Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File:                     wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier:          Ma7938HZDbJpBLdYVFpb92GO1voH3hX8xmN0+4ImN+k=
Subject key identifier:   08:58:E1:B7:AA:2E:FD:69:12:1D:73:87:C4:FC:90:6A:4C:E1:8B:C3
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer:       /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial:       0196AA675ADD6A8CC4C049590C4D078F5CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number:          1484
Signing time:             Wed 07 May 2025 11:00:22 +0000
Manifest this update:     Wed 07 May 2025 11:00:22 +0000
Manifest next update:     Thu 08 May 2025 11:00:22 +0000
Files and hashes:         1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=)
                          2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: vVDziescqxGQOAi1+Wqy8+isT3NoI60b+niR2W5DvnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 11:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:67:5a:dd:6a:8c:c4:c0:49:59:0c:4d:07:8f:5c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
        Validity
            Not Before: May  7 11:00:22 2025 GMT
            Not After : May  8 11:00:22 2025 GMT
        Subject: CN=0858e1b7aa2efd69121d7387c4fc906a4ce18bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:6d:d6:97:9c:bb:dc:51:5c:80:a9:c8:16:
                    05:40:9e:44:db:13:0f:e0:98:33:7a:9e:7d:4d:e7:
                    54:fa:17:4b:6d:4f:1f:20:32:d8:9f:0b:59:53:93:
                    33:28:72:bc:60:d9:ba:c4:a1:4c:02:99:2f:9a:1b:
                    42:84:d2:b7:e3:d1:db:c4:e4:7d:da:85:2c:2c:e8:
                    8c:b3:88:a2:1d:c2:10:f0:4f:6c:a0:51:8b:7b:b3:
                    ca:5e:2b:9e:9b:12:a7:65:b7:88:04:c2:3c:23:fc:
                    f1:23:e9:8e:0a:3c:ee:20:0a:93:73:b5:29:fa:e4:
                    b1:ba:fc:dd:61:15:ca:55:90:21:6a:c9:26:10:35:
                    10:e8:ad:8d:d5:70:54:5b:d8:9f:de:b3:2b:28:90:
                    b3:37:f7:29:2c:af:c1:27:01:c5:f2:11:d9:3d:6c:
                    b3:ca:1f:91:2c:28:50:b1:02:e9:53:e7:4f:ea:31:
                    36:5e:3b:cc:e1:a8:7b:0c:21:8e:ef:05:77:6d:53:
                    bc:67:86:c6:6b:d7:10:d7:0a:22:a9:d7:66:c8:0b:
                    e1:40:b4:ec:2d:ca:ac:19:93:41:50:d7:2f:16:04:
                    b1:c6:75:7e:7d:ef:5c:9e:5c:2c:d1:44:4e:1f:d6:
                    17:cc:14:a9:6c:59:91:ed:ff:6c:5d:7a:fe:34:fb:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:58:E1:B7:AA:2E:FD:69:12:1D:73:87:C4:FC:90:6A:4C:E1:8B:C3
            X509v3 Authority Key Identifier:
                keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:af:7e:29:e8:25:6a:5e:55:ba:01:ca:da:cf:7b:ea:69:
         eb:56:09:52:e2:e7:87:6b:5f:91:89:1b:ff:38:7d:ca:9e:2d:
         74:0d:a1:ba:84:2d:9a:76:c0:34:78:90:6a:2f:24:1f:59:fb:
         10:e9:1b:be:f0:41:0e:ba:a5:67:72:4a:8d:c8:f5:4e:8f:84:
         56:6a:aa:32:ed:bd:e0:bd:19:9b:88:9d:65:cf:65:e5:98:43:
         c4:d5:5c:0e:89:d0:f9:bf:6a:1f:47:fc:8e:eb:7c:3e:52:b7:
         86:49:44:fd:ac:c5:77:4d:fc:19:0d:6e:a3:51:3b:1c:c0:c4:
         41:e5:79:55:ee:6d:b2:1b:a5:e7:60:5f:bb:d6:85:8f:f0:19:
         6a:f0:55:1f:97:20:a0:0e:3e:e3:c4:da:51:a1:de:f2:e4:d2:
         95:13:dc:6f:57:1a:42:aa:1e:2e:4b:46:4f:6e:96:1c:89:6d:
         98:f4:2c:97:90:bb:f3:15:92:e7:e0:3d:b7:db:33:52:79:8e:
         ff:dc:99:77:8a:b4:e2:f2:5f:d9:83:b8:f8:82:89:a3:bf:da:
         5e:2a:94:3b:58:9c:d5:9b:bf:bc:ad:db:ec:c0:51:69:f2:b5:
         46:5f:52:5b:41:94:eb:28:01:29:fa:b6:27:c2:d9:0f:e1:a6:
         38:d6:49:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 15:37:01 2025 by rpki-client