Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft
File:                     1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft (raw, json)
Hash identifier:          VbzwwA/XubwG+k/MtAvKY+i07l+rK6BuGw3HEY41QU8=
Subject key identifier:   0B:DD:6B:82:DC:05:E8:6F:A1:10:56:2C:F6:90:CB:04:6C:C5:A3:10
Authority key identifier: FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
Certificate issuer:       /CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Certificate serial:       01967F46246D15E891543866D96268BE119E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft
Manifest number:          0965
Signing time:             Tue 29 Apr 2025 02:00:25 +0000
Manifest this update:     Tue 29 Apr 2025 02:00:25 +0000
Manifest next update:     Wed 30 Apr 2025 02:00:25 +0000
Files and hashes:         1: 1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl (hash: 6U6djWitIQ9zPSHcY8oFTx88EAkJ41wt+nd/w0oFDnM=)
                          2: a1BlZIKaFtEFXShwRMtJXEWXi4M.roa (hash: ERqfuGIzGK00GO92FhZ0NbE6+Ekdpbfy2+flZQSTXhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:46:24:6d:15:e8:91:54:38:66:d9:62:68:be:11:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
        Validity
            Not Before: Apr 29 02:00:25 2025 GMT
            Not After : Apr 30 02:00:25 2025 GMT
        Subject: CN=0bdd6b82dc05e86fa110562cf690cb046cc5a310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:9b:9e:e5:cb:f8:b9:63:41:34:cb:43:15:
                    55:d4:91:2b:b6:cd:86:13:ed:00:82:42:46:e0:a3:
                    11:82:e3:7d:b7:15:23:9a:9d:2c:90:0d:b5:bd:0e:
                    b2:7f:a9:5f:7a:64:96:36:f9:c0:fe:2c:01:c2:f6:
                    62:c7:cd:fd:d2:82:81:bd:e6:5f:bf:fb:46:72:37:
                    2e:74:f9:77:1d:d8:d5:9f:20:d8:c9:b4:08:b9:f6:
                    95:2c:27:a4:3b:ba:70:a2:b9:f0:61:67:7e:09:74:
                    ff:48:b9:8e:8c:a4:dd:22:1a:5c:b2:e0:57:5d:a3:
                    11:c6:fe:54:92:02:0b:90:52:a5:f8:8b:7b:dc:f2:
                    03:c1:2e:cc:74:c8:1e:f0:50:92:19:22:c1:05:a8:
                    cc:a3:52:af:cb:04:d7:83:77:df:6b:fb:14:9f:7a:
                    dc:5f:19:13:05:25:0d:bc:13:51:59:bb:fa:60:b4:
                    f3:27:bc:2d:f3:63:f7:d4:d5:68:ac:52:37:86:d9:
                    4a:c8:82:53:4d:2c:90:d1:8d:7d:93:fc:db:a2:b9:
                    95:00:2c:c1:d4:be:11:b5:0b:44:43:85:0a:73:51:
                    64:a3:83:c2:ae:98:3e:52:51:bc:e2:5c:17:81:d0:
                    02:94:2e:35:7c:36:6f:b2:26:19:51:95:1e:75:68:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DD:6B:82:DC:05:E8:6F:A1:10:56:2C:F6:90:CB:04:6C:C5:A3:10
            X509v3 Authority Key Identifier:
                keyid:FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:48:c3:d0:f1:8f:25:10:f6:fc:f2:5b:a1:78:86:eb:82:ca:
         e5:23:52:cd:b5:b0:9d:94:f2:e4:12:33:de:b0:c0:bb:06:0f:
         8d:07:33:2a:78:8f:9c:ea:66:48:d6:ce:de:41:cf:2f:eb:92:
         aa:c7:c7:0f:6c:f2:21:0a:dd:50:b1:df:74:14:99:e1:dc:5c:
         ab:27:c5:54:7c:b6:97:ea:67:98:d4:a3:4e:cd:47:23:e8:10:
         c4:08:83:f5:5b:c5:b6:a1:ff:75:56:3d:1a:7d:04:f7:62:b7:
         f4:72:6c:fa:62:65:5a:0d:7c:c9:1d:54:32:3e:67:2b:ce:b2:
         eb:2b:15:49:5f:e8:e7:d5:4c:83:81:d4:34:ed:08:c7:9e:39:
         c1:88:4a:85:5c:7b:88:e8:a1:fe:8a:81:38:4f:92:74:c3:5a:
         ba:73:bd:46:48:0d:ff:d0:b4:d3:7c:a4:6b:99:2a:18:bc:2f:
         56:4f:7a:62:2d:73:c2:73:2f:6e:66:05:a5:3a:a1:f4:b5:aa:
         38:f2:f9:8e:ba:9e:8b:86:04:95:30:57:6b:fd:a8:9b:0f:d7:
         6f:88:ee:f5:b9:9e:3b:9c:fc:29:0a:cd:8a:fe:cb:26:c8:65:
         2f:72:a6:42:16:ea:8c:85:d9:f4:39:50:c2:74:64:b1:82:e3:
         f0:32:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:28:51 2025 by rpki-client