Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
File:                     WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft (raw, json)
Hash identifier:          7VnO9Vksm6BaIiZ015cekzg/clsB72v9W11qZC0n/WE=
Subject key identifier:   96:E4:8D:13:BF:67:01:9C:9A:EF:0F:6C:DE:A2:CC:D7:9D:16:84:AA
Authority key identifier: 5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A
Certificate issuer:       /CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
Certificate serial:       0196C0B867F3E0F05BF46011BF2BB5314164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
Manifest number:          1129
Signing time:             Sun 11 May 2025 19:00:32 +0000
Manifest this update:     Sun 11 May 2025 19:00:32 +0000
Manifest next update:     Mon 12 May 2025 19:00:32 +0000
Files and hashes:         1: 7_MeqSoypZvgs9ZAL0kEwYQ0u1c.roa (hash: 8NO2vJikvip/otF7vMKB7776/r0hurKGavAakZtmDS4=)
                          2: WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl (hash: hGFWlGLTGheI1C8evXcaO0npcb8agOkfFLkwuuIPU8c=)
                          3: tzFD8X16hDfmCWt1Dl4XGdomYg8.roa (hash: njuYkI0SwGGHpocv80e/q9DE78xBX5bJk4xkczhpvI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 19:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:67:f3:e0:f0:5b:f4:60:11:bf:2b:b5:31:41:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1829ad467b4e73ffe691ec146b56b36909f51a
        Validity
            Not Before: May 11 19:00:32 2025 GMT
            Not After : May 12 19:00:32 2025 GMT
        Subject: CN=96e48d13bf67019c9aef0f6cdea2ccd79d1684aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:16:4b:09:27:ec:f1:6d:78:99:36:49:f5:
                    86:ea:0b:dd:c3:ea:13:ff:13:d3:e7:7e:15:bc:42:
                    d8:02:b3:3f:ab:77:61:9c:51:c6:4a:94:0b:14:76:
                    b9:9b:93:81:0b:f6:89:4f:6f:60:86:12:cf:01:cc:
                    09:ce:e9:03:67:18:18:bf:b5:f7:c2:95:83:5a:3c:
                    25:9a:80:1f:fa:0f:42:aa:85:71:28:99:85:f4:cf:
                    81:f1:3f:99:08:14:4a:e7:fb:f7:09:0a:70:5a:40:
                    be:e0:d1:c1:73:a8:91:85:ec:1c:f2:ca:e9:66:61:
                    66:fb:55:6b:95:10:d2:96:48:3c:4f:ef:8c:45:99:
                    41:08:e3:1d:e6:10:ef:ef:72:94:cc:a9:91:d0:6f:
                    75:91:3b:01:4f:63:bd:0c:00:02:31:6f:92:b3:a5:
                    72:e6:74:39:39:6c:0a:62:35:2a:e3:7b:8f:02:01:
                    32:52:5a:61:2a:5b:39:25:6c:6d:87:8d:74:d9:27:
                    2a:4b:9f:cf:ef:ce:38:8e:cf:9a:04:a7:35:40:a5:
                    9e:1f:87:88:d4:bd:11:59:51:65:4b:5e:e9:f1:2c:
                    2f:83:85:9a:85:13:3e:7e:89:1c:9b:81:ae:ca:c0:
                    7b:bd:de:4a:99:dc:c6:69:2d:a0:9b:15:9c:8c:69:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E4:8D:13:BF:67:01:9C:9A:EF:0F:6C:DE:A2:CC:D7:9D:16:84:AA
            X509v3 Authority Key Identifier:
                keyid:5A:18:29:AD:46:7B:4E:73:FF:E6:91:EC:14:6B:56:B3:69:09:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/32f453-f797-4019-a086-74b6faa3c877/1/WhgprUZ7TnP_5pHsFGtWs2kJ9Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:30:6e:8b:75:ef:79:1b:17:86:30:e5:5c:c1:b2:75:3a:0d:
         38:14:31:e2:d6:47:e4:69:ca:0d:16:64:e4:78:55:f8:6e:8d:
         c3:ae:6b:ae:4c:be:6b:6a:e9:e0:cf:9c:a0:73:ca:58:f6:68:
         05:0a:de:ea:c3:a3:e0:d3:08:c2:ab:36:92:62:2c:14:06:66:
         7d:72:13:85:a6:6e:a4:5d:b3:90:cc:00:8f:b4:5a:75:39:63:
         d9:30:53:f7:70:8e:56:d8:1d:a9:d2:c9:44:1b:0e:c2:c7:77:
         5a:f2:a5:7c:a2:d3:1f:ed:d5:49:97:98:9b:b9:0e:a2:ac:23:
         6d:51:6b:05:8e:a4:68:0c:1e:c6:67:84:54:af:27:fc:15:0f:
         ea:01:1c:86:b2:13:30:a6:f1:99:5f:83:4b:55:fe:32:d5:85:
         d4:dc:12:26:b5:93:d4:12:cc:d6:a2:57:b7:ca:8f:e0:73:a7:
         91:73:01:d1:f7:4e:98:61:8b:ad:54:f3:7d:68:7c:f8:43:27:
         da:f7:34:b0:ba:51:9e:3a:38:2f:ff:5b:9f:0f:5d:33:cd:5e:
         70:4a:c5:d9:f6:47:27:27:31:4b:b5:32:73:03:b9:f2:69:e6:
         a5:9e:e3:be:1c:d6:91:9f:d5:fd:63:d4:57:51:94:07:30:6d:
         f8:a5:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:27:13 2025 by rpki-client