Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File:                     wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier:          YbNkbq4e1NMAwz9zmbWTXlFMcVr6LNNRyP/q9RKroU8=
Subject key identifier:   41:C8:6B:DE:56:F5:46:A4:73:19:21:FA:0A:5A:B3:8C:33:76:65:13
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer:       /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial:       0196D43F535CA057C4D9D591B90D96EDBF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number:          04B5
Signing time:             Thu 15 May 2025 14:00:42 +0000
Manifest this update:     Thu 15 May 2025 14:00:42 +0000
Manifest next update:     Fri 16 May 2025 14:00:42 +0000
Files and hashes:         1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
                          2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: QpFUZ6NMXdpCwRHk8KFF+HTZki6FqjKvt1+CkV1eX/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d4:3f:53:5c:a0:57:c4:d9:d5:91:b9:0d:96:ed:bf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
        Validity
            Not Before: May 15 14:00:42 2025 GMT
            Not After : May 16 14:00:42 2025 GMT
        Subject: CN=41c86bde56f546a4731921fa0a5ab38c33766513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:7d:fe:40:28:29:09:ea:72:f9:ee:f8:b1:
                    63:27:dd:0c:ec:a0:9d:12:a6:0d:83:8b:d9:27:09:
                    55:d9:5e:0e:58:a8:13:fa:83:fb:5a:92:ce:8b:17:
                    2d:7a:67:f2:4c:94:e4:49:01:64:84:68:7c:05:5e:
                    9c:dd:0b:f6:25:b4:d5:b0:b4:03:80:72:70:9f:47:
                    94:dc:16:5c:c3:0a:a3:f7:c3:f1:fe:f6:e8:08:10:
                    c2:c8:be:e8:db:df:f9:13:fd:d9:14:e7:e5:fe:66:
                    db:ad:a8:89:c1:82:b1:07:75:4d:80:c3:62:66:5a:
                    5b:b3:39:59:ef:38:a1:7e:03:0b:92:9b:79:34:c5:
                    60:59:96:b0:b3:90:53:2d:f2:b6:2c:56:2a:cd:92:
                    ad:9a:bd:88:f8:85:d1:a9:4f:a6:03:3f:9d:89:c7:
                    87:b7:ea:e0:12:ac:0a:d7:77:a0:be:2e:76:60:06:
                    36:9e:71:25:71:29:fd:17:3e:67:90:77:13:1c:9c:
                    65:a3:44:6b:76:2c:b6:5d:34:38:01:1e:b7:15:a0:
                    61:94:c8:d9:fe:41:a3:0b:56:24:1e:27:62:18:6e:
                    a9:23:2d:6d:07:74:92:e4:a6:cb:f8:57:37:95:f5:
                    b4:27:e1:2e:ce:77:96:2b:38:eb:0a:a1:a3:b4:fe:
                    77:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C8:6B:DE:56:F5:46:A4:73:19:21:FA:0A:5A:B3:8C:33:76:65:13
            X509v3 Authority Key Identifier:
                keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ce:6d:6b:69:56:43:5b:3b:cd:7c:66:35:aa:5d:22:9d:e2:
         cd:01:2c:a0:b0:f7:74:27:21:c2:c2:4b:48:58:84:6a:dc:7c:
         24:7a:52:90:0c:54:08:1f:9c:e0:ec:5b:4f:e3:6c:ac:dc:81:
         c5:dc:f6:5f:48:6d:27:89:a8:20:65:9c:5b:b7:b7:eb:11:24:
         b9:ca:1e:da:47:b4:4f:ab:f4:b9:f7:44:32:4e:6a:42:0b:1d:
         2b:51:4f:6f:65:ac:40:ce:ed:53:e0:67:6b:93:b3:a1:8e:f3:
         c8:41:6c:be:34:7a:8c:cf:ee:46:32:13:ca:e9:7b:d1:55:98:
         9e:7a:b3:86:d5:c9:69:1e:ee:da:41:28:76:83:48:0f:13:39:
         0a:25:a6:7d:d0:76:3b:e4:92:31:31:a4:e8:50:8f:0f:91:e8:
         1b:b2:57:44:0c:6b:75:d2:29:47:cd:f1:1c:07:78:22:a6:a5:
         81:bd:6a:5f:52:ea:3d:78:c8:ac:0f:01:ca:ff:bb:ab:36:04:
         a0:d9:33:a2:63:55:f8:bf:fd:43:a4:52:c1:18:1b:fb:e0:b6:
         6a:9e:89:48:40:47:b3:5d:ad:4b:0c:52:63:87:de:0a:55:6f:
         69:27:93:2a:04:37:a1:fb:0a:58:97:f8:cb:33:9a:bd:1c:2f:
         ed:08:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:23:31 2025 by rpki-client