Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File:                     WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier:          vCjrLy4+Xk85ZHlq+ZgzjzPJm8jTFj3aWXP+PW8vgq4=
Subject key identifier:   76:8A:33:03:FF:3E:84:8E:5D:E6:96:BA:FD:F4:8C:56:DC:3F:04:70
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer:       /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial:       01968D6FDA7B008EA9BD2F2023C5F6EA1C9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number:          0779
Signing time:             Thu 01 May 2025 20:00:39 +0000
Manifest this update:     Thu 01 May 2025 20:00:39 +0000
Manifest next update:     Fri 02 May 2025 20:00:39 +0000
Files and hashes:         1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: wvFWjYp3KYmb74XYUSe5fqQsNVreVWHOMqndTwipaH8=)
                          2: lgaTADVYOse5jNoGc-hlR1iyQcM.roa (hash: whet4s5rWCX20O/tP+eDuVvdhz/p6dV5HSU07qsog2g=)
                          3: sauoJPH8ZCzsvjvGozwJzjKKcxA.roa (hash: B9f46JTfl/pBuc2yfO6KIqonaBN9SLGFTMzKnpf4wu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:6f:da:7b:00:8e:a9:bd:2f:20:23:c5:f6:ea:1c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
        Validity
            Not Before: May  1 20:00:39 2025 GMT
            Not After : May  2 20:00:39 2025 GMT
        Subject: CN=768a3303ff3e848e5de696bafdf48c56dc3f0470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:9d:fb:03:bb:38:02:d4:38:bb:c4:17:0a:
                    4b:f0:e0:eb:20:58:71:e6:b1:a0:a1:72:52:bc:fd:
                    84:23:26:dd:42:8f:12:ec:2a:6a:55:56:68:94:95:
                    34:ae:d2:f7:69:4b:b8:4d:30:72:96:66:a3:6b:99:
                    60:1f:1e:3f:a5:43:a5:67:b2:4a:76:16:32:b9:11:
                    1c:93:8a:2f:87:fb:95:00:39:26:f4:e6:ca:df:a1:
                    4f:cc:a0:ea:2a:1f:45:70:1f:36:62:68:66:ce:19:
                    91:c2:77:1d:a6:93:b6:38:4f:0f:da:d6:d8:84:00:
                    8d:ed:12:dc:81:15:c6:ba:57:34:cd:aa:d7:b9:78:
                    9a:d4:53:07:cd:ff:56:de:f1:dd:ef:68:dc:db:f2:
                    e1:33:9c:79:67:93:7e:76:e7:fc:13:4a:95:63:60:
                    67:a6:ce:0a:dc:c5:0c:67:4f:38:5e:67:68:e4:cd:
                    34:a2:74:d0:d5:77:f4:d6:2d:5c:30:f1:a4:fa:b0:
                    2f:fd:6e:63:13:b9:85:1e:52:ee:b6:c1:d1:25:8d:
                    34:e2:d6:05:29:78:d4:ca:b1:cf:9e:7e:05:21:5a:
                    0b:37:3a:38:92:3d:4a:a4:ae:6a:c6:e6:e1:dd:6d:
                    bd:5d:7a:58:3f:35:81:2b:3a:39:7b:8f:ef:32:c1:
                    c8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:33:03:FF:3E:84:8E:5D:E6:96:BA:FD:F4:8C:56:DC:3F:04:70
            X509v3 Authority Key Identifier:
                keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:15:81:99:4c:1c:e7:ce:09:55:df:5b:af:d8:a9:cd:c9:bc:
         49:c4:1e:5f:4f:17:88:2d:d0:b8:7c:1f:74:2b:ca:2c:46:44:
         19:bf:61:46:0f:83:23:d7:40:86:31:18:53:cb:39:82:cf:a2:
         a2:92:71:b8:6a:ca:e6:61:d6:d5:f9:79:3c:9d:d9:aa:b6:cb:
         15:84:8e:ce:30:5b:fa:9b:aa:0d:26:3a:69:2b:d5:b9:e0:d3:
         0b:c2:9a:5a:6a:c7:b9:fb:a5:51:2b:22:73:ef:6a:8c:c9:5c:
         46:8d:f4:ce:26:32:39:15:9f:d0:3d:c7:4c:dc:10:40:89:2c:
         14:22:2c:e6:ff:c9:a1:d8:44:de:82:08:5b:7a:ba:37:5f:80:
         a5:13:0c:e0:d8:2f:d1:06:13:7d:61:a0:52:b5:2e:8a:81:16:
         94:41:5f:62:0e:fe:44:e4:ee:26:6a:b3:cc:e2:8d:2d:72:89:
         b8:9c:2a:dd:d9:eb:0d:f4:5f:87:5a:c6:4b:6c:fc:3a:a7:53:
         6d:05:bc:27:53:8d:70:ce:ed:6a:51:81:f5:40:21:b8:fe:05:
         b6:e8:8e:21:86:be:77:92:de:fc:ad:8c:18:65:ce:8b:ec:3e:
         ab:b4:8d:4f:fa:43:35:4f:76:df:f4:48:1c:f8:fe:e2:57:18:
         f4:08:03:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:51:45 2025 by rpki-client