:9c:9c:2f:67:d1:
                    7c:8f:b4:50:e1:9e:f2:75:29:36:21:dc:53:c9:36:
                    f3:7b:dc:48:85:bc:87:7c:44:e4:1e:04:7b:82:b5:
                    2b:a7:a6:b6:b9:e6:6a:e7:80:b4:cc:75:ac:75:77:
                    92:17:13:6f:2c:da:2d:43:be:83:a4:6b:49:4d:1e:
                    0b:d1:83:2e:54:93:9b:a3:11:97:37:8b:f9:91:af:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F5:B4:1D:95:58:4B:66:6D:8F:C8:AB:2A:43:65:CA:06:F3:A8:A3
            X509v3 Authority Key Identifier:
                keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:3e:82:ad:7b:a5:d1:f2:09:a5:37:ad:d1:d9:f5:d1:b2:77:
         80:48:fa:23:d5:22:37:69:df:7e:65:7a:d2:f0:49:a7:d0:76:
         df:48:ad:e2:bb:0b:53:bf:07:fd:fb:4e:ec:0c:98:11:ab:71:
         7f:ed:b7:ea:28:1d:3a:b9:c5:ad:b2:73:b0:fe:15:af:ba:cd:
         d9:a2:79:e6:83:3e:08:cf:26:28:5b:b9:35:39:69:66:ab:79:
         63:56:e1:98:3c:01:a3:19:a2:3c:8d:1e:8b:33:d4:5e:1d:b7:
         e2:6e:1d:8f:9b:33:1f:1a:4c:6c:f4:59:0b:5a:11:88:36:6f:
         c7:89:e8:55:15:1c:91:e9:b5:2b:16:3c:0a:14:2d:48:b1:f5:
         7b:a1:94:9f:a1:fb:b9:70:fb:0a:33:1f:ea:2d:9f:a7:2f:10:
         c0:8a:a0:ad:c3:9c:c4:6c:b6:27:cf:c6:47:82:4b:37:e3:15:
         fa:28:e2:e1:5c:56:98:9d:89:0e:87:bd:f4:ea:52:84:15:40:
         d2:d5:65:9d:96:92:3b:22:61:03:3f:85:1c:9d:9c:f9:78:73:
         89:86:51:e5:75:ea:93:89:ce:d2:23:47:bc:70:3f:1c:f5:3d:
         aa:a6:6a:26:51:7c:b5:66:04:34:9b:ea:14:b4:67:69:4a:b9:
         61:50:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:15:52 2025 by rpki-client