Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
File:                     WpeXnbcm_j5pPbktT6GP10G-dpk.mft (raw, json)
Hash identifier:          Ffa0ivpegwhMFVBTcBqcpYm1LHQ2+2rsYJucFXCBlGI=
Subject key identifier:   1D:13:66:7F:59:99:01:62:4C:BC:8F:02:F6:E6:DF:2E:81:79:43:AA
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Certificate issuer:       /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial:       019679E95AC42B6D19B862B26797A39C6BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
Manifest number:          0901
Signing time:             Mon 28 Apr 2025 01:00:58 +0000
Manifest this update:     Mon 28 Apr 2025 01:00:58 +0000
Manifest next update:     Tue 29 Apr 2025 01:00:58 +0000
Files and hashes:         1: WpeXnbcm_j5pPbktT6GP10G-dpk.crl (hash: yQt2aLt5u5ZlApCE2dJSTD3xUk8HdXE0Ei1yEGxjxAY=)
                          2: g8ik8LhTpez36WlLRS_uriZTLH8.roa (hash: YLceWIfaqnl3VHFv/2hpFigz+RqKWgu9tOc3uAbYAYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:5a:c4:2b:6d:19:b8:62:b2:67:97:a3:9c:6b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
        Validity
            Not Before: Apr 28 01:00:58 2025 GMT
            Not After : Apr 29 01:00:58 2025 GMT
        Subject: CN=1d13667f599901624cbc8f02f6e6df2e817943aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5e:be:0c:bf:d8:1a:51:2e:09:57:8c:e8:21:
                    a7:20:c2:38:4b:c2:71:02:d4:29:e9:ea:bd:ae:f2:
                    9d:12:ab:09:22:c6:ba:aa:7c:f1:fb:c6:a5:91:b3:
                    77:e5:7b:22:8d:6f:4d:52:3c:0d:52:0c:6c:b1:cb:
                    fe:ea:f1:db:67:4f:c5:46:ec:0b:88:e9:68:22:7f:
                    41:39:ef:ad:30:05:85:b2:c9:e4:f3:ac:95:a1:1c:
                    ff:53:d8:9e:e9:0f:33:f8:31:a8:78:bf:91:64:7d:
                    b1:0f:43:d3:84:0d:5b:1b:c9:b3:3d:5b:f7:3f:6e:
                    6d:ea:d4:b5:5a:67:9c:94:b7:b8:d7:e7:38:7f:63:
                    b1:4b:ca:31:79:d6:fa:54:0e:1d:e2:8d:08:f3:1d:
                    1c:80:9a:83:10:13:10:d5:66:75:bc:4e:a3:bb:f9:
                    f0:05:dc:93:57:af:d4:9f:52:07:e9:5a:33:99:9c:
                    d0:7b:a1:dc:e5:f7:7c:93:36:59:8b:0f:61:c6:bf:
                    39:c7:76:19:08:c0:21:d1:3e:13:1d:df:1a:0a:61:
                    0d:15:2a:64:9b:ff:e4:83:a3:b3:85:b9:17:0d:3a:
                    e8:3e:3f:3b:57:bf:7f:b6:00:2e:72:81:6b:6f:30:
                    40:f7:8b:79:74:2b:c6:06:fe:75:85:ad:12:0d:27:
                    36:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:66:7F:59:99:01:62:4C:BC:8F:02:F6:E6:DF:2E:81:79:43:AA
            X509v3 Authority Key Identifier:
                keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:50:7c:b8:14:e8:4b:e5:73:5e:6a:72:fc:39:7b:fd:5f:63:
         c9:44:6b:c8:c2:f1:06:ca:31:1c:c9:fc:78:92:bd:47:00:10:
         74:b0:3d:c7:c3:3c:05:00:9f:f7:59:82:3b:81:2c:c2:1a:42:
         cd:d4:7d:7f:b4:b6:af:90:e4:94:78:6b:5b:d6:53:59:dd:bb:
         fb:29:de:a6:e2:68:ab:f0:fe:7b:44:8e:d9:49:d0:34:8c:97:
         72:e6:4d:60:b7:bb:48:df:db:f7:3e:17:e5:8a:d9:69:84:0a:
         4e:11:2b:87:6f:0f:f7:3b:96:f2:99:2b:e8:08:17:69:43:a2:
         ab:e5:e7:b8:04:54:8e:ef:f4:bd:e0:66:5d:9b:2b:28:81:a2:
         6d:fb:f8:c1:a2:69:57:e7:25:0c:c0:63:6b:f8:76:b0:ab:a9:
         82:19:e9:19:2c:cd:c7:6d:5f:53:02:b9:e9:55:26:d5:64:c1:
         04:29:6b:cd:4c:f3:55:e7:69:6e:ab:e7:e9:70:8a:82:b0:22:
         60:3a:0a:cb:4b:ee:b9:02:65:72:3f:4f:3a:89:4f:f5:3f:db:
         f2:c5:ca:f0:1d:66:d3:23:70:e0:1c:8c:4b:01:45:ad:e6:ef:
         ac:5e:4c:9e:54:74:50:df:c4:89:4e:b0:53:79:f4:94:cd:fb:
         20:60:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:17:43 2025 by rpki-client