Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          zkm7mPVZqPYrbBUTnlNabpAS1FRV8oY5QOH+RLdvmJk=
Subject key identifier:   E4:68:0A:B4:DF:86:71:B2:55:97:78:C6:DA:54:45:50:D3:FD:2A:0E
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       0196789F120078FD9D99CC2F4A67DECF567E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          04C9
Signing time:             Sun 27 Apr 2025 19:00:12 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:12 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:12 +0000
Files and hashes:         1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: YdRlmCG+5IGhMEDqCxgy82QUiyazVpMDcJBw/SKP7Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:12:00:78:fd:9d:99:cc:2f:4a:67:de:cf:56:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Apr 27 19:00:12 2025 GMT
            Not After : Apr 28 19:00:12 2025 GMT
        Subject: CN=e4680ab4df8671b2559778c6da544550d3fd2a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:ac:8e:f9:c8:9f:73:ce:ef:ab:aa:68:9d:
                    b5:76:0d:2b:9c:31:81:71:11:19:9d:80:5c:2c:b5:
                    d8:d6:dc:59:39:a0:a9:9b:97:02:fc:49:4b:16:5c:
                    de:ab:1c:19:45:5c:a5:a2:a5:f6:cd:b0:bb:25:59:
                    6d:c7:ff:72:6d:ec:c4:f0:87:78:d7:c0:ce:df:22:
                    87:24:91:d3:ed:e7:ba:81:0a:97:27:41:90:59:cc:
                    a3:84:8f:5e:1c:fe:72:b8:b8:47:e5:fc:e2:2f:1b:
                    70:74:d6:33:fb:69:31:14:78:86:fe:64:70:08:d8:
                    28:6b:59:c9:1f:71:97:b9:ad:77:97:5f:58:6a:3f:
                    df:f7:32:a6:96:34:b2:57:40:18:5b:11:87:d4:ab:
                    cd:85:33:6f:83:f4:72:4b:31:f4:da:f0:f5:83:87:
                    f4:a2:75:c7:91:62:75:ea:d6:b0:5d:1d:4e:b0:ba:
                    7a:2e:58:20:af:aa:d4:b1:43:aa:4d:0e:da:a3:45:
                    78:9b:28:e6:6a:d8:41:80:ae:2d:5a:c5:7b:1a:d2:
                    6b:e6:7e:95:10:a9:b3:4e:d1:dc:1c:df:b8:5f:c9:
                    b2:ef:55:71:66:55:b8:90:64:47:8f:66:63:19:e2:
                    1f:9c:3a:86:a7:05:06:2c:69:2d:33:94:e3:be:2b:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:68:0A:B4:DF:86:71:B2:55:97:78:C6:DA:54:45:50:D3:FD:2A:0E
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b2:23:96:e3:1e:1f:41:cb:78:a6:20:5a:c0:0e:b2:d1:b7:
         4d:6a:5e:e1:1c:a2:d7:36:39:ba:28:dc:e8:5c:7f:3e:5d:3f:
         4b:ff:0f:bc:6a:73:25:94:3b:93:98:c8:9d:9b:85:d6:2c:97:
         31:9e:e3:7d:df:f2:18:c2:66:bb:13:64:7a:3b:5d:7b:da:51:
         2a:6f:01:64:42:64:07:b7:48:73:39:73:2c:83:b1:f0:7c:be:
         e8:fb:99:7f:fd:80:9a:b1:d8:d9:93:c2:f5:c0:02:e0:9e:cc:
         27:c1:fe:62:92:68:e3:fa:26:59:b7:f0:cb:d3:a3:10:d3:8a:
         9a:b1:30:e5:5c:86:a9:5d:7f:7a:e8:1f:89:21:0b:45:0b:26:
         1c:96:e1:83:83:95:56:9b:4c:8d:d1:8c:98:6c:16:44:d3:d7:
         fc:7f:e9:01:9a:7a:9f:f8:2b:67:fc:62:57:e0:f0:10:54:b1:
         1b:c8:6c:63:28:63:cd:81:94:cd:05:8a:2f:73:25:0b:99:a9:
         38:d4:23:ce:8f:18:e1:fc:f5:7b:a9:0b:dc:9a:9a:da:ba:83:
         4c:1d:74:8f:33:0b:6d:f1:e7:7f:24:93:20:a9:f3:9d:5b:36:
         c2:44:c8:d3:c7:fd:be:3e:f7:4e:0a:e3:e1:dc:2a:0d:0c:5e:
         a9:81:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:44:18 2025 by rpki-client