Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File:                     wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier:          9qJjAEtFxVBJAvgEl3mXCFSPDclSYIIKLDp2rY4DV3U=
Subject key identifier:   E3:25:9E:B8:4F:28:1F:38:4F:1F:A1:29:91:BE:5E:9B:99:EB:9A:43
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer:       /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial:       019683FFD663ECB6C24EC3624969B254E658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number:          020B
Signing time:             Wed 30 Apr 2025 00:01:43 +0000
Manifest this update:     Wed 30 Apr 2025 00:01:43 +0000
Manifest next update:     Thu 01 May 2025 00:01:43 +0000
Files and hashes:         1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
                          2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: FZvtivqnPAORRWr3ZliPlrrSg5FWa4itg0fJw9lXoVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:ff:d6:63:ec:b6:c2:4e:c3:62:49:69:b2:54:e6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
        Validity
            Not Before: Apr 30 00:01:43 2025 GMT
            Not After : May  1 00:01:43 2025 GMT
        Subject: CN=e3259eb84f281f384f1fa12991be5e9b99eb9a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:99:0a:17:f4:e9:81:dc:74:fc:45:c3:e1:
                    34:80:e1:57:65:56:5e:c2:1a:24:f9:e4:ec:68:e7:
                    f9:0d:1b:48:57:8c:1c:fd:36:3e:41:c9:e0:ca:39:
                    d4:c2:32:ff:1b:7e:fb:26:17:d0:15:a6:30:a9:a5:
                    a4:39:66:e0:bb:8a:4b:5c:a4:35:12:6b:b1:92:f4:
                    93:fb:07:da:4a:d9:01:05:a9:cb:9f:b4:91:12:22:
                    c4:58:41:d8:48:50:53:08:dc:10:b1:73:15:cb:9f:
                    65:71:54:59:69:3b:57:c8:cd:4a:0c:51:0b:d0:93:
                    51:82:9e:a0:c5:1d:69:e8:76:82:24:c5:99:3e:32:
                    08:70:e6:db:12:2c:3a:1e:34:f7:9b:1b:07:b9:a4:
                    20:05:6e:07:f9:da:b2:a3:7e:92:d1:3a:69:f9:98:
                    85:e8:bb:98:f0:e4:47:52:d1:8b:ed:1c:ed:ca:68:
                    f3:f1:b4:20:22:97:96:af:b6:d1:f4:bc:a7:cc:50:
                    28:06:78:d0:4e:43:cc:1c:0b:78:1f:dc:bd:27:71:
                    02:a3:b1:c2:62:7f:e8:89:b2:c4:b1:5f:67:6e:b7:
                    a5:f7:8b:d4:ae:de:77:84:42:2c:74:cb:90:3a:95:
                    df:32:b7:44:7c:7a:2b:63:a0:57:54:36:fe:65:5d:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:25:9E:B8:4F:28:1F:38:4F:1F:A1:29:91:BE:5E:9B:99:EB:9A:43
            X509v3 Authority Key Identifier:
                keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:58:f1:ce:a6:54:2f:3b:51:84:75:18:2e:2c:ba:e0:37:
         a8:90:31:c1:0f:8a:19:15:da:af:45:bd:cb:78:2d:fd:ea:da:
         5a:41:b5:e2:5e:e2:60:ed:3d:31:0f:e3:e0:a8:8c:96:c5:f9:
         ca:de:cd:54:89:b6:2f:96:c3:8d:f0:8c:e3:2e:87:dc:74:75:
         fa:81:de:4b:ff:d7:38:e2:11:16:ff:59:2a:2a:c6:90:d0:44:
         d8:39:a9:2b:94:c2:f5:66:9b:9d:16:16:bc:79:ce:5a:72:44:
         52:bc:44:ce:8d:d6:cc:62:a7:9b:d2:a7:dd:c8:ec:27:d0:c7:
         b3:12:fd:a7:47:97:ea:41:7a:e9:ba:9a:0d:fc:66:21:0c:b0:
         cd:b1:f6:7c:5d:b7:32:dc:48:a7:21:36:f0:07:ee:24:a2:a1:
         b4:2e:fa:ed:b6:75:e7:b5:86:04:4f:a6:1b:03:ba:76:62:66:
         5f:c2:33:4d:0d:e4:74:25:15:61:5f:9b:35:28:2f:91:4c:45:
         b5:45:7c:3a:d9:dd:91:4c:e6:d5:07:fb:74:e7:dc:bc:cf:9e:
         f5:73:af:a7:e9:0d:2e:e9:fe:5a:17:b0:8d:05:ef:d1:e4:0d:
         7a:d6:5f:3f:fb:97:ad:09:f8:77:a9:a1:7f:7e:91:f4:0d:d0:
         b1:c6:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:26 2025 by rpki-client