Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
File:                     WNLScV9D90e-p2Lc4Wa8pLjpZes.mft (raw, json)
Hash identifier:          KcpuCl8EqrILpGUyR/JqSJ7qrrwVfR2csPItyfK9nEo=
Subject key identifier:   FD:8D:D9:F5:87:42:0D:64:31:C3:9A:5F:69:86:7C:FC:05:5B:E9:0E
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Certificate issuer:       /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial:       019674549DDBC44FF76440DC190E3A585A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
Manifest number:          151D
Signing time:             Sat 26 Apr 2025 23:00:24 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:24 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:24 +0000
Files and hashes:         1: PT2usVUEKXyY3Pyrt6bhLZq6Hk0.roa (hash: KueB/N6Tv5XPwuQenNpNyFxyBekEQxh3qYZTCa9pVBg=)
                          2: WNLScV9D90e-p2Lc4Wa8pLjpZes.crl (hash: d0Lwh5kooW5e5/2w27nljL4C6tHYUh61Ek3YvgDgiXM=)
                          3: Z17YRi9mYaQRV70cYdKNkHS2BT8.roa (hash: XclzZEx6yvB+VuFruQwlqlWve82bQq4L6RiJRruQ7hc=)
                          4: hSVOEYR3wkiN21Km9noHByidNkc.roa (hash: gmgGps7iqZqgn7KgXcruM+0aV/wQZu+D+yKypERbLL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:9d:db:c4:4f:f7:64:40:dc:19:0e:3a:58:5a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
        Validity
            Not Before: Apr 26 23:00:24 2025 GMT
            Not After : Apr 27 23:00:24 2025 GMT
        Subject: CN=fd8dd9f587420d6431c39a5f69867cfc055be90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:5b:2b:f7:db:79:d8:35:53:22:68:52:ea:
                    a7:ff:cc:b1:10:9f:c7:69:35:fc:56:35:85:4b:25:
                    9c:e3:83:75:05:f2:52:68:a6:b4:e0:5e:ab:6b:70:
                    e8:ba:62:c6:de:59:b0:84:e7:63:68:8b:6e:75:68:
                    8c:cb:c6:1d:78:4e:c6:95:c0:1e:66:0e:ea:1f:a4:
                    4f:83:e2:65:2f:26:09:4e:b9:16:36:5b:c8:f5:cf:
                    4f:9a:5d:b0:dc:91:cd:f6:b2:a2:8a:12:50:48:97:
                    06:f2:63:4d:73:29:07:be:a0:07:33:35:91:dc:9c:
                    6b:b8:5e:0f:6f:80:ca:f6:23:67:55:04:f3:b7:80:
                    56:38:f3:96:3f:71:7f:a4:de:c5:29:81:d7:be:96:
                    c7:fe:1a:a7:d3:d3:79:d7:69:d4:db:6b:e4:2e:ea:
                    24:36:08:1d:8d:ab:f2:d1:a4:44:8c:ee:15:a9:1f:
                    a4:3d:4f:6f:42:e6:0d:fd:11:39:1a:b8:39:7f:84:
                    48:2d:b6:fb:b2:c5:ed:07:40:4e:f8:7c:55:14:64:
                    dc:b7:28:f0:b9:fe:3c:f6:d4:24:53:ff:25:ce:70:
                    7f:34:10:e0:ce:fa:70:98:af:c4:af:d4:08:12:4c:
                    d3:0c:23:0c:cc:a7:99:fa:a0:6c:af:6e:68:7a:f4:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8D:D9:F5:87:42:0D:64:31:C3:9A:5F:69:86:7C:FC:05:5B:E9:0E
            X509v3 Authority Key Identifier:
                keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e0:cc:09:f0:df:96:8d:96:71:80:a2:a7:45:73:e9:95:de:
         29:e2:42:09:1a:9b:0f:8e:80:76:e5:ac:21:ba:0e:90:ec:40:
         cf:04:d1:08:13:8a:31:28:f0:b5:68:3c:73:a3:3f:ec:12:a6:
         1b:7d:29:35:cf:16:f6:0d:a1:33:62:ca:99:a9:ea:34:04:3b:
         0b:43:04:10:fa:66:55:60:1d:da:dc:26:3c:98:e5:9d:e3:d6:
         c9:ef:d6:80:50:4f:c1:f9:db:8b:cc:1d:c5:04:cf:61:b8:f2:
         26:17:64:d1:16:a1:71:4f:0f:83:91:80:5b:ec:c0:55:28:57:
         0a:99:1a:96:1a:c8:77:4e:13:21:da:15:fd:26:f2:5a:2d:4c:
         3e:68:4a:a6:c5:3e:d9:9e:c7:fc:3b:7a:17:bc:5d:5e:50:2e:
         91:85:5b:8e:dd:1e:cc:b0:7a:2c:40:0a:ec:cc:8f:ec:2b:10:
         b6:da:d2:b1:0f:ad:85:7d:c9:51:2a:c9:a5:3b:4f:cb:49:fb:
         9f:2d:10:5b:55:a2:aa:51:c7:31:7d:aa:50:87:a6:6d:38:12:
         94:4f:10:78:fe:b1:d4:15:73:bd:03:18:93:6b:df:7c:2f:0f:
         ff:a2:9e:b1:08:c8:82:8b:f7:0f:b8:4a:7e:84:3d:22:7d:48:
         bd:b1:10:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:47 2025 by rpki-client