Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          HVPLTMGp5p4RUSnXmqQR3pMjKDdMTAKmvnwMBLsNMPs=
Subject key identifier:   6E:3B:D0:23:33:71:B5:AA:AA:13:F4:B1:C4:F3:B5:58:13:63:DB:1B
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       01967F0F8B3D6EED78F8F3F60B1166B24D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          097E
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
Manifest this update:     Tue 29 Apr 2025 01:00:47 +0000
Manifest next update:     Wed 30 Apr 2025 01:00:47 +0000
Files and hashes:         1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=)
                          2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: TTpij6UR44XcHrAeKoDwQiYaFDqCnEGkNHc2Q2d1pL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:0f:8b:3d:6e:ed:78:f8:f3:f6:0b:11:66:b2:4d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Apr 30 01:00:47 2025 GMT
        Subject: CN=6e3bd0233371b5aaaa13f4b1c4f3b5581363db1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:4c:56:b7:71:ce:76:b7:50:dd:8a:29:99:
                    16:0a:70:84:d3:0f:31:03:92:b6:f1:3f:0d:36:d1:
                    73:f1:5f:b6:8d:f8:d2:93:d5:f6:74:8e:e6:f3:34:
                    79:d7:e8:0b:c9:32:61:af:59:51:a2:fb:9e:8f:7a:
                    ba:75:33:c6:b0:23:b3:f6:65:6c:58:9d:5d:15:22:
                    71:59:63:b1:f1:69:d4:29:cf:6b:ea:fd:23:2b:ae:
                    3f:00:47:06:36:3b:a2:a0:7c:a8:66:5e:32:97:29:
                    79:0f:eb:68:b0:00:14:28:13:60:a1:f3:73:2e:26:
                    96:c8:6b:be:c7:8a:82:f7:30:41:55:55:63:71:02:
                    93:53:91:48:fb:03:31:a9:04:ad:7f:59:6e:2b:e1:
                    b1:a1:dc:da:2a:34:1c:0d:71:5e:45:60:24:54:60:
                    a9:f4:9a:45:ae:8c:7d:ea:cf:68:54:12:5a:bc:8c:
                    fe:8c:60:e3:da:73:e7:b7:43:d5:7f:c0:99:44:a2:
                    6f:7e:82:71:6f:9d:df:e4:2f:94:9c:03:40:74:23:
                    04:96:e1:f9:71:2d:74:4b:4c:24:30:33:7d:44:93:
                    2a:0e:e3:d5:bf:9b:ee:1a:bb:dd:ad:23:45:ac:11:
                    23:15:e2:f2:56:54:36:34:da:12:ec:61:40:04:7a:
                    a2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:D0:23:33:71:B5:AA:AA:13:F4:B1:C4:F3:B5:58:13:63:DB:1B
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4f:da:e7:fe:a9:53:7e:e5:b8:fd:69:f2:81:38:2e:b8:2f:
         73:24:1e:e1:10:2b:35:53:9a:d3:64:ef:51:22:e3:0e:f2:7c:
         43:17:71:5d:58:0e:42:0f:6f:b6:d5:15:f6:cc:23:46:06:f6:
         2d:ef:a2:70:33:0e:87:98:ff:4b:e8:49:1c:87:96:02:6a:4f:
         b5:7f:d9:f3:59:59:60:a2:ea:b5:b5:23:4b:e0:98:d0:08:61:
         61:4d:d8:4b:a4:cf:b2:54:ff:84:39:a8:af:05:c1:c8:d4:37:
         94:09:64:92:bc:0d:73:c1:26:75:aa:06:60:e5:7b:7a:aa:c3:
         56:89:52:06:c2:a4:22:54:11:a3:66:45:19:b5:4e:99:6a:d1:
         bd:72:78:cb:8b:0b:a4:16:17:89:36:19:c9:fc:48:2d:ec:21:
         f4:b7:78:55:4c:78:d1:9c:33:89:1a:aa:17:88:f4:51:3e:61:
         0b:04:86:72:d7:62:7f:ae:37:88:f4:85:3e:ff:aa:f5:49:f8:
         fe:8d:07:26:bc:90:3c:91:57:72:ff:67:68:91:20:3b:d7:ab:
         21:f8:ff:32:3e:0d:6e:19:e0:f5:a6:c4:72:12:f7:bf:db:be:
         17:da:ff:79:9e:05:29:63:b9:80:f2:e9:8b:e3:93:33:89:00:
         1a:4a:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:03:04 2025 by rpki-client