Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File:                     WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier:          M7cpy1F13SzhscwrzcqX4D/hfz0fo87OyfjxUen1O9o=
Subject key identifier:   F3:15:47:51:04:FA:52:89:89:F9:37:34:11:DB:F5:53:43:61:D5:F4
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer:       /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial:       0196A19B866155476A2EA13C749F900F0EAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number:          1526
Signing time:             Mon 05 May 2025 18:00:46 +0000
Manifest this update:     Mon 05 May 2025 18:00:46 +0000
Manifest next update:     Tue 06 May 2025 18:00:46 +0000
Files and hashes:         1: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (hash: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=)
                          2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: snYKrjRvvEODps1C64CY1ZipAyntNvNMU47hdJ3eI+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:9b:86:61:55:47:6a:2e:a1:3c:74:9f:90:0f:0e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
        Validity
            Not Before: May  5 18:00:46 2025 GMT
            Not After : May  6 18:00:46 2025 GMT
        Subject: CN=f315475104fa528989f9373411dbf5534361d5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:88:d4:82:19:7d:60:c3:c5:74:36:ce:0e:
                    4c:cf:88:18:b5:11:19:4b:02:dd:72:4f:2b:f1:3d:
                    09:ba:54:46:ab:2b:c2:56:61:a4:87:69:db:83:8d:
                    26:d0:d6:73:61:02:e4:ca:2e:66:e9:86:8e:28:af:
                    7e:39:f2:a6:10:f1:48:2e:ad:b8:83:06:8b:5d:be:
                    2d:8f:41:d2:9f:62:5b:ce:01:59:d7:0f:13:99:87:
                    15:15:7d:3b:5d:02:fc:77:63:6d:fc:eb:2f:8e:57:
                    b6:25:29:4d:51:4f:9e:e1:e2:77:34:e9:b7:04:2f:
                    df:7c:91:2e:c4:84:d6:18:f3:12:e7:0f:4a:fa:0b:
                    6f:dc:52:34:12:93:9f:1d:be:c6:70:da:e4:63:18:
                    2e:dc:ed:6d:47:8b:47:23:e4:e8:26:61:27:b4:14:
                    fc:7f:2c:4f:e8:ea:1b:a9:74:b5:8f:82:b4:01:1c:
                    15:b4:60:6a:2b:32:4d:d5:4f:28:04:1f:b2:6e:06:
                    a9:88:58:81:a8:7b:5c:ad:27:a2:88:03:a5:39:4d:
                    29:86:b4:2f:e8:31:bf:ea:63:28:4b:78:ba:76:7f:
                    8d:78:df:51:ff:1c:b3:5c:d1:71:27:2b:2b:1d:96:
                    8d:93:3e:fc:ec:22:4d:cb:9c:4d:1f:38:4c:67:f9:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:15:47:51:04:FA:52:89:89:F9:37:34:11:DB:F5:53:43:61:D5:F4
            X509v3 Authority Key Identifier:
                keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:9a:6a:06:c0:7d:ce:64:a2:fd:4b:de:3c:be:6f:44:f4:
         24:17:71:47:81:c7:72:87:23:c0:6f:8e:2b:19:79:64:67:3e:
         44:55:c4:e3:25:82:7e:e9:d3:22:e3:45:b1:46:39:38:9a:d4:
         62:db:0e:0a:d8:3b:21:27:94:87:1e:14:78:31:cf:37:11:3d:
         42:25:41:06:4e:87:3c:fc:5b:1f:fb:dd:65:98:93:d8:14:4c:
         ba:06:00:19:f8:e6:b5:c2:32:47:68:ab:b2:82:a5:91:1b:64:
         0a:0d:71:5a:e0:d1:1d:24:99:e9:2e:e9:22:2a:78:5a:16:15:
         b0:9a:4e:f2:14:40:50:4e:83:fb:ce:55:8d:3d:84:56:58:62:
         07:e2:8f:ea:13:be:4a:21:0c:81:1c:b5:53:6f:04:cc:95:8a:
         5b:b5:15:c0:cc:02:68:ce:16:d4:34:f3:71:44:6d:b1:4a:e8:
         18:6e:52:89:53:78:f0:3d:e3:5a:2d:1c:85:42:77:08:2f:a9:
         88:c4:41:5a:91:c0:f1:af:c8:6a:e6:07:cc:ed:23:e5:e8:b3:
         2c:45:d7:38:09:52:64:43:34:21:9d:75:b7:ea:e9:fb:1f:4c:
         32:9d:02:66:f2:ca:31:b3:14:a2:1c:ce:5c:8c:99:a4:62:42:
         7d:b6:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:49:11 2025 by rpki-client