Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
File:                     WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft (raw, json)
Hash identifier:          ZDt/82TYdzF89wOHqpOgY80zK0mOuUDn6X/SYWt8mmE=
Subject key identifier:   BC:65:7E:76:E7:95:AF:99:37:36:F5:77:36:3A:21:35:AF:CC:6E:DF
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Certificate issuer:       /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial:       0196722FCF65264643B78DA88D85D9995E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
Manifest number:          11EA
Signing time:             Sat 26 Apr 2025 13:00:57 +0000
Manifest this update:     Sat 26 Apr 2025 13:00:57 +0000
Manifest next update:     Sun 27 Apr 2025 13:00:57 +0000
Files and hashes:         1: HASJFQJ0dhUBOsyjobgHrPemYuk.roa (hash: t2cor/choG8bzkBioIX6Z6t5j6GZXqfW3BgdsKtvgZE=)
                          2: V2wJ6rRmC43RRh3IPdBHHjW281Y.roa (hash: Avq4OHU4hwzXrjOvbzGbJG8yV+Q0N6KuIdKdAo1r63E=)
                          3: WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl (hash: ROIdgeWtV3RIXJhOkSBXlCuJdY9nZaleH7Eh9cCgSR4=)
                          4: rv-2MUAhxSXgJ6_WUeSuY2HQEIc.roa (hash: pFW5RVqZxflQiZHo+kcVS/DdoHRiWRG5Vues4Jg84IU=)
                          5: tIRGV1d2T8vpZcEr5yhT7qzzmu8.roa (hash: k7phpFXieBGnmSKu+QsLBAEm2dEA+/STqbnwyEif0CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:2f:cf:65:26:46:43:b7:8d:a8:8d:85:d9:99:5e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
        Validity
            Not Before: Apr 26 13:00:57 2025 GMT
            Not After : Apr 27 13:00:57 2025 GMT
        Subject: CN=bc657e76e795af993736f577363a2135afcc6edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fa:2f:69:d5:f7:3e:ec:d8:d9:5b:ae:cb:c7:
                    7c:d2:3d:9b:9c:20:6c:26:00:36:ca:80:1a:4b:c9:
                    ef:1f:35:b9:07:75:3a:9c:3d:0b:1e:81:6d:62:49:
                    7c:a4:14:68:bf:6a:11:e5:9d:44:7e:06:4e:9a:ab:
                    36:ae:ba:7c:f2:63:a0:e3:fd:8c:5b:f2:2a:5b:6a:
                    c9:3b:1c:7d:26:a4:79:11:37:89:f2:90:19:25:bf:
                    f3:20:33:b2:43:4b:5f:79:5b:d3:41:f0:6e:dc:b8:
                    ef:a9:25:e6:4f:b0:e2:bf:74:f4:a4:ec:ef:a2:3c:
                    18:e2:fb:7d:21:ac:33:df:f9:ba:c6:67:a3:8b:ec:
                    54:3f:05:2e:d8:09:7f:20:86:ad:2c:1c:ef:8c:14:
                    56:02:a3:8e:28:45:b4:f7:e1:8b:5b:57:19:30:df:
                    df:b4:80:1b:38:ed:c6:b3:37:33:81:f7:28:85:63:
                    2d:7f:f9:e5:45:1b:f3:99:04:91:69:3b:ba:a5:8b:
                    94:9a:4c:4e:9f:b9:9d:a5:9e:ae:24:d7:d8:0b:7f:
                    f6:17:94:62:1a:88:95:27:0d:de:95:28:9f:b6:1b:
                    f9:69:08:71:74:97:72:4e:5f:d5:05:3b:f2:02:a9:
                    e7:6c:6f:ce:91:35:93:71:77:55:3a:ef:a8:14:b3:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:65:7E:76:E7:95:AF:99:37:36:F5:77:36:3A:21:35:AF:CC:6E:DF
            X509v3 Authority Key Identifier:
                keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:67:98:65:b3:1d:a9:5f:ec:4c:ea:04:92:f9:23:a6:98:ca:
         75:cb:99:cd:8f:f9:e7:d9:e6:0f:0d:5a:63:42:e8:b2:58:7c:
         4c:9f:d3:7d:b4:2f:61:18:95:b1:71:47:55:42:f2:67:e3:03:
         04:7e:1d:75:c6:63:2c:c9:87:da:dc:05:6d:9a:88:c6:2b:7b:
         44:4e:d5:cb:20:ff:44:c6:dc:d4:6d:ba:bb:ae:53:6c:28:cf:
         34:b8:97:33:32:05:87:d5:95:0a:ba:cd:29:a2:34:c0:f0:1c:
         ac:8a:33:94:01:6f:a7:ac:e8:c5:bd:eb:8e:f2:c3:2a:21:08:
         e8:6e:83:3b:f9:29:36:a9:63:bd:69:13:fc:b0:18:9d:d5:b2:
         4d:65:84:4d:67:af:9f:46:92:e7:a3:3e:fc:8f:14:fe:b4:c3:
         6f:89:73:b8:95:59:f7:b0:3e:0e:db:01:f6:4d:85:39:68:c4:
         5f:54:e9:84:5f:31:14:11:83:b4:6b:47:8b:3c:09:fb:96:b8:
         b4:44:82:1d:22:fe:44:fb:7c:3f:70:b3:ec:91:87:a4:2a:75:
         fa:4e:a0:10:75:cc:5c:21:a7:b3:0a:55:53:b0:ad:a5:98:79:
         31:8e:fd:d9:42:ea:3d:02:10:d5:94:8d:cd:48:b4:be:76:68:
         c2:d9:7f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:03:09 2025 by rpki-client