Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File:                     wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier:          r2j2XvBfDK/jzYdWP4VSv+4wkcbtxuFpch9gDu9EXb4=
Subject key identifier:   98:5D:A1:FC:8A:72:F3:F8:E3:0A:1F:DF:58:CC:C7:4B:4D:06:5B:AA
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer:       /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial:       01968058F50F731FA66DE0DD4AE7228288FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number:          0B98
Signing time:             Tue 29 Apr 2025 07:00:35 +0000
Manifest this update:     Tue 29 Apr 2025 07:00:35 +0000
Manifest next update:     Wed 30 Apr 2025 07:00:35 +0000
Files and hashes:         1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=)
                          2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: EEDA5/ZnESlAqgnrZk86F2iX9mUUE7NEJPu6EgteXck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:58:f5:0f:73:1f:a6:6d:e0:dd:4a:e7:22:82:88:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
        Validity
            Not Before: Apr 29 07:00:35 2025 GMT
            Not After : Apr 30 07:00:35 2025 GMT
        Subject: CN=985da1fc8a72f3f8e30a1fdf58ccc74b4d065baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:5a:1f:2f:1b:69:83:1d:8c:cf:34:cf:73:
                    64:87:8c:18:df:28:17:63:2f:69:c2:b9:df:a1:1d:
                    e9:9e:f1:7b:ec:f1:52:67:37:56:f0:d0:c2:81:cd:
                    fb:82:8f:c7:21:85:af:e6:e5:c3:d6:54:0f:91:ee:
                    3f:97:ad:73:7b:ce:95:f9:1d:74:3e:cd:a9:1b:b9:
                    eb:eb:36:1c:b7:66:b3:10:0f:be:10:0a:6b:e7:c8:
                    73:d3:74:eb:9e:b2:7c:8b:10:89:04:ef:c6:b1:59:
                    03:83:1b:1f:9b:91:72:ba:9f:d8:34:65:55:c5:68:
                    bd:72:ca:d9:18:f7:09:28:7b:06:4b:1c:55:d5:63:
                    d0:f9:c7:6d:9e:c4:bc:81:98:38:d4:80:07:1c:ac:
                    0e:07:09:66:e4:23:a6:98:85:9a:df:9b:27:db:8d:
                    89:06:6d:0a:05:db:4e:08:0d:e0:fb:24:32:3f:9b:
                    28:49:7b:11:23:52:bb:da:0e:f4:0d:08:35:87:30:
                    b7:f3:06:7c:1b:a7:44:d6:68:e3:ca:74:55:4c:06:
                    ba:eb:50:36:44:1d:b6:0f:fc:68:54:a6:ec:b9:c6:
                    b2:f8:b0:0d:a0:17:b1:0d:62:0d:30:0c:e7:e8:c7:
                    3b:e5:84:3a:34:2e:44:95:b3:b2:a6:14:54:a0:10:
                    23:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5D:A1:FC:8A:72:F3:F8:E3:0A:1F:DF:58:CC:C7:4B:4D:06:5B:AA
            X509v3 Authority Key Identifier:
                keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:17:a9:6b:4b:e7:a9:65:24:1f:3e:5f:d7:04:c4:6d:a3:a0:
         32:83:35:24:6c:bc:98:1a:d9:5a:d2:c4:04:ea:d5:22:50:e0:
         34:52:f8:28:b6:06:65:c1:12:1e:bc:b0:df:37:85:61:2f:83:
         0e:ee:c7:8b:5e:e5:89:eb:d6:44:12:db:c8:8c:db:f3:24:c4:
         2f:49:83:27:aa:f2:70:29:e5:f8:67:af:78:42:09:42:54:e3:
         8a:21:55:d4:f8:02:46:af:29:8a:1e:68:99:83:0b:b5:82:a7:
         e0:23:ff:43:4e:84:35:16:1c:d4:35:e6:ba:8d:b5:98:c6:d9:
         ff:e4:2f:43:28:18:a9:a0:90:e9:75:18:34:48:fb:a4:01:e3:
         73:ae:a8:b2:e6:cf:23:26:76:3d:c9:8a:10:85:f0:6c:46:07:
         f1:ea:a1:a2:a5:d6:f3:ac:c5:23:b7:b7:89:5f:d0:da:7f:83:
         01:4f:0e:c6:00:b8:93:0d:b9:fe:0f:af:19:09:54:e8:3b:4a:
         2c:f7:97:48:94:68:75:35:10:c3:57:d7:b2:17:d0:06:f6:e1:
         7b:63:3c:d5:b8:2f:83:2d:3b:c9:6b:37:8f:40:8e:4e:22:62:
         75:fb:35:0c:4e:b2:cc:ea:17:3e:60:32:39:68:08:41:76:49:
         ae:94:98:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:40 2025 by rpki-client