Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File:                     WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier:          PQnH+3Yg6d+HA8bsD92jNrxe4+R2XBWFLb0GIrBkc5Y=
Subject key identifier:   44:DB:85:9F:45:22:DB:32:16:F6:8B:2F:3F:A0:85:54:95:1A:4C:51
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer:       /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial:       01967379678409082A052E649AE55D2CB1A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number:          0426
Signing time:             Sat 26 Apr 2025 19:00:57 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:57 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:57 +0000
Files and hashes:         1: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: +d5YEBBQbXNaL1OvNoXZJzBT0KutglSUHt6i1rSQLz4=)
                          2: kaNw-FHXt38Mw3A3i3ZxTrdgH0U.roa (hash: ED9csh7TrZ7bmaYOf//aESLX76NQ2OO78tAxi9fibZE=)
                          3: zTtBYZjfsC0VO3m1kQopjfHbzCI.roa (hash: 1RfpmUJ+OhBzj8PIsZiJ3NArFEOu01QxVGauoTNckNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:67:84:09:08:2a:05:2e:64:9a:e5:5d:2c:b1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
        Validity
            Not Before: Apr 26 19:00:57 2025 GMT
            Not After : Apr 27 19:00:57 2025 GMT
        Subject: CN=44db859f4522db3216f68b2f3fa08554951a4c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:de:59:6e:7a:3a:36:1e:6d:b7:67:b5:f5:
                    5c:ca:63:51:3f:35:29:e0:97:13:2c:42:eb:cb:18:
                    b5:0c:ed:4f:9f:f0:65:c1:55:af:96:66:41:2b:46:
                    ea:fe:1b:06:4d:74:6b:4a:26:1f:d3:35:7b:fd:a4:
                    a9:df:21:79:22:1d:4d:8a:48:9e:4f:f1:97:cc:d2:
                    2a:13:0a:5a:0c:92:44:bb:90:02:1b:2a:4d:1b:00:
                    8e:aa:20:64:59:e8:7c:fa:a6:9f:db:ee:e3:ac:c2:
                    c6:f1:bb:62:53:e7:44:45:54:55:57:2a:00:1a:b7:
                    50:db:8d:11:54:18:64:b2:7e:5d:28:c9:1c:bd:a1:
                    02:56:73:a9:3e:e1:e7:24:a9:75:4a:73:ca:9d:dc:
                    90:39:28:b9:43:7f:38:fa:78:91:4d:ab:a6:78:c1:
                    ae:32:70:d8:e2:da:8e:0d:a8:ca:c1:05:80:0d:d9:
                    04:2f:2f:dd:f8:2d:16:04:81:69:39:6e:ad:53:08:
                    95:32:98:18:f2:c0:ad:f6:84:47:9a:5f:5d:f5:e6:
                    0d:83:87:5e:5f:5e:50:04:7e:7c:48:1f:b5:e4:c5:
                    39:0e:95:e2:01:ab:f0:4b:8d:48:81:9d:27:4d:5c:
                    b5:08:11:7f:92:4e:7a:b8:5b:05:f2:08:58:ca:82:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:85:9F:45:22:DB:32:16:F6:8B:2F:3F:A0:85:54:95:1A:4C:51
            X509v3 Authority Key Identifier:
                keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:f4:77:a7:99:e1:66:f8:29:80:b7:5d:25:66:ab:d8:ad:
         d5:17:e7:ca:63:76:fc:4e:d7:52:3f:73:a8:6b:2c:98:a0:7f:
         c2:e0:15:ac:54:46:5d:ba:0d:ee:5e:db:c4:3f:77:35:9a:13:
         ad:fc:e4:74:7e:57:52:7a:33:63:e5:23:f0:0e:e4:df:5f:2e:
         31:36:00:37:2d:08:e9:8d:e8:e4:64:89:14:9c:b6:19:dc:72:
         b3:24:3c:8e:6a:dc:2a:37:68:b4:cc:16:6b:d4:32:8c:47:04:
         67:27:48:19:ba:58:27:62:97:a0:96:c9:d1:69:f1:d3:be:8c:
         b6:cc:ec:ff:aa:38:7f:0d:8b:2a:92:f6:1d:73:ea:1b:54:ff:
         b9:bb:4a:2a:e8:82:63:26:8a:a9:f5:88:95:cd:f2:6e:7b:57:
         d9:c1:5b:3d:88:02:fb:b8:a5:d4:84:e1:5e:01:d2:c7:c5:87:
         dd:03:83:c9:d8:31:ef:10:24:4e:c8:f1:70:92:00:19:bb:77:
         e7:e4:ec:80:bb:9d:64:a7:49:c2:12:2a:f3:10:85:c0:2f:5b:
         ff:6b:31:7c:e1:9e:36:3d:17:6a:c2:ec:32:b3:2d:4c:eb:c6:
         51:1d:48:78:c5:49:17:51:25:0c:1c:40:5e:3a:19:da:df:28:
         92:9f:65:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:36 2025 by rpki-client