Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
File:                     WSxpn4_svshH0zkLRljdPLIcUrM.mft (raw, json)
Hash identifier:          KauffgdVX5DIfIa/JMkIumqYnJev28MGTjcU18gYRjg=
Subject key identifier:   1A:D7:CE:1C:E6:27:75:79:99:3A:B7:6A:30:9D:6E:EE:D5:B6:B2:BE
Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
Certificate issuer:       /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Certificate serial:       01967C7C6F6ED001CDB3018F1E2975C244C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
Manifest number:          02BE
Signing time:             Mon 28 Apr 2025 13:00:51 +0000
Manifest this update:     Mon 28 Apr 2025 13:00:51 +0000
Manifest next update:     Tue 29 Apr 2025 13:00:51 +0000
Files and hashes:         1: JGGUZFFW6mkhM2spC4Om8Sl5Ik0.roa (hash: dqTj/vaS7gUXIm5IFoD4OZy7eNLtptQVc2/Kh4P7oE4=)
                          2: WSxpn4_svshH0zkLRljdPLIcUrM.crl (hash: aGfmq5e2K0+9IOHYCx3sXoAqScq8mEh2nClW/gLxprA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:7c:6f:6e:d0:01:cd:b3:01:8f:1e:29:75:c2:44:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
        Validity
            Not Before: Apr 28 13:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=1ad7ce1ce6277579993ab76a309d6eeed5b6b2be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:52:35:ec:42:7a:87:34:cb:b6:37:34:00:
                    32:49:22:df:18:52:c9:a4:0e:0b:fd:e0:e4:69:4e:
                    56:51:66:e5:d8:f5:3e:f0:a7:d0:b8:75:37:35:d8:
                    71:10:e1:a8:3a:31:1b:5e:3c:19:24:5f:19:7b:5a:
                    d0:43:4a:f4:67:4f:cf:0c:43:15:32:94:bb:a9:20:
                    23:bc:97:7e:9b:4b:c5:be:e2:83:69:3a:87:a6:ea:
                    db:ed:65:84:8e:2a:8d:40:63:70:56:fd:3c:01:84:
                    ec:6a:b7:fb:dd:ca:61:a3:be:8a:98:db:63:49:3a:
                    4c:4a:92:12:94:a9:fd:73:4f:4e:01:29:6e:c1:a9:
                    b8:d5:e9:aa:39:be:ca:45:8a:05:a2:ef:f8:82:b0:
                    ee:8c:55:56:03:23:c7:a6:d0:b4:39:3a:28:82:24:
                    71:3a:3f:ed:96:5e:7b:fc:75:33:5e:4a:9f:bd:13:
                    de:ec:59:e4:eb:2c:82:1c:c0:a2:8f:0f:2b:9f:a4:
                    91:ee:f1:ac:ab:95:6b:97:25:f9:bb:63:7e:92:63:
                    1f:95:f6:ad:70:c9:2a:d3:2b:9a:b1:46:13:af:1b:
                    95:b6:9c:53:b1:00:b3:26:16:b1:8d:a2:26:4a:f6:
                    6f:91:a3:ba:6d:01:13:38:05:9f:3d:fd:e7:97:af:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D7:CE:1C:E6:27:75:79:99:3A:B7:6A:30:9D:6E:EE:D5:B6:B2:BE
            X509v3 Authority Key Identifier:
                keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:69:ef:a9:95:83:de:af:8f:68:24:34:a2:05:ba:b8:fc:41:
         f4:44:83:bd:94:6f:41:5e:fc:48:0a:51:ce:20:d9:30:d1:6e:
         d5:ff:13:96:a4:20:21:74:19:2c:15:9b:d0:cb:2d:2d:4a:48:
         53:5e:dc:58:53:45:46:ff:ba:cc:59:19:75:8b:7c:67:b0:ce:
         1f:65:b1:8c:30:e6:17:58:d7:4f:db:57:bf:bf:45:f3:95:44:
         c1:1e:17:cd:91:2c:91:e6:f3:eb:08:83:66:a8:f6:16:ad:ae:
         36:29:a1:41:d9:aa:2d:d7:a5:9c:9e:5c:aa:2d:42:11:36:02:
         0e:4c:69:12:8f:34:ce:3c:66:9d:d6:c5:ab:c3:65:9d:17:3c:
         65:4f:8a:d0:1f:30:fe:4b:6f:07:41:3a:16:7b:a1:74:ec:e8:
         4b:0f:ac:93:66:43:5a:1e:4e:a3:99:44:5f:13:a3:09:47:61:
         88:36:de:05:f2:de:6b:c9:95:68:b4:86:98:2f:17:8a:1b:2d:
         31:65:59:a4:b5:6f:aa:ff:78:10:37:f4:c7:b0:ed:90:c0:4f:
         1c:f3:7e:83:dc:e0:00:24:34:67:d4:a9:f7:56:82:03:d6:dc:
         fc:f4:60:7b:d4:68:f0:3f:d2:10:ac:72:fd:ff:53:b1:c5:b4:
         37:e0:3f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:15 2025 by rpki-client