Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File:                     wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier:          wuMlGOKZXxfqLEbvzOgxAihiI7cccShqstHJ8LWOeVA=
Subject key identifier:   95:FD:F4:92:73:4B:BC:05:03:B2:4B:19:A0:CA:78:D7:D8:DF:6F:06
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer:       /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial:       01967643369EFFBA7A350A45A3D9B8F09C12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number:          1512
Signing time:             Sun 27 Apr 2025 08:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:38 +0000
Files and hashes:         1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=)
                          2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: +HyXz3F3AWYbVMQaQXaCFPn8p5pNSZ/x5S68KZv3ALA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:36:9e:ff:ba:7a:35:0a:45:a3:d9:b8:f0:9c:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
        Validity
            Not Before: Apr 27 08:00:38 2025 GMT
            Not After : Apr 28 08:00:38 2025 GMT
        Subject: CN=95fdf492734bbc0503b24b19a0ca78d7d8df6f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:d0:6b:2a:3b:c4:11:57:0a:bd:68:3e:96:
                    a7:29:c2:57:01:bc:c7:5c:5e:fc:08:e4:d0:8f:73:
                    84:be:43:f0:22:32:9b:3e:3d:4b:a9:78:7f:af:92:
                    20:fe:55:2b:cb:8d:95:11:11:b9:d0:73:4a:bc:ae:
                    32:dc:ba:83:de:1b:9c:98:e3:51:d1:7d:be:29:d9:
                    5c:40:c8:61:40:7f:f5:ec:75:d7:39:2c:22:f7:19:
                    41:2d:4b:09:46:80:e4:41:be:77:37:97:3b:89:28:
                    ca:ec:9e:ae:63:9d:34:65:ab:1c:f4:66:59:5f:d5:
                    6d:98:d1:b7:db:bd:75:0b:7e:97:f7:03:56:ee:93:
                    3b:43:8a:0f:c2:98:25:22:7f:57:5f:af:79:17:be:
                    8c:d7:ba:45:1e:08:d4:d1:db:c8:80:58:45:13:17:
                    c7:fe:a5:1a:13:93:28:61:9a:6d:d2:4c:61:b8:d0:
                    13:c0:20:09:cf:b0:90:d2:66:ee:4f:aa:94:58:0a:
                    84:e4:fc:f2:d3:57:cb:25:9a:e1:5c:9e:39:49:8d:
                    26:00:d3:54:e6:0c:e9:dc:fe:5d:c4:63:b4:ec:18:
                    22:13:17:11:9d:50:fa:c2:b8:19:91:e6:10:3d:3a:
                    90:32:b1:d2:dd:1c:ff:5f:72:aa:a6:41:79:15:5c:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FD:F4:92:73:4B:BC:05:03:B2:4B:19:A0:CA:78:D7:D8:DF:6F:06
            X509v3 Authority Key Identifier:
                keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:6b:8a:5a:92:64:96:1a:f1:f6:a8:0c:09:a7:49:d8:a3:41:
         1c:9a:9a:96:be:d4:0c:7e:52:86:22:f2:17:bf:46:fd:cd:f6:
         ad:fd:7f:c4:88:5f:d2:a2:6d:bc:35:b8:37:63:69:c3:cf:65:
         f2:dd:1e:a1:b8:3a:c8:37:d7:bb:65:7e:3a:c3:64:9f:44:6d:
         fe:9e:e0:b4:d4:cd:75:ec:ba:3e:1e:df:88:6d:49:fe:bd:5a:
         b4:83:69:90:67:fa:e1:e5:26:ad:d1:39:48:5d:a4:f9:55:14:
         74:f9:7b:25:72:53:d9:b1:7b:fe:71:60:c3:7d:6b:75:d4:a9:
         bc:4b:76:dd:a4:83:d9:1e:c2:18:2a:fc:00:7b:df:4f:1e:ad:
         c7:a4:de:84:69:29:d8:a8:41:7b:7a:ce:e5:b0:ba:16:b8:a5:
         3e:34:fc:b3:8b:a4:a4:92:ad:e3:93:4b:9e:cf:76:7a:14:15:
         58:ab:58:ab:8c:1d:67:46:a1:8f:26:b0:b4:60:5e:72:25:55:
         4e:ec:be:7a:e8:10:e7:71:4f:06:86:01:35:b1:07:9b:0d:4f:
         43:08:ad:7f:46:7a:4f:b2:0c:ed:99:38:b5:a8:aa:a0:6a:e5:
         21:bd:87:4e:ac:68:5d:1d:9b:43:07:31:b4:06:e8:39:16:f2:
         f8:e4:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:44 2025 by rpki-client