Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
File:                     wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json)
Hash identifier:          BAyBeU+8eQvNE4Tf1LlpoQQ9pM2AnkTII4zCTREhDQM=
Subject key identifier:   7D:A3:1A:9E:7B:24:2B:CC:33:0A:CB:6D:9D:A9:97:AA:A9:C9:AE:D1
Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
Certificate issuer:       /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Certificate serial:       0196B28EFB26F50CA92C69E5DC3E0CD65BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
Manifest number:          11
Signing time:             Fri 09 May 2025 01:00:36 +0000
Manifest this update:     Fri 09 May 2025 01:00:36 +0000
Manifest next update:     Sat 10 May 2025 01:00:36 +0000
Files and hashes:         1: 2qyhqFKpARK1F2ET6I7_YKaOPc0.roa (hash: qGM3ZFQucsF8/9E/V05Xc9DkgTgt/0zHmMZ5RCHxskE=)
                          2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: S0nE7SrCOoCXOh2l7BQOcCKNdkAhtnmT821xFTt8N4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:8e:fb:26:f5:0c:a9:2c:69:e5:dc:3e:0c:d6:5b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
        Validity
            Not Before: May  9 01:00:36 2025 GMT
            Not After : May 10 01:00:36 2025 GMT
        Subject: CN=7da31a9e7b242bcc330acb6d9da997aaa9c9aed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:9a:f2:e0:8a:44:a5:a8:8a:01:ee:5f:86:
                    03:ed:a2:ed:27:d9:f5:25:49:3e:da:95:ef:eb:f4:
                    81:43:ea:22:5f:a3:14:2e:76:ff:a0:fe:83:f1:e3:
                    ae:d0:fc:99:02:7e:d2:27:41:03:83:fb:bb:c9:74:
                    cd:d5:67:77:a4:06:1e:86:46:94:0b:ac:79:31:1c:
                    7d:e7:f6:b8:a3:d9:6d:43:58:c6:04:03:f3:c7:09:
                    84:25:b3:a7:5c:9d:d3:97:54:19:d1:00:50:ea:e7:
                    04:38:57:62:09:aa:c8:a4:98:07:95:54:5f:7c:63:
                    aa:a4:29:54:6c:b4:74:36:43:c7:3f:bf:8b:8b:86:
                    b6:b3:bb:ec:64:df:3d:a6:0e:23:cf:25:05:78:5c:
                    8d:77:a5:9c:27:33:c2:39:89:35:92:be:dc:37:8b:
                    38:0a:62:f6:15:61:39:72:e1:ef:ea:f2:7b:39:ec:
                    26:f8:ad:a9:31:52:5e:1c:64:77:67:cd:21:a8:23:
                    4b:2e:4d:26:64:ab:93:5b:37:94:78:8a:4e:fc:45:
                    f2:c7:cc:1d:9f:9e:57:13:72:8e:05:2a:55:b6:bc:
                    18:02:de:a4:91:6b:40:09:57:1a:79:52:7e:08:08:
                    81:2d:a0:b8:0f:29:69:d1:7b:e5:12:27:ec:4c:e1:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A3:1A:9E:7B:24:2B:CC:33:0A:CB:6D:9D:A9:97:AA:A9:C9:AE:D1
            X509v3 Authority Key Identifier:
                keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:3d:0b:00:53:14:a2:3d:6e:6b:f6:c8:81:56:dd:5c:2d:
         df:ae:27:9d:8a:88:46:ac:bf:eb:79:92:83:ac:2d:7f:35:fc:
         5c:27:33:bd:50:ca:41:63:57:5c:aa:af:78:cb:78:c0:c0:48:
         3b:83:07:60:47:60:28:a0:4c:16:0b:9d:df:1f:3a:4c:00:40:
         3d:3f:8d:35:47:50:ac:74:24:fb:71:e2:b7:28:4b:bc:9c:d7:
         e1:3a:71:98:c4:65:b4:ed:c9:d6:9e:ea:f3:34:89:ad:62:43:
         e8:25:e0:b6:67:06:17:e4:bb:c4:c4:3f:70:53:aa:dd:44:cc:
         e9:a7:8f:a2:5a:b4:1b:6d:fc:4d:42:19:2e:08:b0:1e:58:36:
         57:9d:02:26:9e:3d:d3:bd:19:a9:c7:2a:de:8f:7e:82:15:b8:
         61:9a:2b:6e:ee:a7:d8:ae:14:dc:1e:31:05:43:24:8e:0f:34:
         0c:ec:33:8c:a8:47:75:7b:e0:d9:0a:60:ce:e2:d1:91:73:bf:
         56:ec:6d:be:4e:b6:ef:43:ae:50:35:99:93:0f:46:c8:47:df:
         f4:e1:f2:f9:5b:0c:b5:d8:db:1d:c6:bc:e8:01:5f:2d:79:2f:
         5e:ea:61:b9:23:20:f6:3b:c9:49:ad:56:8b:0a:52:0f:31:6e:
         6b:a7:6b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:42:59 2025 by rpki-client