Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File:                     wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier:          aOyPuOI6U2+U0+LwMiWFXNoqlaTmRWfjOHw7syxl+l4=
Subject key identifier:   2D:6A:D4:10:D8:36:28:FD:DD:C1:5C:2D:4A:6B:11:B7:4A:B7:91:63
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer:       /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial:       0196B3A146487DBE69AFC921E9E50A559935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number:          153E
Signing time:             Fri 09 May 2025 06:00:12 +0000
Manifest this update:     Fri 09 May 2025 06:00:12 +0000
Manifest next update:     Sat 10 May 2025 06:00:12 +0000
Files and hashes:         1: U48ecbKwcHeg61Lsn-9oJV9fZ1M.roa (hash: 4OZhDTAYRi1p6Bim6OrHHauK8Tj1XNwxbEYFfDDGDS8=)
                          2: W7Ly1Qh7TAF9UC5Ryue85_XQuXw.roa (hash: Mzqyt+0iiHuJ8ffJgOXtkPZgAbIE5kucHWjmbNGM61Q=)
                          3: rbSVHILo7KFdyfKkJiVN3ULREeA.roa (hash: +QOKE2skzry0xtqfIBGKUWUhJ09lXvKf9/a8XMywLNU=)
                          4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: SWejQBb/n16iF9a0Voex40rbI2z8RqsBdTG3hL0ne+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:a1:46:48:7d:be:69:af:c9:21:e9:e5:0a:55:99:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
        Validity
            Not Before: May  9 06:00:12 2025 GMT
            Not After : May 10 06:00:12 2025 GMT
        Subject: CN=2d6ad410d83628fdddc15c2d4a6b11b74ab79163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:6f:b3:83:54:8e:eb:85:c7:2d:c5:4d:6d:
                    d8:7a:75:9c:aa:f8:92:08:69:a3:3c:dd:7e:be:22:
                    81:72:73:2b:b7:ce:fb:ab:c0:73:df:9a:fc:5a:87:
                    e6:0c:7d:00:bc:15:59:0b:5d:6e:b3:39:b6:77:cb:
                    6f:cd:3c:18:7c:be:82:cb:44:6d:c6:5e:e3:c5:82:
                    a5:dd:a2:9a:d8:1b:af:0e:ff:60:a9:4a:cd:1a:45:
                    1f:46:9a:fd:56:7e:fd:07:d3:41:2c:ae:8e:ab:e5:
                    06:4b:ca:ec:1e:9e:aa:4d:ba:39:63:2d:21:61:64:
                    0f:b2:94:62:de:3f:25:cb:84:51:4f:bf:88:09:6e:
                    c1:c4:5a:5e:93:28:bd:89:b9:01:b3:87:ad:40:1d:
                    75:ef:98:a3:5a:2b:2c:1d:f5:01:e8:fa:0e:c0:12:
                    8d:aa:25:61:7d:e5:a2:c5:7d:b7:fd:7f:6a:1f:45:
                    9d:76:9e:3d:2b:95:40:31:f7:4b:60:45:5d:e3:1c:
                    14:30:4c:4a:bf:4b:f8:14:ba:0a:53:bf:4a:ce:5d:
                    a7:ce:3c:40:a5:66:c3:07:64:bf:1a:d9:c1:2a:6d:
                    29:f8:d7:e2:11:ec:90:53:fc:f1:25:f7:76:8a:c5:
                    33:6b:7d:43:39:7b:c2:98:d2:b7:39:a4:8b:32:09:
                    79:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6A:D4:10:D8:36:28:FD:DD:C1:5C:2D:4A:6B:11:B7:4A:B7:91:63
            X509v3 Authority Key Identifier:
                keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c0:3c:9c:48:da:36:e4:b5:22:d4:1a:42:3a:b4:d3:f1:bd:
         10:be:50:f1:32:dc:8e:2d:2c:9c:80:ab:38:fa:e0:fd:cd:36:
         7f:77:41:84:ae:7e:04:f5:34:d8:1c:a1:00:27:34:41:26:70:
         b8:bd:c9:93:23:fb:3e:74:04:28:7d:ff:80:3c:db:f5:b9:9c:
         83:a8:91:e0:08:40:0f:62:ae:84:9d:25:9d:0c:24:9c:dc:32:
         91:a7:f8:8c:7d:55:06:c2:fe:4a:55:50:14:ea:3c:cc:c5:96:
         06:de:d4:b5:68:1c:0d:98:ba:42:59:ab:8b:0c:a0:7a:fd:2b:
         92:4c:6f:07:99:c6:d4:40:67:52:7c:7f:02:de:f7:3e:ef:c7:
         ee:ba:b5:51:9c:23:02:83:a0:7f:d0:c0:7b:da:fb:3c:c1:6b:
         1d:9f:e4:da:63:08:4a:9f:44:0f:84:a8:71:f2:d0:70:d0:dd:
         27:63:02:90:6e:3a:91:95:2c:76:a4:26:54:b9:7f:8d:3c:41:
         d6:e4:4c:7c:bd:a7:4f:57:f8:5b:a8:94:65:81:f3:b5:03:8a:
         36:54:e4:c6:86:d8:b2:50:3f:9b:f3:86:79:2d:07:c3:6e:5b:
         16:9c:8a:25:3a:ac:e3:18:18:df:d0:7e:cd:21:62:5c:37:50:
         6f:8d:c4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:33:34 2025 by rpki-client