Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          Ghk6UTivpGDkTQM2fGLCuKlNlQwnpkxZZpD7WZJRa98=
Subject key identifier:   44:A9:38:E1:19:B2:55:45:E4:C0:36:9B:B5:C7:1A:A9:0B:90:F6:13
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       0196759E67AC9CF3486A341B4419E6F23A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          14
Signing time:             Sun 27 Apr 2025 05:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 05:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 05:00:37 +0000
Files and hashes:         1: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: Rfi5LR9qUjWJuDIUl+xjZB327d5B11Bg7Mvi5S7IQuM=)
                          2: yJQwQMARRrVe9vIkjsREE8o5TT8.roa (hash: eXLzlsDPHHeDqRfh3yuG7C5MD8Da8VfpIofRm28xfrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:9e:67:ac:9c:f3:48:6a:34:1b:44:19:e6:f2:3a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: Apr 27 05:00:37 2025 GMT
            Not After : Apr 28 05:00:37 2025 GMT
        Subject: CN=44a938e119b25545e4c0369bb5c71aa90b90f613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:44:c0:17:1c:2c:f5:f2:6e:e9:b9:db:68:
                    3b:eb:e5:97:97:d0:3d:32:53:30:6e:80:9b:e2:b1:
                    7d:4c:9d:cc:d1:34:e7:ea:89:e4:02:72:0b:54:bc:
                    ef:98:a5:c0:3d:03:44:18:91:ee:53:33:2c:0a:c0:
                    b6:b9:17:6e:1b:b7:72:b5:cd:f4:01:bc:13:fe:df:
                    8b:1d:5a:0e:1e:b4:8c:b5:4e:9e:1d:a8:77:b3:7b:
                    5f:a6:4d:1b:22:a7:45:2e:21:bf:6b:f5:f1:a1:a4:
                    fc:f3:d5:c5:8e:79:21:7e:d8:3a:16:1c:ea:88:e7:
                    ad:c5:fb:14:c0:33:78:56:65:89:57:69:16:61:dd:
                    28:28:ea:b7:9e:8b:59:75:47:96:2d:d0:51:d5:cb:
                    39:de:fd:41:cf:cf:3f:0f:4a:27:aa:7b:cd:07:3b:
                    be:e1:a5:a7:00:f0:27:85:9f:cb:18:4e:d7:b5:46:
                    3c:0b:9b:0e:8e:63:15:11:09:69:8b:e1:f9:52:95:
                    39:ca:62:5c:f4:fb:47:97:00:16:53:50:a8:f3:31:
                    d1:94:40:7d:3f:23:99:c1:d1:82:81:2d:12:1d:ae:
                    4a:64:90:21:79:08:3f:7d:85:3d:fd:4f:9b:07:4b:
                    2c:cc:29:72:cd:6f:a1:08:29:f1:34:b4:a0:30:65:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A9:38:E1:19:B2:55:45:E4:C0:36:9B:B5:C7:1A:A9:0B:90:F6:13
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:98:19:0a:35:52:8a:1f:d0:75:13:af:07:b6:24:0b:95:fa:
         dd:49:84:de:d1:d4:3f:28:2d:42:c1:0c:12:82:d8:28:c1:b7:
         a9:f7:7a:a2:91:d7:aa:3f:bc:64:4b:ce:4d:b0:0a:c5:78:a9:
         4a:9d:46:46:0e:14:8e:1d:31:85:a0:45:50:3f:c7:34:8c:60:
         9e:5d:ec:bf:2e:15:8a:a6:cc:25:b3:68:ef:51:76:3f:42:2b:
         00:22:5f:dd:d0:17:65:46:bd:67:1c:05:df:ce:28:05:76:c6:
         78:dc:78:a4:73:cd:95:be:60:22:d8:3c:8b:91:81:dc:42:d0:
         5a:69:c0:e2:41:ec:40:e8:54:09:f4:3e:25:d3:31:4d:9c:cd:
         a5:fc:10:c0:fa:af:72:33:0a:0b:2d:f9:21:ee:4f:e7:11:28:
         45:13:de:5d:68:0f:8c:40:00:5c:ae:ef:36:b7:7c:44:9a:d4:
         2e:2c:d5:44:56:ce:c8:55:f1:6a:e4:14:54:e9:e0:21:73:c9:
         4b:10:f8:4c:fb:30:e1:ab:ee:6f:bd:b4:30:83:7e:8f:ee:6f:
         c7:76:49:92:b7:ff:43:5b:ca:0f:57:9d:9e:c2:cf:61:9c:54:
         50:d9:d5:6b:95:df:a9:21:38:ed:ee:31:bd:e6:73:cc:1f:c6:
         bf:7e:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:18 2025 by rpki-client