Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File:                     wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier:          J8L23lvkW6jB3ePHsaWM/VVMl0rEG4FD19HwhCrGte8=
Subject key identifier:   50:9F:3D:F8:96:6F:C3:1F:11:E4:7C:BA:FB:4E:79:8F:6E:7B:42:FC
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       0196821095CA381F53505E802316A0615EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number:          1515
Signing time:             Tue 29 Apr 2025 15:00:47 +0000
Manifest this update:     Tue 29 Apr 2025 15:00:47 +0000
Manifest next update:     Wed 30 Apr 2025 15:00:47 +0000
Files and hashes:         1: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (hash: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=)
                          2: WfTKVc2urWFHINs-H7ByO8d8wxU.roa (hash: vrGq1fPxckNV2umjKEkVDvs5jt8ww7idFEdo+nD8HaU=)
                          3: tq6G4XKwLkPscmGDzl0ViLLGYc0.roa (hash: gCrgWGNDXJJp5RhoxWhID/tfHWwjzd875gYTpw7zJGg=)
                          4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: /QyaZNeWlpSOHDlK1dIwU/MLjj7YyHRKODnOQ8W2sWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:10:95:ca:38:1f:53:50:5e:80:23:16:a0:61:5e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Apr 29 15:00:47 2025 GMT
            Not After : Apr 30 15:00:47 2025 GMT
        Subject: CN=509f3df8966fc31f11e47cbafb4e798f6e7b42fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:ca:cc:7f:b7:eb:04:f3:61:0d:64:11:87:
                    d5:8d:fd:0f:59:ba:97:ca:8e:ce:c2:a7:eb:5c:86:
                    35:48:52:17:7b:65:ad:84:92:c3:db:26:95:db:b6:
                    fb:21:b9:80:ac:32:89:ca:e8:88:5b:42:6e:00:4a:
                    0c:b4:2d:26:29:30:4b:37:ec:12:ca:26:30:df:e7:
                    95:a7:b2:f4:36:b7:71:e2:bf:2c:f6:86:e5:d4:bd:
                    62:1f:73:d8:d8:14:d8:53:1d:99:ae:4e:4b:83:f7:
                    58:69:28:d7:8b:d8:d8:1d:a0:47:16:01:c5:f3:b2:
                    cd:4a:27:cd:08:1c:06:df:84:e8:e6:2b:a3:c2:5b:
                    d5:9a:5b:cc:af:fb:cd:7e:94:ff:c5:f2:fb:c9:d0:
                    4b:a7:8d:50:0a:51:51:5f:7d:14:f6:b3:8e:db:80:
                    0f:53:58:31:85:ae:32:3a:df:b3:dc:8d:b7:9e:ac:
                    0c:eb:b3:b6:f9:56:d6:94:77:ae:d8:97:a8:52:7d:
                    9b:13:ef:52:80:34:2f:8f:01:5f:6f:b8:c2:e1:a1:
                    b5:79:84:bb:a9:ab:8c:b9:8f:4c:c6:86:6b:9c:83:
                    86:32:4f:ba:58:15:f0:fe:be:86:d6:ff:f7:c7:ef:
                    a4:a5:e4:86:c2:44:e3:ef:0b:ae:28:c4:ca:c7:0f:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9F:3D:F8:96:6F:C3:1F:11:E4:7C:BA:FB:4E:79:8F:6E:7B:42:FC
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:60:15:a7:95:17:09:01:3d:d9:a8:2a:75:23:6d:94:94:21:
         6a:c8:a0:c3:90:91:fc:11:51:23:dc:0c:4e:ae:17:03:68:c1:
         15:1c:3c:f0:cf:fa:b2:07:3b:21:55:47:65:97:dd:e6:63:25:
         db:3b:b0:8a:9c:90:c2:6b:53:f4:ec:cc:3b:85:2f:29:5a:90:
         4b:83:dd:39:3f:3a:b6:cd:44:93:4c:6d:74:92:c5:83:85:c6:
         d6:5d:38:ed:9a:e6:c9:f5:d0:4a:59:cd:b6:9d:bd:7b:6c:5d:
         9e:3a:a9:f2:b3:e0:8a:fe:ec:55:e5:ed:21:4b:4f:68:28:3d:
         82:7f:ee:97:43:34:6f:d3:04:aa:ee:73:bb:ca:68:33:60:49:
         92:75:70:9a:c8:37:18:d7:be:bd:62:79:cf:10:8f:56:67:c5:
         6c:16:d4:2b:83:78:a8:03:e8:01:00:98:a6:40:26:bd:62:64:
         fc:ef:0c:eb:d9:3d:20:aa:53:28:d1:82:17:16:66:8c:c8:5b:
         bc:35:4e:75:e2:ec:19:9d:d5:b0:02:c8:1b:cc:90:dd:3b:26:
         54:31:6b:40:ae:9e:36:10:16:7d:71:72:90:11:3c:21:cd:c7:
         45:4d:a0:a4:af:e0:4f:9b:48:9c:37:02:b3:07:4d:a1:f9:50:
         67:53:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:01:45 2025 by rpki-client