Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          PjQ1txOyINqat6LDbuP3ZxtCdQKJoGoWBUpUkBj+Olo=
Subject key identifier:   FD:44:F8:EB:A3:88:22:56:EA:B8:B3:22:4C:A4:7D:44:23:75:93:8B
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       0196ACFB35E268027FCA499E6B4B92D83406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          0FA4
Signing time:             Wed 07 May 2025 23:01:06 +0000
Manifest this update:     Wed 07 May 2025 23:01:06 +0000
Manifest next update:     Thu 08 May 2025 23:01:06 +0000
Files and hashes:         1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
                          2: 4AZZgr-FtZ5C7UeruxhpUjmqfpQ.roa (hash: 1LrkJHOzTguh6JvPCNh6V6i/J0BR7h6wEY/GDxBjoTQ=)
                          3: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
                          4: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
                          5: mpKpYmY8DEGhZcV6ltJDz93teq8.roa (hash: 7UANVEML/0vRWe4hxTYzTFGxeQ0U+2SuSQ0y29OV6fo=)
                          6: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
                          7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: Y971va/VuRa3b/nuj8Jlm9/VULbZbDUK9Dk85T0P+OU=)
                          8: zlP9_orrw6aHHSv7bATBUkhqiRA.roa (hash: NvMCHUJ14Lp9H+mYdu1xuY40BR4qWMQHtDYR2W3Odek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:fb:35:e2:68:02:7f:ca:49:9e:6b:4b:92:d8:34:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: May  7 23:01:06 2025 GMT
            Not After : May  8 23:01:06 2025 GMT
        Subject: CN=fd44f8eba3882256eab8b3224ca47d442375938b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:6e:08:dd:f1:0c:39:6b:b8:4a:2f:3a:f5:
                    f7:82:08:9e:50:92:b8:87:be:5c:4b:8c:d4:7e:2f:
                    ea:b5:29:da:fc:49:2a:71:35:ea:68:7e:ee:a0:a3:
                    70:60:94:86:28:26:3b:c3:d1:8c:4b:87:0a:e8:c2:
                    8c:4c:d7:27:15:ff:c0:ac:a4:85:54:32:da:e4:bf:
                    40:80:75:7c:10:2c:a8:1f:f5:b3:38:1b:98:3d:90:
                    e3:a6:e6:f9:ff:21:6e:26:4e:d4:e4:ee:12:34:43:
                    f2:11:9a:6a:97:89:e0:94:a8:73:9f:19:cf:0a:84:
                    ed:9b:c4:68:de:f8:51:67:c7:17:5e:e8:ad:87:5b:
                    05:c2:85:9e:57:f5:aa:c8:f6:2f:d9:50:6a:44:eb:
                    99:c3:cf:8f:9d:d8:67:5e:f3:1f:57:04:e8:47:c2:
                    b6:38:17:39:0c:20:89:d9:2c:01:5d:54:80:d7:86:
                    95:b1:ee:ac:f5:4a:27:da:02:d7:8f:2b:c3:87:0f:
                    f4:84:5a:36:cf:78:01:8a:99:90:8f:e0:f7:80:65:
                    b0:9c:4a:55:b1:24:57:ed:b8:c1:1a:21:67:58:3c:
                    6f:aa:3b:8a:4b:b8:81:e9:35:f7:73:f3:0f:8b:1b:
                    6d:b9:30:fd:a7:2b:a2:78:17:33:c9:ad:3b:b8:22:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:44:F8:EB:A3:88:22:56:EA:B8:B3:22:4C:A4:7D:44:23:75:93:8B
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d2:c3:85:64:30:86:20:e0:8e:bc:90:c1:21:92:03:d0:07:
         a6:28:91:4f:e1:54:4d:0c:93:44:5c:e3:69:6f:5e:9c:a7:44:
         ed:95:f1:6e:6c:22:7c:09:b6:67:f6:61:b4:85:04:55:a9:b4:
         42:c0:57:82:04:d5:3f:c9:72:fa:d1:4a:70:0c:73:c3:75:40:
         2b:7f:2d:64:7e:04:ed:90:ad:e7:d3:db:cf:53:e7:9e:c2:0c:
         2a:06:aa:64:5b:33:f6:95:17:da:c2:4e:70:e0:ff:a6:40:fd:
         9c:a8:93:01:26:d0:0c:b4:5b:58:49:23:28:d9:95:74:17:45:
         ef:c7:9b:d8:8b:2a:93:0d:49:1e:13:5a:c7:d6:3f:92:dc:8f:
         64:a0:04:1f:56:4e:cd:e1:5d:ab:6d:7d:b1:fb:50:37:6a:10:
         66:a4:4e:c6:08:6a:90:dd:25:1e:dc:c5:9d:69:60:02:83:fb:
         34:85:88:4e:1e:9c:ce:1d:82:d9:cf:6c:1f:15:5e:71:f6:32:
         01:1f:f3:ed:4b:a8:8b:08:bb:c6:ca:46:4d:b0:af:d1:eb:b4:
         ef:94:94:78:7f:21:55:d5:f6:50:b1:c2:8f:6a:a6:9e:1d:52:
         55:3f:0b:38:2c:4a:37:05:3e:d0:42:75:ab:23:3e:71:95:4d:
         6f:26:f1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:18:54 2025 by rpki-client