Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File:                     wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier:          O2caOFgRdhoA6Q59tneUbILNUSkSzJeW5z4fCauzU04=
Subject key identifier:   21:0B:8C:AE:FB:66:B0:68:53:6C:92:34:21:F7:0B:F3:0C:9D:3B:77
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer:       /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial:       019676E7A6477405E6A20B44DCAF9CB16509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number:          09BE
Signing time:             Sun 27 Apr 2025 11:00:14 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:14 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:14 +0000
Files and hashes:         1: lQvman0TcS9UAXTyd3ZXIdLOBqI.roa (hash: P14NthyAGiyfoJgBsi6HRoRfnfWtEu8GOwgj8n8I3ag=)
                          2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: wBzXZFAUO+olLX5eODU+Lb8Nksv16B9IQBRS4dRCxQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:a6:47:74:05:e6:a2:0b:44:dc:af:9c:b1:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
        Validity
            Not Before: Apr 27 11:00:14 2025 GMT
            Not After : Apr 28 11:00:14 2025 GMT
        Subject: CN=210b8caefb66b068536c923421f70bf30c9d3b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:0a:dd:05:1b:45:ed:5e:01:83:f5:4b:98:
                    79:3d:a6:30:4b:6f:dc:cc:c9:88:21:8c:6e:ac:88:
                    42:5b:b9:b9:87:2d:fe:1e:e1:2d:74:23:37:c7:a9:
                    73:07:26:92:27:5a:d7:0d:1c:25:6f:9d:dc:58:e0:
                    bb:ad:06:a3:6d:da:1a:3c:ae:4e:d0:f8:d6:52:99:
                    0f:54:ea:84:73:50:e1:96:ec:c7:89:fb:1c:b2:77:
                    7c:fc:c5:f0:83:2a:22:97:1e:9e:c6:ce:14:09:bb:
                    37:28:3b:fa:d9:ed:90:7f:19:98:22:05:51:a5:bf:
                    89:2c:50:6d:9d:8a:8d:8b:8d:a3:3b:17:50:52:13:
                    e6:c5:c0:1c:e2:55:3b:d2:97:a8:7f:57:6f:f0:2b:
                    8b:8e:71:f4:fe:f9:b7:48:e6:e8:34:45:d5:d9:79:
                    2f:72:db:4d:ab:08:fc:a9:33:2c:9f:47:66:20:75:
                    80:78:a7:d8:4f:4e:93:59:4f:4c:ef:86:64:f5:85:
                    a4:d7:18:2e:c1:11:cc:25:18:a9:6c:9b:ef:2b:b5:
                    18:62:8d:71:52:db:94:d8:c8:9c:7c:7f:ee:3b:6a:
                    93:15:f7:f6:34:54:75:2a:9c:c2:38:ef:3f:93:aa:
                    5b:7f:f9:90:88:63:b7:4e:51:01:52:84:60:0f:45:
                    5c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0B:8C:AE:FB:66:B0:68:53:6C:92:34:21:F7:0B:F3:0C:9D:3B:77
            X509v3 Authority Key Identifier:
                keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:d9:70:ec:e2:52:43:0b:20:53:00:64:9c:1b:d0:55:66:
         9a:8b:0a:06:82:10:93:44:39:44:28:cc:34:2e:d1:e4:e2:c0:
         05:df:0b:e6:d5:03:be:6f:08:8f:fc:08:c9:26:75:80:ed:56:
         3e:07:1c:9c:bc:5f:27:aa:33:8f:88:94:1c:0e:d8:1d:83:34:
         49:93:6a:4d:4b:38:38:e3:8f:76:d6:44:9f:33:14:ea:11:ad:
         7f:ed:88:b0:75:ac:09:21:b1:7c:57:b9:b7:7b:04:d6:2e:8d:
         cd:85:d1:99:89:c6:99:ef:dd:0a:65:c5:c2:6d:d0:be:a7:6b:
         a2:2e:4a:80:ba:f7:8f:9b:33:f3:75:67:93:5b:ee:62:b0:5c:
         5a:a1:7f:fb:b2:3f:b9:f9:46:6f:d5:4a:67:cc:e9:7d:c3:77:
         e8:19:9f:d3:ab:7b:68:9f:ee:c5:42:aa:41:6b:16:3f:04:8e:
         8e:83:42:c4:14:f0:dd:93:53:cc:ac:44:36:a1:3c:81:9b:24:
         01:e3:92:56:a6:5b:69:5d:af:fe:c1:99:05:93:fc:61:b9:f2:
         7a:b3:79:93:5c:58:95:6a:bf:ff:b8:48:40:9d:62:e3:a0:f0:
         2a:02:7f:24:e9:30:a0:5a:e9:78:cf:57:46:db:13:7d:98:af:
         d7:ef:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:39:08 2025 by rpki-client