Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File:                     WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier:          sucTodvyIuygpHgtFXWT0LAmuYmb/OeN4kreiC42MMI=
Subject key identifier:   18:1D:CE:33:32:DB:3C:AC:5D:E9:7E:F5:04:ED:DA:5A:F0:4E:55:99
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer:       /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial:       01968390F753720D157AE5470479E8B2C5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number:          0CB5
Signing time:             Tue 29 Apr 2025 22:00:37 +0000
Manifest this update:     Tue 29 Apr 2025 22:00:37 +0000
Manifest next update:     Wed 30 Apr 2025 22:00:37 +0000
Files and hashes:         1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
                          2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: 1fQLhRaXBEiwa3Kbz8Ax2CNhyT8y52JzIUteRXYRysA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:90:f7:53:72:0d:15:7a:e5:47:04:79:e8:b2:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
        Validity
            Not Before: Apr 29 22:00:37 2025 GMT
            Not After : Apr 30 22:00:37 2025 GMT
        Subject: CN=181dce3332db3cac5de97ef504edda5af04e5599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:20:3d:e7:5d:4c:7e:59:e6:dc:97:1e:1e:
                    c7:8f:b8:bb:cf:73:55:f1:ad:7d:fe:41:4c:18:70:
                    58:6d:94:d2:ae:0f:5c:8a:f8:7e:e3:7b:10:6e:e8:
                    b9:33:6f:76:47:cb:86:75:d9:fa:51:ab:7a:52:01:
                    18:26:29:97:0f:0f:dd:f9:95:70:7b:b8:20:a3:dd:
                    2e:b5:7b:ae:80:81:5b:01:d6:65:bb:3a:bf:1f:e8:
                    b5:81:84:ee:7d:79:c8:13:61:26:5f:52:bd:46:be:
                    7e:64:a7:8d:28:86:9f:ec:96:4e:f2:e8:f4:92:29:
                    19:0b:59:ae:47:a8:f6:a4:0e:1c:da:f6:11:64:dd:
                    50:b3:80:8e:06:6f:0a:80:b5:e6:5a:ef:bc:ab:2e:
                    97:77:c8:e1:6f:1e:b4:b7:99:d4:64:e7:16:b2:94:
                    78:70:9b:ab:ee:ba:d2:43:06:91:54:45:16:3c:e2:
                    99:9a:91:8c:e2:d4:3f:c2:a3:17:26:80:a3:ec:d9:
                    0a:3d:11:65:36:a3:13:75:28:17:d1:11:62:3f:07:
                    3a:b8:1f:ed:1a:08:f2:f0:d6:2f:7c:7a:90:0e:7e:
                    89:d8:9f:a2:45:81:ba:04:1e:10:28:30:01:d9:b5:
                    c6:85:04:64:61:5a:54:1c:cb:1a:da:5a:35:1a:e3:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1D:CE:33:32:DB:3C:AC:5D:E9:7E:F5:04:ED:DA:5A:F0:4E:55:99
            X509v3 Authority Key Identifier:
                keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:6e:95:f3:a6:1f:7e:19:d3:cc:07:c8:17:f2:bf:33:80:
         7a:cd:cb:e5:ae:f7:81:23:e6:a0:c4:4e:43:69:5a:83:78:4c:
         ff:99:e3:6c:3e:27:ea:83:e3:6c:af:0d:49:c7:fb:4b:ec:72:
         7b:fc:73:7c:7b:2c:34:b5:48:aa:1d:45:08:bd:90:0a:e8:27:
         8f:55:5d:93:13:dc:9e:f3:8e:00:9d:84:26:85:6c:f4:30:4e:
         f3:c2:39:d0:87:50:de:5d:16:1b:cd:53:80:12:8e:ed:fe:7d:
         03:26:dc:ba:a5:e8:33:3d:1d:88:2e:f0:4d:3e:00:e4:8a:57:
         38:c6:df:e8:21:18:ef:13:86:ab:2a:d4:7c:a0:45:0a:11:23:
         05:29:c7:16:05:88:b5:e0:76:b4:bf:72:91:ee:8d:95:7c:c0:
         6c:85:40:6e:8d:07:7d:cb:70:50:b1:b1:09:5f:c9:ea:1f:69:
         16:0e:2b:00:d8:10:d5:8a:e2:c5:0f:0b:a1:86:ea:d7:f4:e1:
         83:39:7c:c3:15:f8:67:70:0d:46:04:0e:ee:a4:9e:25:66:00:
         e1:4b:4b:e6:80:31:a7:cd:43:6e:a3:d4:8c:7e:70:f6:a2:ba:
         7c:d3:5f:bd:0d:20:d6:d7:e5:d9:80:f6:cc:f0:84:d3:fe:7f:
         c3:63:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:33:50 2025 by rpki-client