Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          ULhsSYSQp0I6SbDUvSY80H8VZtFmHcOS4Mp697D7hNA=
Subject key identifier:   79:AE:37:FA:5A:C6:F5:41:36:13:41:A6:E0:7C:30:39:6D:63:F1:6F
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       019677562E145ED5DA9F56571288429CEED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          0F98
Signing time:             Sun 27 Apr 2025 13:00:58 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:58 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:58 +0000
Files and hashes:         1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: Ia7VX4NqQk+eKpxY1Zz1+XyOzFoQLxusJizrSJoBvAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:56:2e:14:5e:d5:da:9f:56:57:12:88:42:9c:ee:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Apr 27 13:00:58 2025 GMT
            Not After : Apr 28 13:00:58 2025 GMT
        Subject: CN=79ae37fa5ac6f541361341a6e07c30396d63f16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b4:05:52:96:53:2e:ca:2d:8d:4f:66:56:fd:
                    6b:46:8d:3b:98:62:62:b3:6d:cc:ea:fe:13:02:d1:
                    77:6b:5c:b7:98:12:db:71:fd:ff:ba:dc:dc:37:f4:
                    5d:8e:d7:74:5a:9b:14:f0:e8:d4:b6:bd:f6:dc:dc:
                    05:23:c4:21:8e:4c:7d:d1:cc:49:83:80:d6:c9:a9:
                    77:a9:9c:64:ff:45:c8:8d:9a:08:c6:89:a3:b8:7e:
                    98:79:15:36:7e:15:a2:5a:e9:14:bc:ab:70:ad:0f:
                    9a:72:b7:bf:68:06:0b:f5:b6:68:35:fe:d6:01:44:
                    8e:94:95:ab:74:ed:3f:ba:d1:3e:30:fb:dc:e8:dc:
                    1f:86:02:98:ca:5b:28:69:f3:1d:f7:94:73:cf:f1:
                    c3:d5:23:d3:aa:44:22:d2:32:a3:85:80:9c:d2:7b:
                    2b:eb:d1:53:aa:ee:e5:91:61:c3:a5:ae:ec:9f:20:
                    4a:b4:37:6f:48:90:20:0b:54:ce:0a:16:76:24:10:
                    88:0c:87:57:a9:d7:8a:12:c2:7c:fc:9b:d2:92:02:
                    ca:83:8a:63:36:08:8e:3c:dd:3d:93:20:ce:fb:9d:
                    b2:a7:17:35:e9:7a:6d:c0:50:47:d2:a0:24:ad:3d:
                    4c:29:c5:4d:a9:f4:ab:f5:91:b4:e7:52:40:8c:b9:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AE:37:FA:5A:C6:F5:41:36:13:41:A6:E0:7C:30:39:6D:63:F1:6F
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:c3:8d:08:7b:a3:cb:a2:38:f4:02:72:d9:a6:2d:03:bc:4e:
         a8:97:7f:70:b7:b6:ba:0c:e7:f1:6a:e7:e0:44:74:da:d3:a9:
         34:e6:31:93:8d:bd:0c:da:81:54:24:ba:a1:cc:64:37:59:cd:
         4e:0a:b6:9d:ba:59:76:e1:8e:53:25:80:f6:e2:0b:2b:2c:d4:
         29:1a:55:10:75:a2:a4:59:48:70:b5:23:da:b8:e3:1c:73:12:
         da:e3:64:77:34:2c:7f:c7:14:04:84:41:4a:78:c2:aa:d8:83:
         bb:99:a3:32:29:0a:d2:66:1f:04:20:cd:ed:fd:c9:98:5d:61:
         c5:9c:c9:81:9d:6a:a4:52:0b:47:d2:b3:d8:33:ab:34:8d:ca:
         25:67:8e:36:af:a5:4e:4e:f7:33:62:3c:2d:3e:5c:7e:17:f4:
         21:00:7a:f1:35:48:45:d6:50:84:10:b7:7d:21:d7:ab:cb:cd:
         4d:90:58:96:b5:85:1f:20:5e:31:b5:5c:c0:6b:e6:22:d5:59:
         4c:d3:1f:b9:b8:ab:d5:1f:88:24:74:63:c1:9f:e7:4c:f1:aa:
         c3:0b:12:e9:5b:9d:10:10:2e:2c:c0:9d:e1:e0:43:44:2c:5c:
         81:65:af:91:8c:b6:e4:34:31:48:7a:f7:4a:62:e8:4a:67:c6:
         8f:57:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:07 2025 by rpki-client