Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
File:                     WIOU45ENlKe_Cnig8wLQKumQcnM.mft (raw, json)
Hash identifier:          5jzWM2xq+f19jBlQ3tZ/DOtVvkVhZl+BihxVMePtgtc=
Subject key identifier:   AC:CC:78:D0:CE:8B:52:0E:71:AB:ED:30:4B:48:40:C9:2A:19:C7:7D
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Certificate issuer:       /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial:       0196789F2F1411AF678B968AB248508AA947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 19:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:20 +0000
Files and hashes:         1: WIOU45ENlKe_Cnig8wLQKumQcnM.crl (hash: z0RTTtT3cKwZyLnGTdMsAhZdh4eB3c8JW/VOEIFOQ58=)
                          2: pkgQahpzHWh56tzgd9d98n8d-uM.roa (hash: YQurlMI/tTqNmD2eoDZiGf6050yJ+e+y29w7dKL/U9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:2f:14:11:af:67:8b:96:8a:b2:48:50:8a:a9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
        Validity
            Not Before: Apr 27 19:00:20 2025 GMT
            Not After : Apr 28 19:00:20 2025 GMT
        Subject: CN=accc78d0ce8b520e71abed304b4840c92a19c77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2b:e1:3a:5e:72:3b:b4:ac:5d:ef:ad:bc:03:
                    5f:d7:07:cb:a1:f9:ed:2a:b1:45:be:a1:6e:eb:69:
                    2c:8e:e8:d8:09:76:0e:9d:be:f1:35:63:83:46:11:
                    ae:eb:21:ea:97:ba:23:70:40:bc:74:67:d6:96:0a:
                    72:ff:5d:5a:37:53:05:d9:f0:67:47:dd:d3:86:94:
                    5f:37:4c:50:f0:20:f0:42:6d:79:bd:4d:a6:ea:3c:
                    d7:33:df:80:47:72:f9:46:09:e6:9a:9f:15:40:7d:
                    af:38:62:67:76:4b:f7:ac:0f:1f:5c:09:8a:50:07:
                    8a:85:cb:91:f8:81:6a:63:d8:bf:7a:bb:b9:65:b4:
                    c5:09:fa:0f:19:55:37:5f:64:b1:c4:97:87:e9:80:
                    bc:e6:57:06:7b:56:b8:59:05:2b:01:9b:f8:ce:9d:
                    d4:b2:77:a2:54:26:23:7e:77:21:51:32:1b:07:ab:
                    a2:89:bc:42:e0:4c:dd:94:6b:a4:8a:3e:11:53:4e:
                    e3:30:0f:4f:0c:94:8f:33:ff:9f:fb:8c:b8:59:55:
                    23:c8:25:2d:ee:07:e9:ab:7a:52:e8:d5:e5:cf:3e:
                    f3:a9:47:7e:3b:2b:50:ec:81:52:79:24:47:48:b1:
                    6b:be:d1:0c:61:30:f0:37:e1:d7:f8:dd:20:c6:7c:
                    be:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:78:D0:CE:8B:52:0E:71:AB:ED:30:4B:48:40:C9:2A:19:C7:7D
            X509v3 Authority Key Identifier:
                keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:22:e7:ef:28:8d:43:e8:94:2a:cb:47:f8:1e:69:d9:00:c5:
         67:f9:4a:50:f3:8e:31:d1:1f:c9:8e:96:48:35:ba:62:60:f6:
         74:b4:88:c3:1e:88:bb:f7:6a:cd:2a:46:e5:ab:d7:63:4b:52:
         7e:19:13:79:0e:f1:81:8f:35:60:be:74:95:2f:95:02:ae:28:
         56:8d:00:85:71:d4:25:fd:98:cf:3d:f0:e6:3c:7c:54:03:bf:
         61:17:82:0c:ad:00:e6:37:43:56:28:ec:6e:48:56:c5:93:bf:
         80:15:20:72:bb:10:17:af:5a:1f:58:8e:91:85:12:1f:7e:5f:
         4e:ca:7e:51:70:00:9a:51:07:8c:1b:54:1f:1e:29:db:48:5c:
         c6:83:a3:b7:48:70:f2:36:22:82:4d:ef:25:d5:22:64:0c:1d:
         59:91:35:ba:f5:dd:e6:85:e7:0d:b5:fb:f1:e7:10:2e:78:bf:
         00:8a:83:7c:27:40:52:ad:92:d0:b8:e2:2e:67:67:4f:49:f9:
         ef:ed:de:3e:07:13:9e:4d:7c:b7:3a:56:df:74:c8:a9:d1:b4:
         a1:00:78:00:65:47:98:a0:ef:60:92:b7:5d:17:d7:bb:87:f0:
         cf:6a:27:b7:f7:d9:21:52:bf:a4:07:99:6c:39:e6:d8:ae:42:
         13:47:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:06:39 2025 by rpki-client