Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File:                     WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier:          zycXkNVibFdMaBXHWlH2vdd7uXew1A4Lltx6XR+CHnY=
Subject key identifier:   9B:08:25:67:89:78:BF:CF:28:EB:C3:00:DE:B1:9D:53:93:A9:0E:F8
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer:       /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial:       0196753042A1565E92E22031451E62469B24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 03:00:19 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:19 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:19 +0000
Files and hashes:         1: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (hash: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=)
                          2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: 9cPPlTFetVWE7BP9aGwVuxh9M3baXHNojAPDpCtZqB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:42:a1:56:5e:92:e2:20:31:45:1e:62:46:9b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
        Validity
            Not Before: Apr 27 03:00:19 2025 GMT
            Not After : Apr 28 03:00:19 2025 GMT
        Subject: CN=9b0825678978bfcf28ebc300deb19d5393a90ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:eb:01:00:57:53:a4:94:b7:5a:6f:19:55:
                    d6:3f:31:4a:69:5f:99:d1:05:50:8a:e4:af:8d:29:
                    f0:6d:bd:95:88:71:dd:92:5f:c6:95:0f:28:33:5c:
                    1b:f8:6f:4c:1a:32:b6:40:a4:37:cf:1a:41:10:0c:
                    c9:8a:44:69:d3:12:ef:c9:fb:4e:12:fb:8d:40:5d:
                    df:1a:2a:d3:7b:19:b2:af:25:ed:03:e5:73:0b:75:
                    17:b4:7c:b6:44:2e:34:ee:34:a5:70:29:3e:49:df:
                    67:40:a5:6f:5e:59:75:d6:78:0b:3c:a0:83:f3:27:
                    3f:06:d6:46:ac:8a:c8:ec:47:f0:43:59:12:e4:95:
                    c0:c9:75:00:ac:b2:63:a6:4f:df:e2:6a:68:17:33:
                    36:0f:5f:63:84:91:56:70:d4:b7:eb:d8:a7:95:6d:
                    7d:b2:88:69:0a:0c:19:c2:93:8d:ee:5f:d1:70:46:
                    20:f3:16:4e:40:29:0a:a9:cb:0f:bc:48:7e:17:b2:
                    71:c5:60:72:0b:69:57:1e:e2:76:8f:37:0f:52:d6:
                    e2:08:77:8e:61:1d:54:a7:0e:e8:38:c9:3b:26:d9:
                    db:e2:a5:a2:1d:ba:27:a3:ba:53:c3:0f:7f:a4:88:
                    d3:3a:d1:7c:07:a2:68:77:37:60:41:d2:67:55:d9:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:08:25:67:89:78:BF:CF:28:EB:C3:00:DE:B1:9D:53:93:A9:0E:F8
            X509v3 Authority Key Identifier:
                keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:00:6b:77:9c:0f:b3:db:a5:cc:2b:80:6c:ca:31:f9:08:2e:
         92:a0:a5:e3:35:ab:3e:5a:a6:81:47:53:84:af:cd:b3:57:21:
         fe:3a:21:b5:10:c7:ed:15:90:22:d9:50:61:73:67:d0:83:95:
         18:fe:15:a6:db:57:c3:90:1c:a3:06:fc:0d:25:2d:11:ed:92:
         4c:ed:c5:1e:c5:e9:0d:1d:c9:90:75:5c:2f:66:95:88:ec:3d:
         b8:a6:45:8f:4a:c5:74:9b:57:db:d5:4b:4d:4c:aa:7e:37:24:
         59:72:0a:d6:bb:18:8c:08:ee:99:15:f4:77:52:1d:e8:4a:07:
         4d:e7:48:e0:e4:a8:cb:db:8a:83:a5:a7:c8:8b:4d:a0:cf:76:
         6f:6e:e8:4f:b0:e2:2e:4d:a9:3d:5d:87:05:a9:8f:e6:21:71:
         c0:ab:59:6b:05:0d:42:ae:7b:f4:e2:28:21:b1:30:bb:25:2d:
         3f:50:bb:16:8d:1b:ee:6a:38:f2:d4:13:08:57:0f:b4:46:22:
         da:43:e2:e0:fe:01:76:4c:d3:71:f7:5c:95:93:d7:20:b3:24:
         0f:ec:85:5a:77:16:df:c7:29:7f:d8:97:f3:49:75:11:c0:d4:
         f3:94:fd:a3:96:74:84:5c:fb:22:28:33:92:ea:fd:c7:15:72:
         a4:5c:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:22:59 2025 by rpki-client