Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
File:                     WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft (raw, json)
Hash identifier:          GV80Jcv4gkJ4gGq0PdiuR0oI5Yv4/N2v4AYCELTZw3k=
Subject key identifier:   58:A2:5F:D3:C2:BB:5C:05:CC:82:2E:F9:2F:E8:78:5A:75:2E:07:E8
Authority key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Certificate issuer:       /CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Certificate serial:       019685116F7F12A81657BECEBF0DC1EBF6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
Manifest number:          0846
Signing time:             Wed 30 Apr 2025 05:00:34 +0000
Manifest this update:     Wed 30 Apr 2025 05:00:34 +0000
Manifest next update:     Thu 01 May 2025 05:00:34 +0000
Files and hashes:         1: 13RrS0RVMNZjnoNzLeY0leATSKM.roa (hash: 5Kd668wao4EqEPYlsHp9hU5bq0vk1PZWy+Au8TDKmnI=)
                          2: WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl (hash: AorXiiH+3Y/3zqND+ISTJwKgb/vBz5MsJcIXqqIp100=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:11:6f:7f:12:a8:16:57:be:ce:bf:0d:c1:eb:f6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
        Validity
            Not Before: Apr 30 05:00:34 2025 GMT
            Not After : May  1 05:00:34 2025 GMT
        Subject: CN=58a25fd3c2bb5c05cc822ef92fe8785a752e07e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:82:14:50:b8:9a:3a:f7:96:6b:9a:03:a9:
                    a1:9f:1d:19:9d:e7:d4:1a:0b:63:64:76:c1:3c:04:
                    e1:13:68:90:00:3d:24:c0:45:11:f9:52:53:48:a1:
                    50:85:1d:f4:ae:ee:8c:50:d2:62:7b:b8:4a:83:81:
                    c4:6c:c7:91:ca:3c:d0:e1:10:9b:5e:7b:49:9a:7c:
                    c0:20:92:56:dc:42:4d:38:55:bb:bf:92:53:cc:df:
                    33:2c:ec:96:f7:5d:25:16:a6:b6:83:09:0f:b2:ce:
                    54:ea:f1:f2:4b:f2:a7:93:9d:f2:4a:f9:56:98:2f:
                    06:ae:2c:c4:c0:d6:57:b4:d2:e6:ca:60:83:be:86:
                    11:2e:72:86:b4:32:aa:90:c8:d8:89:c0:e8:c8:27:
                    a8:ce:e5:af:0d:af:a2:5a:93:11:b2:2f:e7:a7:f5:
                    06:7b:c6:78:a7:1d:ae:37:33:dc:f8:97:4a:c3:05:
                    88:c6:3a:20:f6:26:e5:ee:b4:03:0e:19:cb:aa:c1:
                    f1:9c:3e:db:db:0c:fb:53:af:d6:c8:3e:ac:5a:b1:
                    e0:60:da:06:52:d2:7a:67:66:33:f1:c3:62:9a:b4:
                    ec:90:3b:08:13:ea:45:22:82:2b:f3:04:f3:5d:32:
                    31:ad:3a:e0:c4:0f:ad:8c:96:ff:dc:8a:f3:be:bf:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:5F:D3:C2:BB:5C:05:CC:82:2E:F9:2F:E8:78:5A:75:2E:07:E8
            X509v3 Authority Key Identifier:
                keyid:5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:59:4a:6a:3e:9c:c1:f8:28:83:51:6c:3e:e9:12:a2:b6:fa:
         69:bf:24:60:3d:28:af:60:dd:ae:86:4f:62:de:69:92:c4:bb:
         da:82:35:68:2f:dc:1a:86:58:84:02:aa:b5:ac:25:64:6f:4e:
         3a:d8:4a:a6:b4:31:78:6e:d1:83:44:5e:3f:59:8d:7d:d4:5c:
         72:29:00:ae:c1:90:88:42:1b:3b:23:e1:d3:c8:f5:e7:15:b7:
         cd:a2:cb:58:6a:9a:e5:94:4d:00:06:ff:aa:56:c8:84:75:3d:
         ed:66:a4:02:98:2f:fc:8b:ff:eb:cd:ce:87:75:79:91:99:80:
         6f:48:bd:df:7a:6d:63:02:77:5b:e4:38:2f:80:67:d1:a9:64:
         58:3f:4b:a3:45:3f:f2:59:a2:36:1e:b5:ce:1e:50:db:f4:30:
         60:4d:7b:95:85:65:f3:ed:70:b8:4c:f0:22:a8:94:af:2b:6a:
         4c:55:32:e7:3f:ab:3b:6e:f5:0a:fc:76:b6:2e:2a:47:be:a2:
         33:cb:f2:bd:72:38:ea:16:53:94:30:a3:52:d1:0d:ab:7d:dc:
         50:d5:4b:05:d0:1d:e1:7e:9c:46:0f:5e:bd:ac:63:7e:7e:ec:
         9e:a9:0d:9f:da:c6:0a:b2:66:47:ef:a4:0d:05:12:5c:d8:88:
         e2:f1:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 07:33:17 2025 by rpki-client