Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File:                     WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier:          wBRXjP+gkOT1feQH2kIb3tGNcteY+GqbqKIjJp26TqU=
Subject key identifier:   1E:4A:FA:30:57:0C:43:C9:A5:A4:15:7F:C7:72:82:89:45:3B:EA:21
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer:       /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial:       019674C26873E93E6C2B43404112A4F308EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 01:00:19 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:19 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:19 +0000
Files and hashes:         1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: XeQUw4UeO6O3xXvGnfvB+EedV+VD+bKYeXNXv5BLb+s=)
                          2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:68:73:e9:3e:6c:2b:43:40:41:12:a4:f3:08:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
        Validity
            Not Before: Apr 27 01:00:19 2025 GMT
            Not After : Apr 28 01:00:19 2025 GMT
        Subject: CN=1e4afa30570c43c9a5a4157fc7728289453bea21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:59:ec:dd:0b:13:d7:32:21:37:b9:d5:66:
                    04:6b:1e:01:08:e2:1d:4b:e8:e4:3b:c1:40:8f:b4:
                    7d:6a:ba:59:f2:95:56:7b:58:7d:bb:89:1d:e2:0d:
                    c9:70:44:81:bb:08:7b:0a:3b:8e:91:53:72:da:a2:
                    a6:d8:76:53:b9:91:4a:0f:b5:80:fe:5b:3a:02:7e:
                    a4:cb:20:93:76:1c:31:e2:37:bc:4b:20:68:c3:a0:
                    02:87:67:bf:2a:2f:19:54:80:ad:ff:d6:bd:b9:85:
                    53:44:8a:a5:09:a7:8f:71:19:9a:0a:0a:6d:e7:61:
                    13:ec:82:1c:89:a7:c6:ba:ac:4c:64:ac:0f:ef:65:
                    cb:f4:42:62:06:5e:b1:87:15:aa:5d:1b:37:8c:b2:
                    f9:69:fe:7d:29:5a:b3:c5:5b:f6:4d:0a:1c:89:fe:
                    18:7a:5d:68:49:71:8f:a3:76:89:63:cf:09:b6:89:
                    90:c5:25:95:0e:31:f4:97:e2:f1:72:ea:24:e0:d4:
                    ef:de:53:f6:f6:b6:f0:be:9a:d9:54:20:f7:62:9a:
                    6a:69:d8:00:15:cc:13:f5:e5:0a:a6:58:bb:ad:f8:
                    c0:36:f4:8e:c3:dd:7f:4a:4a:f6:e6:34:e1:1d:31:
                    f6:c4:f9:01:8f:93:26:05:df:bf:54:b4:43:23:e2:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4A:FA:30:57:0C:43:C9:A5:A4:15:7F:C7:72:82:89:45:3B:EA:21
            X509v3 Authority Key Identifier:
                keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:ae:ce:00:6c:94:db:6e:ed:dd:da:3e:0f:f4:04:e6:e2:
         fe:91:87:c6:e1:10:c6:9a:21:e2:15:a9:97:8c:29:20:ff:47:
         dc:b0:55:99:c2:d4:42:b5:c3:7b:49:cc:77:d1:5e:49:00:f2:
         5c:03:83:dd:b8:8c:09:ec:2c:70:7f:3c:e5:fb:c9:4f:07:4b:
         ca:cb:3c:a5:7a:d0:bd:a3:51:c0:89:06:55:05:42:21:bc:1c:
         d2:0c:56:87:83:d3:d8:fb:1c:07:07:33:77:6f:19:00:e2:f0:
         7f:6b:9f:2f:b4:2c:d4:8e:d8:e3:22:db:7d:61:99:a3:db:24:
         ba:80:3b:39:8c:6b:e6:2b:10:f6:1d:2d:6a:d9:7a:85:a0:e6:
         0d:de:26:dc:f5:fe:74:c3:81:31:57:9f:8c:6d:af:41:dd:6b:
         f2:ad:e5:a1:8d:d6:94:b8:73:28:68:b0:ff:f8:0d:a9:14:b0:
         9b:6d:30:55:10:83:db:f9:f7:61:05:9b:41:a6:92:08:3e:d5:
         1d:94:2d:ea:16:e9:74:fb:0a:da:d5:59:29:1d:38:4d:ce:2d:
         4a:35:e1:3f:b9:0b:ca:9c:80:23:dd:5e:b4:2c:be:fd:51:45:
         18:a5:bb:bd:f9:f7:9a:c0:0e:00:16:84:fe:fd:d7:64:54:4b:
         3f:4b:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:47 2025 by rpki-client