Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          hISoN7Rl8vs+7Qh7SpZ9F7Cgm40Ykp2FrOzlYkynZsg=
Subject key identifier:   EF:91:A8:FD:AA:3D:29:3F:E5:78:EA:03:03:9F:74:7C:28:B4:26:F6
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       019673B0244923CB578BC8ACF2428D6F53CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          0E21
Signing time:             Sat 26 Apr 2025 20:00:45 +0000
Manifest this update:     Sat 26 Apr 2025 20:00:45 +0000
Manifest next update:     Sun 27 Apr 2025 20:00:45 +0000
Files and hashes:         1: 6EXhvKaYuiSv7QzpiDlEqKp3HxQ.roa (hash: XgOtkTf6/3mw63PcUPKIMiqdp+H34pYiXMAQZ7u4ASY=)
                          2: Bb8ycOE7qhSFoSMHyD2xB85u_Z0.roa (hash: KcdCM+LEn+v24gkqqCtc8motwJZXGA9KFLUTB0+gGg8=)
                          3: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: K4I7nbsd9TpPXkhqPwwhliw2L1GCV5je+CvxEuU0QLU=)
                          4: kTl30QOsbrDzk_mb8ECK1dAhV14.roa (hash: ktEj7/KQdl7DWD89NCLPeaAfOqTe9FU+2FvlPHr9TVM=)
                          5: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (hash: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:24:49:23:cb:57:8b:c8:ac:f2:42:8d:6f:53:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Apr 26 20:00:45 2025 GMT
            Not After : Apr 27 20:00:45 2025 GMT
        Subject: CN=ef91a8fdaa3d293fe578ea03039f747c28b426f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:87:bd:8a:79:6c:a0:23:06:42:02:d4:c8:
                    66:f1:a4:79:d6:24:40:a7:da:bc:4a:51:2e:19:9b:
                    73:78:be:35:da:9d:c3:86:d8:e0:94:27:72:0d:b2:
                    98:82:aa:71:ef:fa:03:bd:44:1d:9a:c8:91:ad:91:
                    22:b6:7e:bb:4e:0f:d6:6c:16:b0:da:31:ee:14:75:
                    8b:28:20:be:1d:e2:bd:2d:e5:e4:87:48:0d:06:44:
                    3a:ce:93:21:65:e0:fd:92:1a:bb:26:43:d3:27:90:
                    70:87:c6:fa:99:7b:0b:2f:81:4c:97:52:2a:49:db:
                    46:53:a6:fa:1a:d9:f0:5a:b4:07:4e:fc:ec:e7:13:
                    4e:aa:f9:9e:20:5e:ea:63:25:c0:89:82:97:8c:87:
                    d5:4a:4f:bb:2b:ae:a9:a5:2d:f1:af:42:bb:d1:90:
                    2d:b5:96:fe:b2:8b:5a:df:09:27:92:e7:8c:49:6a:
                    ea:85:49:6f:85:a9:e8:4f:35:2c:33:b7:78:74:36:
                    9d:2d:9c:39:68:34:a2:74:c7:51:63:9e:76:8e:29:
                    81:e6:5e:33:4e:66:04:35:f5:f2:85:e2:7d:bd:9e:
                    6a:4b:5c:ce:09:46:e1:7a:88:c9:0a:e3:e2:12:ba:
                    3a:08:2b:a4:de:8a:6e:05:f0:70:b7:91:ed:e0:99:
                    d4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:91:A8:FD:AA:3D:29:3F:E5:78:EA:03:03:9F:74:7C:28:B4:26:F6
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:47:92:4c:f7:2c:a8:cf:7f:0f:ef:69:60:fd:f6:fd:e4:d9:
         d4:6e:57:37:5b:22:9c:8f:28:a2:ca:01:2c:28:44:f7:12:a1:
         fe:08:1a:85:47:47:bb:d6:c8:2d:37:af:49:56:a0:c3:87:c3:
         6a:1d:b9:38:aa:3d:2c:21:58:ac:7e:be:3a:fb:61:85:40:4e:
         ad:87:eb:09:a2:15:04:00:bf:c0:a4:e1:e9:cf:1c:c2:27:d5:
         7e:b7:01:c9:cf:91:fd:da:46:33:15:a4:ac:fa:a8:06:58:53:
         a2:c6:d3:48:39:59:1d:1d:08:89:4d:15:c6:0e:8e:3d:f4:50:
         a0:e8:a0:f8:15:42:44:49:78:4b:12:fc:e2:f1:28:4f:ee:c5:
         c1:ef:8e:47:78:39:5a:58:90:40:af:88:7d:b7:9e:35:e0:5b:
         f7:f5:66:17:47:28:58:b7:82:fe:59:d4:a3:8f:f5:a1:64:57:
         62:3e:34:f1:74:ee:4a:e9:f1:09:0f:11:d5:c2:ed:a6:42:90:
         2f:c4:99:b5:8b:c9:1a:cc:ff:57:40:6f:6b:38:0f:fc:19:eb:
         af:53:78:c9:c1:9c:b4:85:9c:bd:c9:46:27:a6:06:53:88:0b:
         e4:9f:8c:b9:f9:fe:59:d0:c9:b3:3a:90:32:2a:7a:f6:02:62:
         a2:d1:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:07:35 2025 by rpki-client