Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File:                     wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier:          FLuexRucfGfG/SIdohelPu27thnfchPZssb7teI4POc=
Subject key identifier:   93:4F:FE:6C:A9:80:B2:BB:CF:6F:66:6C:E6:60:7B:A2:53:F5:28:B9
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer:       /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial:       0196C728840287C66DF26E82FE1E1A47CA76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number:          01A0
Signing time:             Tue 13 May 2025 01:00:43 +0000
Manifest this update:     Tue 13 May 2025 01:00:43 +0000
Manifest next update:     Wed 14 May 2025 01:00:43 +0000
Files and hashes:         1: neX2MoGsrH8B_YW8P6u0bRQHpTA.roa (hash: R0pBtoL7OVYDCk4RiVwa4ZDNGgYBxm8WfoJ2QgcKQh0=)
                          2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: HEinQegD2oyBbdq6fFQD2G0xq1vAyaopXbMHnDI3aYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:28:84:02:87:c6:6d:f2:6e:82:fe:1e:1a:47:ca:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
        Validity
            Not Before: May 13 01:00:43 2025 GMT
            Not After : May 14 01:00:43 2025 GMT
        Subject: CN=934ffe6ca980b2bbcf6f666ce6607ba253f528b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:49:92:f5:86:d7:c2:3f:1f:53:b9:8a:7d:
                    20:03:ce:62:57:ca:49:01:15:74:57:25:64:02:ac:
                    ca:68:00:67:1d:dd:a7:13:ca:92:9c:a7:ea:0c:d2:
                    48:78:30:9d:ab:40:59:51:49:e2:e9:6b:8d:67:7c:
                    75:8e:9b:47:f4:98:ec:a7:95:2e:d0:54:f3:7e:2b:
                    16:06:b5:22:7f:b7:d2:c2:23:72:2b:7f:06:ff:5c:
                    dc:36:39:74:f2:33:39:bc:52:37:2d:a7:54:5c:04:
                    4e:1c:be:7c:32:28:d7:4e:8f:bb:5d:7d:bc:e5:6f:
                    74:1c:03:2d:83:c7:bb:96:72:71:28:96:ec:bb:bb:
                    7d:6f:34:ea:fc:bc:d9:e8:75:e8:57:ff:25:fc:7c:
                    10:6e:1d:78:24:eb:96:93:f3:b3:43:e7:7d:d5:c0:
                    14:bf:a7:01:b2:7a:48:1a:e7:ab:3c:b0:91:23:56:
                    83:17:22:93:2b:8b:3f:98:95:2d:a5:3e:b1:7a:57:
                    e1:27:1f:22:c2:97:3b:1b:95:4a:c7:ae:d5:1f:32:
                    66:50:09:85:12:23:73:1a:7e:43:b8:21:fd:b9:b6:
                    5e:0b:2a:bd:7d:1d:f0:72:6f:60:e0:45:b3:da:8d:
                    e9:35:a2:d6:04:5b:64:e4:74:c2:c9:9d:11:eb:5a:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:FE:6C:A9:80:B2:BB:CF:6F:66:6C:E6:60:7B:A2:53:F5:28:B9
            X509v3 Authority Key Identifier:
                keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:6a:2c:79:59:57:70:87:bb:c3:af:cd:9b:84:66:09:13:74:
         08:7c:5d:5f:89:db:6f:2e:9f:4e:d2:5f:ca:4f:04:4a:1c:fb:
         9a:17:d1:4e:0f:e0:25:bd:4a:f0:2f:02:19:b0:c5:b2:65:d2:
         7a:54:02:05:85:34:c2:64:29:4b:a0:28:4b:1d:53:8d:c9:1d:
         7a:51:71:b4:5f:15:a9:5e:e6:a4:9c:6d:4f:6a:78:98:74:8f:
         60:a5:88:e0:c1:21:8b:9b:b9:03:6d:e6:f8:91:8d:ae:cd:ae:
         68:f4:8c:fa:23:5c:bf:a1:85:04:2d:3d:ef:91:f4:ba:65:b7:
         83:5c:53:04:bd:64:da:9f:92:2f:f0:a6:fa:f4:3f:22:19:2b:
         ed:cc:85:2e:e0:14:11:a1:c8:2b:e3:0d:e1:79:10:56:31:95:
         90:46:83:2b:06:d7:02:a6:fa:05:d0:f3:9d:85:c5:1f:ea:9f:
         be:84:bb:13:2d:86:84:6c:67:30:ed:a5:60:16:96:44:e3:40:
         8f:eb:f8:72:cc:94:b5:42:c8:71:19:f6:93:03:a2:90:ee:22:
         aa:21:cd:2c:f0:81:7f:4b:a0:e2:3c:d5:dd:8b:d3:e9:61:44:
         ac:75:10:b6:c9:81:19:ef:41:0e:b7:1d:f4:8f:27:32:9e:aa:
         2b:9b:cb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:20:29 2025 by rpki-client