Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          DQi6IRzGoc1cyHoujMxUXjuZab9rW0agtgvD4wPcdgs=
Subject key identifier:   2B:85:52:12:D9:9B:C0:E0:3E:50:68:C2:34:99:77:36:7B:85:89:A6
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       0196BE5C366D0D2B86608D03B49F27DB6C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          1535
Signing time:             Sun 11 May 2025 08:00:36 +0000
Manifest this update:     Sun 11 May 2025 08:00:36 +0000
Manifest next update:     Mon 12 May 2025 08:00:36 +0000
Files and hashes:         1: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: YAPSfrE8XGdYB5b65WI/Pxg2HTIqfwRuPxOdHVwQwMk=)
                          2: xBCmHDQdfHeyTzhklHfbHAtEjac.roa (hash: v4hxG9/eDV05pt8qFpOVheOZJs0ehEmajsKsd5Fgmbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:36:6d:0d:2b:86:60:8d:03:b4:9f:27:db:6c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: May 11 08:00:36 2025 GMT
            Not After : May 12 08:00:36 2025 GMT
        Subject: CN=2b855212d99bc0e03e5068c2349977367b8589a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4d:fe:6b:03:2f:f8:3d:be:bc:02:ef:10:92:
                    a5:31:75:71:d2:d9:0c:d6:5a:cd:5e:33:f7:80:fb:
                    29:7b:71:13:96:fc:7e:d5:99:1b:ea:80:a2:06:c8:
                    c9:f1:7f:96:f8:b6:94:a9:ea:a0:45:5d:af:4c:a9:
                    82:ed:31:90:21:e3:0f:31:71:e1:53:6c:16:d9:4b:
                    cb:72:b5:40:43:af:1e:c9:98:98:38:a4:06:ff:cd:
                    be:06:dc:70:53:2a:b8:fb:23:32:2f:09:92:6f:ee:
                    b0:c1:17:cb:0c:64:12:fb:2e:cf:97:90:f7:54:de:
                    d1:56:c0:39:79:e7:52:02:b6:c0:73:cf:0e:b6:e2:
                    00:41:7c:7d:6b:95:9b:41:01:2b:36:23:0d:32:71:
                    d5:d9:0c:3e:a9:69:70:69:e8:ce:b5:c7:0f:5d:dd:
                    8c:d5:10:86:27:37:46:bf:29:c3:c0:4a:ec:22:31:
                    ff:cb:2a:a8:4e:56:2f:c8:80:69:9f:81:e2:dc:00:
                    40:02:92:c0:ed:50:0b:6a:11:3d:7e:c9:9a:8a:11:
                    98:f8:8a:78:f7:9b:69:6a:4a:d6:ad:c8:c1:43:26:
                    9e:2b:1f:59:b0:7b:e9:c9:9e:4f:5b:f1:78:4b:74:
                    71:6c:36:62:67:0a:a9:90:b0:0b:2f:59:db:b2:38:
                    d2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:85:52:12:D9:9B:C0:E0:3E:50:68:C2:34:99:77:36:7B:85:89:A6
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:55:2a:60:3f:80:82:f4:80:06:cb:38:6e:87:58:ed:ce:f3:
         24:bf:32:96:11:31:0e:1b:e4:4c:0b:00:a5:d2:16:84:70:29:
         34:6f:b4:8e:9e:81:2a:ce:7f:04:6a:46:68:9b:de:79:73:27:
         12:a9:3c:65:94:41:b6:10:d6:7c:89:75:27:5b:50:87:f4:f3:
         4f:05:c7:6a:66:1a:a5:96:84:8e:40:39:26:95:4c:8a:60:41:
         68:12:17:fe:c5:0c:5a:f1:8e:38:a5:94:00:20:ee:ef:c2:37:
         7b:af:e1:2e:a6:dc:f8:a4:60:dc:c4:3b:cf:f8:65:4f:48:55:
         33:41:7c:0e:62:fa:60:51:76:15:cb:cb:95:26:b2:57:a4:48:
         cc:da:e2:1b:05:61:ff:8b:6b:b5:7e:4f:0b:54:a8:80:a5:57:
         0c:cd:74:64:2b:d4:a1:b8:34:99:26:6a:5c:4b:2f:bd:d5:e7:
         8a:8b:ff:5d:1e:e0:45:4e:50:b0:d3:63:ac:df:69:66:fe:ee:
         c1:6f:c9:29:8f:53:53:11:db:92:39:1b:db:60:aa:5b:09:8e:
         dc:81:af:e7:82:58:f0:fa:45:5a:e9:9b:86:d7:e8:a8:21:0e:
         35:85:c2:7a:88:b4:a4:03:8b:5e:f4:4f:ee:3e:c4:fe:37:42:
         56:37:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:51:07 2025 by rpki-client