Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File:                     wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier:          k69P6x11R+AKm1ckXZZVeTCDPeGaA+BVoOtYXnzM8QQ=
Subject key identifier:   2B:9A:0C:3D:DF:8E:F1:E0:D6:1E:05:58:E5:D2:66:FE:58:73:E3:CE
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer:       /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial:       0196A352B720854AB302D04B4B53D7719114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number:          047A
Signing time:             Tue 06 May 2025 02:00:29 +0000
Manifest this update:     Tue 06 May 2025 02:00:29 +0000
Manifest next update:     Wed 07 May 2025 02:00:29 +0000
Files and hashes:         1: irXVQKZrZFERT0qlEvOEYo8eStU.roa (hash: SM6wGE9/EVXEBgUTm1zsTO58ye4c68Xl+iOGBhNr7JE=)
                          2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: 1EiN96bLtEYqY4DuaVn5PEO5XsQ8deZxBMqrIJmtkao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:52:b7:20:85:4a:b3:02:d0:4b:4b:53:d7:71:91:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
        Validity
            Not Before: May  6 02:00:29 2025 GMT
            Not After : May  7 02:00:29 2025 GMT
        Subject: CN=2b9a0c3ddf8ef1e0d61e0558e5d266fe5873e3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:83:69:8a:1e:46:07:9f:fd:bf:2c:cd:6f:
                    80:a3:b5:b2:fb:09:1d:7a:77:4a:21:85:b6:1b:cb:
                    ea:b8:f0:77:bd:de:3a:84:76:4f:95:f3:2f:27:6d:
                    56:f0:7c:24:27:8f:7e:69:a5:99:f9:a1:9b:98:e7:
                    38:86:87:c8:c9:f1:54:1c:d0:c9:bd:2e:96:c1:fa:
                    ad:4d:cb:2e:4a:cd:56:5b:1e:41:69:25:dc:8e:cf:
                    86:1d:fe:45:ee:d9:a9:ca:3f:ba:89:95:d5:bb:64:
                    0f:ec:38:91:8c:83:5e:7f:d0:4d:84:b7:77:94:06:
                    4c:4d:c9:e7:cf:f0:c2:6a:14:13:25:3b:25:b5:06:
                    83:68:fa:2b:b7:32:04:aa:2a:41:04:9a:09:cf:ed:
                    ea:9b:29:8f:a9:6d:ab:6e:00:72:8e:4a:b0:ee:e0:
                    2d:4a:b8:10:bd:7a:be:cf:96:ee:69:c5:ac:7d:70:
                    8e:24:12:87:99:c6:7c:d8:76:51:5a:43:02:33:9e:
                    68:c9:9c:01:b5:39:e8:f2:47:88:ca:ce:e1:f2:7d:
                    2d:49:9f:a3:cc:1f:9a:fc:0a:4b:66:4d:37:76:27:
                    21:29:82:25:e3:ac:be:88:45:8a:f9:72:73:97:2e:
                    15:6c:90:14:28:0e:90:ed:96:20:e7:bf:9f:97:34:
                    df:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9A:0C:3D:DF:8E:F1:E0:D6:1E:05:58:E5:D2:66:FE:58:73:E3:CE
            X509v3 Authority Key Identifier:
                keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8a:91:c6:48:c1:d2:4e:3d:9d:d6:d3:99:f7:95:4f:d8:08:
         3a:60:55:33:71:78:e3:7b:b3:f6:c6:fc:ee:c5:93:be:88:bd:
         bb:30:ae:54:54:c7:0c:72:0e:0f:4f:47:12:7a:ba:b0:f9:d7:
         6c:c7:6c:fe:46:b5:d9:7b:67:2f:90:7d:73:bf:04:f8:2c:79:
         2c:6f:39:0b:a6:cb:5f:40:86:c5:15:9a:91:46:5e:44:db:3d:
         97:f2:e4:f5:b9:50:af:d0:bf:6f:a9:28:30:00:19:52:2e:00:
         a2:ce:f3:29:b5:c9:53:b1:e3:6a:6e:f0:4e:c6:23:64:06:0a:
         3f:0b:50:ec:dc:92:f7:93:2e:d2:61:a1:72:3c:15:db:4d:3b:
         cf:5d:75:a1:a2:4c:6d:82:55:1e:86:8d:d6:43:97:03:37:17:
         4a:a2:2c:82:3a:63:14:af:9b:25:cc:53:70:aa:94:3f:a6:07:
         b0:a9:2c:e1:e2:71:06:d8:1d:1f:d0:2e:ff:02:e5:84:b4:3e:
         11:39:c6:be:e2:da:2b:b8:08:b4:aa:15:ff:e3:3d:c0:d6:f3:
         c0:ec:87:70:93:0d:6b:5d:3a:ea:b4:95:c1:89:5f:55:11:2c:
         6f:9e:e0:a6:f4:44:e0:05:ad:fa:2c:05:92:c5:1e:7c:49:22:
         61:95:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:22:11 2025 by rpki-client