Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          ZhWAnR+ubUmO1Qt+M57GN0VzvS5vOUwBBfEdmjelOF0=
Subject key identifier:   48:6C:12:8F:51:80:B4:42:CA:68:58:DD:92:D2:C0:03:19:95:8F:9D
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       019671C2202F8F61DCF33009106FBC00A735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          0653
Signing time:             Sat 26 Apr 2025 11:01:09 +0000
Manifest this update:     Sat 26 Apr 2025 11:01:09 +0000
Manifest next update:     Sun 27 Apr 2025 11:01:09 +0000
Files and hashes:         1: H6hSTGzUXYO8wuCS7_uXx0OkwsQ.roa (hash: C3R1uTE0vZQdguq3OxSn35ovF8rEDK/1GfpIlJlHImc=)
                          2: j6m8JD754OZd2zfkrzPKc7t_k4U.roa (hash: hUQqPswFb44tCsj8bdeOO4xSCpedzp6XZaAwqO/TYtU=)
                          3: oPzqlVtclIS1SF4yLt-sGEys0Rc.roa (hash: e1YYcOS89IG2X1r/k2fMS0Qlsda+NH4z6UJ1+i2AY+4=)
                          4: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: yyoaa3j9mNH+10Z5bVIVSaEm7fBTu3DP1+/psqO48YY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c2:20:2f:8f:61:dc:f3:30:09:10:6f:bc:00:a7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Apr 26 11:01:09 2025 GMT
            Not After : Apr 27 11:01:09 2025 GMT
        Subject: CN=486c128f5180b442ca6858dd92d2c00319958f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:07:66:39:33:f6:8a:b3:36:9a:b4:da:39:
                    ab:8c:38:54:13:5f:db:f4:c7:41:77:59:c8:c7:fe:
                    4a:8c:9b:a3:d4:9f:2c:bb:9e:d9:9e:5c:ae:a4:66:
                    cf:08:9e:26:df:66:d0:17:a8:41:05:da:c9:9d:64:
                    65:56:0b:7a:45:33:ae:33:82:c2:49:17:eb:dd:df:
                    27:9d:f2:fc:e8:95:5c:e8:6f:99:41:62:5b:a7:08:
                    7f:53:36:d1:f2:1e:42:6d:4a:84:a0:41:92:77:c3:
                    78:bf:b1:8b:4a:eb:a1:9b:5e:a2:f4:8a:89:1c:3f:
                    f3:94:1c:2c:02:6b:ce:e5:d8:66:79:a5:e8:59:e7:
                    ad:89:92:f0:30:5a:ca:b9:88:01:b8:c5:ab:23:fc:
                    7c:41:a2:f7:91:3d:eb:d0:8b:be:e6:e9:9a:e7:63:
                    f6:b8:b8:0f:3d:37:af:5b:cb:94:3b:d5:04:62:b8:
                    2d:a6:9e:5d:6f:5b:57:fc:59:df:ef:05:7b:1c:04:
                    bd:f8:1f:9d:a2:8e:43:3c:a7:4e:6c:ad:d7:d2:6a:
                    c1:3f:fa:b5:35:c2:14:ef:d7:44:02:3e:f2:cb:0e:
                    43:95:fa:13:cc:56:0e:8b:61:56:f5:58:31:60:fd:
                    84:be:d9:85:02:3a:77:7b:0a:1e:c9:02:33:34:8f:
                    0d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6C:12:8F:51:80:B4:42:CA:68:58:DD:92:D2:C0:03:19:95:8F:9D
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:38:0f:f0:63:bc:73:d8:d6:21:60:a9:ce:cb:36:34:73:
         3a:ab:98:d5:82:67:be:dc:9d:fa:83:c2:f0:85:ff:8e:4f:c4:
         85:0a:c1:58:63:80:e7:94:82:2e:51:35:73:70:ea:60:5b:a7:
         cd:f1:e9:90:93:6e:dc:8d:77:cb:8c:d2:4a:30:12:53:e0:7a:
         33:4f:e0:5e:af:57:75:78:47:58:66:57:aa:2c:1d:74:52:1c:
         dc:2b:91:3c:22:d3:31:f0:49:a6:d0:e9:23:66:79:8b:36:71:
         20:f0:26:22:02:60:38:d0:63:01:d8:db:f6:88:06:45:d2:f9:
         2f:80:db:f4:ea:3d:23:e4:c1:df:a0:c5:0b:9b:26:48:85:56:
         f0:77:ab:41:3a:07:a7:44:27:a5:e8:e3:5c:82:4c:7c:29:52:
         03:39:a8:14:c7:03:36:4b:5f:f0:15:22:06:5a:ad:ad:e3:a2:
         44:c0:58:34:e7:25:65:a6:4f:20:91:87:de:8b:c1:9e:6c:b9:
         61:84:4e:8a:ed:99:fb:a2:2a:6d:17:ca:50:07:ce:43:8a:2b:
         a7:e9:16:c5:70:f9:62:7b:60:87:44:dc:51:a8:cf:c4:e9:b8:
         f8:c7:4c:bb:ad:a2:bb:27:6d:1b:dc:1c:31:a7:47:17:85:73:
         eb:03:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:32:54 2025 by rpki-client