Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File:                     W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier:          h4IgFDgdSYW2GC/zNL07aogkEJasNbABGlvolddkFXs=
Subject key identifier:   3E:5C:7D:4E:4C:B6:18:36:76:6E:DA:35:0B:BB:7B:F4:A6:30:5F:3D
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer:       /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial:       01968C9414070D210C244EDA4F03A979D6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number:          151A
Signing time:             Thu 01 May 2025 16:00:36 +0000
Manifest this update:     Thu 01 May 2025 16:00:36 +0000
Manifest next update:     Fri 02 May 2025 16:00:36 +0000
Files and hashes:         1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
                          2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: BOhRkAf7BeULfLfpzBUTrYGd7BNyC0OKgqbA6CSKmb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:94:14:07:0d:21:0c:24:4e:da:4f:03:a9:79:d6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
        Validity
            Not Before: May  1 16:00:36 2025 GMT
            Not After : May  2 16:00:36 2025 GMT
        Subject: CN=3e5c7d4e4cb61836766eda350bbb7bf4a6305f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:f0:67:af:97:f7:db:e2:6c:0b:da:42:95:
                    83:33:81:90:4f:4b:ca:61:25:da:e1:b5:fc:9e:8e:
                    85:7f:74:42:88:a2:15:f6:78:61:da:a4:da:9a:06:
                    cb:68:f6:a2:29:56:df:56:a3:25:a6:7c:f6:a6:f4:
                    65:77:49:57:1e:b3:ca:e8:8f:50:45:14:eb:a3:b0:
                    63:34:61:20:48:1c:0d:70:7e:16:15:79:42:28:4a:
                    22:65:3a:22:b3:51:9d:18:3e:a2:50:c4:2c:14:4b:
                    00:db:15:94:13:7a:72:79:f1:c3:92:d3:25:4a:a3:
                    e6:74:85:d4:78:f6:85:e3:f6:70:f3:df:cd:15:56:
                    9c:25:74:da:4e:1d:05:a8:ce:fb:e0:25:ab:d9:1f:
                    83:76:93:48:61:35:a1:e3:9a:5b:28:6c:48:4b:c1:
                    d7:c2:1d:97:8a:71:84:84:ef:35:1b:be:a9:17:a7:
                    c8:72:e9:ba:65:91:98:1a:2b:f1:ca:86:97:4c:46:
                    e8:8f:57:23:8e:04:da:65:b3:8b:a4:44:1d:42:85:
                    f4:5e:b4:3e:f3:80:ee:29:cc:ee:0b:1d:b5:1f:b0:
                    45:9d:82:94:a9:49:90:6c:a5:68:a7:a7:d3:12:cd:
                    b5:cd:88:60:77:98:37:9a:58:4f:13:9f:12:d4:f4:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5C:7D:4E:4C:B6:18:36:76:6E:DA:35:0B:BB:7B:F4:A6:30:5F:3D
            X509v3 Authority Key Identifier:
                keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:2b:b5:ea:b4:e2:9b:de:e9:e1:5e:83:11:b7:50:75:52:
         67:26:94:d6:72:ed:5d:8c:16:5b:8a:8b:24:7e:88:4f:8c:29:
         e8:cb:20:ed:93:16:a7:ad:38:8a:d5:7b:9f:7b:52:bc:2e:85:
         6d:79:3a:20:d6:d8:22:6f:7a:e8:7f:af:30:a1:13:f5:9c:88:
         3d:8f:ca:62:61:fd:88:76:dd:60:50:ba:9b:c8:63:f4:db:a1:
         a1:46:49:10:63:40:61:20:eb:fd:e6:77:47:96:9b:84:99:04:
         d4:b4:32:85:1d:6f:2c:26:43:06:a6:da:9d:3c:c2:a2:c6:1b:
         52:cb:16:fa:46:05:d8:cd:7a:2b:0b:43:61:6b:ab:d4:d2:26:
         16:df:4a:d4:32:58:2d:2f:88:f8:07:fe:b2:95:22:25:f4:03:
         85:9c:48:0a:9e:f7:a2:df:51:d6:b1:00:92:95:79:1e:8c:bd:
         d8:65:64:8b:e6:89:41:99:32:50:d7:09:22:c9:8c:91:b1:3d:
         5b:80:1b:91:3b:fb:9f:90:55:09:2e:9d:f3:c8:e7:27:81:bd:
         bd:4c:79:f5:be:6a:dd:16:9f:4d:8a:ed:6a:1a:76:99:ed:d5:
         c5:24:9e:f2:e7:44:ec:5d:33:c4:0a:fe:10:1e:95:dd:1f:c1:
         e9:a9:95:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:07:07 2025 by rpki-client