Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File:                     wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier:          n8r5KpIBD3/RivHzP+Z6V4HrJ0vQaOzsVyCqxqmcyUc=
Subject key identifier:   8B:46:EF:12:E8:84:6B:47:F2:10:94:6C:EE:B1:5F:C0:A5:A7:FF:BA
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer:       /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial:       019675D549277180B093D13B00BF18F86171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number:          0F2A
Signing time:             Sun 27 Apr 2025 06:00:34 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:34 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:34 +0000
Files and hashes:         1: lXUonjcSHCnymM91YbnZZiIsRN8.roa (hash: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=)
                          2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: 3mmdHUckb6iwza0M/Inoc0+rkz+DB3tuc8b0K+U1kDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:49:27:71:80:b0:93:d1:3b:00:bf:18:f8:61:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
        Validity
            Not Before: Apr 27 06:00:34 2025 GMT
            Not After : Apr 28 06:00:34 2025 GMT
        Subject: CN=8b46ef12e8846b47f210946ceeb15fc0a5a7ffba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:ff:cf:de:4d:40:b6:d5:ae:f6:ff:60:56:
                    9b:6f:40:9d:50:6f:be:c1:1c:c8:0f:f5:71:72:c5:
                    a9:34:88:66:8d:95:fb:29:94:d2:a6:d4:0f:b4:61:
                    9f:d5:a3:14:5f:38:df:0f:0f:d3:01:c1:40:e7:5f:
                    b9:ce:10:8b:27:0e:da:79:be:73:ed:71:93:59:ff:
                    c1:08:21:bb:0d:3c:0d:4d:99:9d:dd:f0:43:65:80:
                    a7:68:2f:f8:4d:9a:b2:8c:6a:10:b0:61:c5:b5:ba:
                    18:9e:23:62:ff:ed:ca:98:8f:4b:5f:f7:72:4a:f7:
                    9b:dc:28:ca:c2:83:7f:c6:c9:ce:56:ce:e4:b5:de:
                    89:43:70:07:a6:97:a2:b1:fd:78:24:8f:d1:a0:eb:
                    2f:1a:9e:bb:67:f3:f3:3e:9f:e7:bd:46:59:d0:d7:
                    cc:ae:a7:1c:82:80:65:2a:59:df:c2:44:d2:39:9c:
                    13:17:b5:a8:b9:fe:e8:33:bb:e9:eb:a1:ef:b0:23:
                    a2:0f:06:2e:72:d0:9a:49:d0:2a:e3:1d:21:27:a5:
                    47:af:23:bd:2f:53:0c:28:82:5d:57:18:c7:87:3c:
                    19:5c:2f:54:31:2d:17:13:5c:51:b4:27:b4:c8:9f:
                    e3:74:4e:05:01:54:60:28:c5:bd:e3:c7:22:0f:ef:
                    5a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:46:EF:12:E8:84:6B:47:F2:10:94:6C:EE:B1:5F:C0:A5:A7:FF:BA
            X509v3 Authority Key Identifier:
                keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8b:3e:05:67:0e:89:e1:f4:8c:cd:10:ac:a7:68:fb:39:be:
         e0:06:1e:f2:36:77:a8:f4:b0:72:ac:ea:c3:ff:e9:2d:16:5f:
         dd:61:8a:c8:64:1c:82:04:fb:dc:cf:11:89:ed:df:29:56:87:
         9d:a2:47:2e:03:65:f8:aa:6b:37:19:9b:75:61:7a:9a:25:de:
         c3:ca:9a:8e:fc:d2:97:6b:a4:c9:5b:71:14:0d:f7:f3:8f:c8:
         a4:75:16:37:00:23:b6:83:22:1d:8f:72:35:66:60:b2:2d:60:
         e4:67:05:41:bb:c5:26:f9:e8:ee:85:97:ad:d8:e5:4a:58:68:
         2a:e6:36:c8:bd:8c:15:3d:76:89:09:86:86:70:71:c0:d2:c8:
         78:d1:21:7b:f8:d6:0e:34:39:30:c2:74:53:34:96:f9:e0:e4:
         d5:68:7c:b2:fb:52:f0:f3:66:0d:08:c3:89:60:7d:37:ba:51:
         35:e4:72:8b:c0:17:ba:2e:b0:4d:e0:64:15:b9:52:67:83:aa:
         16:6c:83:93:e8:b2:28:14:2b:31:ba:ef:2f:62:b3:63:07:d9:
         c5:eb:a0:ae:1c:42:40:25:cd:c6:2d:33:3c:af:2a:d9:64:3b:
         f5:40:cd:01:7a:47:5e:ce:1d:52:b8:85:42:ec:05:cc:5b:a7:
         46:2b:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:34:33 2025 by rpki-client