Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File:                     wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier:          5Y648l9IMjQdqDvltduivS7Womda8z7xYs+Bn/bIEmg=
Subject key identifier:   8E:1D:57:21:08:18:53:B1:EF:B8:85:3E:60:9C:CB:FD:2A:55:61:AA
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer:       /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial:       0196B85A75EC6B16CCED2ED6BDA256C6F4C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number:          03BC
Signing time:             Sat 10 May 2025 04:00:58 +0000
Manifest this update:     Sat 10 May 2025 04:00:58 +0000
Manifest next update:     Sun 11 May 2025 04:00:58 +0000
Files and hashes:         1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
                          2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: /IyVOixwLfmWyt12Wd0k63b1DghIuzpoYN/kw3PDD44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:75:ec:6b:16:cc:ed:2e:d6:bd:a2:56:c6:f4:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
        Validity
            Not Before: May 10 04:00:58 2025 GMT
            Not After : May 11 04:00:58 2025 GMT
        Subject: CN=8e1d5721081853b1efb8853e609ccbfd2a5561aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:18:18:f0:56:c8:df:30:2d:58:4d:22:91:
                    c4:df:41:ab:67:64:c2:2b:be:97:9f:e5:10:7f:a9:
                    e1:30:a5:4d:8e:52:31:af:12:df:0e:f8:b1:3f:e3:
                    61:ab:79:09:43:f5:9b:ba:16:5c:90:80:f1:35:ef:
                    a5:ef:b5:1f:df:d0:cd:3c:fb:f2:62:f6:5a:d6:3d:
                    30:2a:ef:4b:d2:a6:8e:42:77:32:af:9c:b2:ab:26:
                    c1:df:2a:12:fc:31:29:71:f3:30:82:1e:02:10:8d:
                    9e:69:28:c1:3b:f1:43:2b:e9:6a:b0:d4:76:0d:55:
                    a4:59:25:6c:36:cf:34:0d:52:67:d7:74:6d:14:93:
                    da:d2:59:83:95:c1:ce:ac:f7:0c:6a:7a:44:6f:a0:
                    ed:a4:ef:20:1a:6f:e5:cb:27:26:c0:fa:1d:ce:33:
                    65:89:61:06:53:0f:0c:75:62:43:8b:48:ff:b5:66:
                    53:5b:8a:0f:1f:7d:af:5e:ef:fa:08:30:8a:ba:82:
                    22:15:19:09:17:5e:8d:f2:93:80:5c:87:25:3d:01:
                    22:cf:4a:80:29:43:56:dd:31:79:59:c3:7d:42:08:
                    83:ef:4a:d0:b1:5f:80:c7:50:ff:32:f7:cc:76:0d:
                    8c:b5:b1:07:d7:d7:11:6c:c5:e1:98:a8:30:5d:3a:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:1D:57:21:08:18:53:B1:EF:B8:85:3E:60:9C:CB:FD:2A:55:61:AA
            X509v3 Authority Key Identifier:
                keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:6b:78:13:ad:aa:ee:77:71:20:1f:d5:b4:48:78:bc:cc:
         30:5c:b9:6f:e3:6d:3a:7f:96:d0:ae:ab:77:3a:71:ab:41:ed:
         d6:70:99:00:d3:22:e9:d6:d5:2c:da:cc:45:93:36:7b:73:6e:
         8d:d1:b2:8b:6c:44:8c:74:dd:8f:a6:8a:98:fe:86:26:64:31:
         67:2c:47:94:02:5f:05:c3:4b:9e:60:24:53:4f:1c:ea:8e:76:
         22:c8:73:a9:04:92:65:3c:54:13:bc:8d:d1:bc:32:73:95:1a:
         23:59:91:50:09:0b:29:bd:92:b4:30:92:46:e5:79:21:47:ea:
         ae:0e:48:62:fe:ce:bb:99:5e:aa:b5:ff:05:dc:fe:a6:19:42:
         07:33:62:56:02:03:23:e0:33:88:a4:22:6a:aa:8d:cf:9c:64:
         27:84:dc:cc:75:fa:86:9d:d5:5f:2e:96:dd:15:e9:1e:f8:c3:
         5e:c6:bb:30:f5:49:3c:91:bf:1f:09:21:34:a7:a8:81:d5:99:
         18:15:81:c7:59:8c:73:d0:97:e5:b6:da:e1:0a:4c:48:8d:94:
         e1:c2:0c:ab:77:63:cb:ef:c3:03:af:20:fa:b4:c4:0b:94:d0:
         1e:9c:dd:07:bd:cf:b8:62:4e:d5:db:d6:46:ab:0c:e2:33:15:
         fa:c6:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:52:15 2025 by rpki-client