Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          kPqC7OQplCgXRGkgWF42/BDFEm9lfLJM6TzzZr5YDdA=
Subject key identifier:   8F:7C:CC:25:33:90:1D:EE:B1:89:28:2F:96:F0:92:B0:49:2D:4D:40
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       019679444843D59B26BD8EEDF2EB7740516C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          08F9
Signing time:             Sun 27 Apr 2025 22:00:40 +0000
Manifest this update:     Sun 27 Apr 2025 22:00:40 +0000
Manifest next update:     Mon 28 Apr 2025 22:00:40 +0000
Files and hashes:         1: DTuRKBc5DWAml25DkyA602e9E2c.roa (hash: 5dE22gWyeJTuF6kqg31h2vC+gEZF7bnxpO0rszd82sI=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: qFCvweJ9MTGKQtIYQPTnW9vriT4wAziZLYN/t+VdqN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:44:48:43:d5:9b:26:bd:8e:ed:f2:eb:77:40:51:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: Apr 27 22:00:40 2025 GMT
            Not After : Apr 28 22:00:40 2025 GMT
        Subject: CN=8f7ccc2533901deeb189282f96f092b0492d4d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:d4:1d:cc:02:28:62:bb:71:14:61:25:32:
                    d9:e1:6b:04:0e:fd:66:87:a2:53:2c:b0:5f:ab:2c:
                    1e:b3:9e:44:42:de:fe:90:e4:7a:ac:e3:94:d0:9f:
                    ab:b2:b5:1d:f0:74:bd:78:8a:53:8c:11:b8:09:4a:
                    09:f3:af:59:b5:9b:e4:c7:07:30:f0:f9:36:ce:da:
                    a8:1c:b7:b0:99:5b:92:72:21:03:57:79:00:bb:7a:
                    d7:00:59:af:25:56:9b:2c:eb:bd:44:ad:b7:8f:bd:
                    93:61:07:e2:66:c1:1e:28:be:03:52:69:5f:8e:c5:
                    1d:e7:3f:e3:b7:e6:0f:d9:f3:40:b7:eb:b2:34:35:
                    db:18:e7:88:b0:14:06:2a:fd:da:41:73:bc:ee:22:
                    54:f8:05:92:84:07:e3:53:cc:b3:82:cc:66:cf:c4:
                    cb:46:c8:6d:4e:52:87:9a:fe:c3:7d:56:92:c5:d2:
                    d1:ed:76:c0:97:20:75:9b:9a:3a:0d:52:94:e1:78:
                    52:7b:1d:73:ef:33:09:04:c3:41:c2:93:cb:1b:89:
                    34:99:28:4c:e6:eb:ce:a5:23:18:b8:8b:e5:7e:3c:
                    e8:59:c8:d4:55:9e:55:29:b0:1c:95:be:6f:e0:ef:
                    8e:67:16:34:eb:a4:74:5b:f6:dc:91:a4:2c:d1:65:
                    62:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7C:CC:25:33:90:1D:EE:B1:89:28:2F:96:F0:92:B0:49:2D:4D:40
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:35:87:ad:4e:99:41:02:ad:80:e2:4d:aa:1f:5b:7a:15:3d:
         32:b6:27:05:95:58:68:0f:38:ea:44:c1:6f:7d:13:73:6b:c1:
         d4:80:44:96:39:fb:86:be:c4:c9:c5:4f:af:ab:47:a2:4e:08:
         b8:7d:91:08:f0:fe:95:f1:b0:aa:12:93:92:75:72:b1:db:10:
         c2:51:88:7c:6d:98:fd:13:07:4c:f1:6f:dd:3f:c7:38:95:d5:
         e7:92:7d:72:99:74:a5:a1:2b:f9:e3:34:d8:79:c6:95:b0:6c:
         51:13:7b:cd:f3:7f:5c:75:9b:ae:66:ec:c7:e3:79:c5:f0:46:
         c3:42:5d:9c:e0:88:6b:dd:72:29:57:9d:b0:aa:ff:60:36:cd:
         6a:9c:69:2f:36:e9:b2:4e:47:1e:80:90:6a:4c:44:c1:65:9a:
         8e:99:af:95:4d:85:95:59:cf:e8:b7:8c:03:60:c0:df:d0:40:
         d6:ee:57:3d:55:8f:da:5e:ce:30:b5:b5:b1:6f:61:83:6a:08:
         94:a9:02:1f:b3:76:57:05:28:e8:11:db:97:59:5f:a1:dd:f7:
         7d:27:ef:fa:94:26:18:3d:0a:73:58:39:6e:81:27:f2:c9:2a:
         cd:ec:4a:ac:c7:5a:1d:2f:92:c7:5f:e4:8c:b2:83:77:18:1d:
         c8:a3:9f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:51:27 2025 by rpki-client