Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File:                     wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier:          G2aTbK9vZtPLAvQeTgKgOS2AUT1YDWTDat6oXaeuE34=
Subject key identifier:   7D:87:EE:F1:F8:2A:2B:F2:02:D6:D3:39:9E:21:5F:43:F0:CB:F1:C6
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer:       /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial:       019678D6638BC56D524187E22DE50E3A158F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number:          03F0
Signing time:             Sun 27 Apr 2025 20:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 20:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 20:00:38 +0000
Files and hashes:         1: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: UDT+F5grTYlDuJXpRcZrbyo3rYzLjXZ5L+zlUGPd44Q=)
                          2: yDU1rEJ62ylcENkxxq9-gc-Am2g.roa (hash: 7IZ7rxbnUahaLcCnP9skdbmiM7UlbVpGLatma5hP9yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 20:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:d6:63:8b:c5:6d:52:41:87:e2:2d:e5:0e:3a:15:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
        Validity
            Not Before: Apr 27 20:00:38 2025 GMT
            Not After : Apr 28 20:00:38 2025 GMT
        Subject: CN=7d87eef1f82a2bf202d6d3399e215f43f0cbf1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:6c:44:f4:d5:5f:a1:22:09:e4:84:fe:11:
                    ef:09:4c:3f:78:cc:32:85:cd:f3:a1:94:34:e0:b1:
                    65:91:cf:c8:07:9a:63:b4:12:80:28:9f:9d:35:66:
                    d4:e5:79:0e:48:3d:dc:87:2d:57:e7:77:86:be:e2:
                    75:84:3f:f8:a3:37:2c:14:87:3c:63:eb:64:f1:58:
                    91:8b:6f:ff:4b:ac:f8:b1:01:1b:89:df:66:9d:44:
                    3f:b9:cd:6b:6f:dd:a7:8c:45:23:30:58:78:47:e4:
                    29:d0:0a:77:50:bf:7f:3d:ba:3b:88:ea:a9:4b:ed:
                    4a:d0:da:e4:0a:91:d0:06:a5:57:91:b9:d3:d0:12:
                    a0:37:ed:31:49:e0:5f:14:eb:96:41:f9:8a:75:df:
                    c4:ca:d5:58:89:fd:93:82:c8:3d:1f:04:cf:98:e2:
                    de:11:db:bf:f3:eb:e8:48:0e:1e:b8:46:46:a5:62:
                    30:7f:ad:ec:1d:8f:69:ad:e3:57:5b:0e:cb:da:c0:
                    51:90:c9:4a:99:04:19:ea:5b:83:de:ad:c7:1a:7f:
                    57:6a:a8:22:70:db:0c:ee:48:f0:de:8e:fc:a8:af:
                    50:f3:21:b0:77:6b:a8:75:4c:18:35:a6:66:a9:e2:
                    da:be:0a:40:d6:3d:0c:7a:8d:d6:1a:12:cf:c7:ea:
                    7b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:87:EE:F1:F8:2A:2B:F2:02:D6:D3:39:9E:21:5F:43:F0:CB:F1:C6
            X509v3 Authority Key Identifier:
                keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3c:5b:8c:62:86:6c:b4:8d:46:fa:1f:b7:77:fd:15:08:66:
         a6:18:04:b4:8c:ea:6f:d5:35:e8:56:ea:39:93:38:a0:93:9b:
         f6:ed:fd:c6:0a:a0:d7:3e:88:36:40:26:7d:61:7c:51:01:7c:
         3f:bf:ec:aa:13:2f:c3:a5:bc:55:fe:0b:0b:bd:22:0c:bd:27:
         bd:17:f9:2b:85:12:25:6b:3a:1c:da:ef:4e:e2:de:14:a1:87:
         cb:d9:14:f5:01:84:f2:49:9a:84:8c:e4:de:1f:4c:59:31:bf:
         2d:b1:70:c3:96:c2:d5:f7:3e:12:55:cb:17:b6:f3:c1:67:a5:
         45:ad:85:d2:40:6b:78:43:da:b6:58:f7:8e:c6:3e:98:29:b6:
         ff:09:d4:b8:d9:48:00:2c:25:53:40:f0:6c:9b:b7:41:5e:b3:
         36:8d:16:a1:61:ae:34:66:2d:17:04:6c:5b:78:44:b2:3c:77:
         0c:d2:04:42:f1:57:09:72:ab:85:d2:75:7b:fd:3c:96:4c:cc:
         0e:02:e5:e9:96:d9:f8:87:eb:77:4f:4f:f7:21:27:13:64:95:
         e5:1d:a3:ef:39:5c:55:15:49:50:25:27:1a:51:b7:d3:08:14:
         97:55:2c:6c:b1:9f:69:39:ee:c1:8e:26:df:c4:c7:99:d5:b6:
         ea:d9:63:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:20:04 2025 by rpki-client