Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
File:                     WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft (raw, json)
Hash identifier:          KDz6Blz9U2phqFSpCGEYQ7SNSyfUBujzQMWYmfC1vz0=
Subject key identifier:   34:06:3F:B9:D4:60:13:F1:71:57:D1:8A:FC:33:96:7E:E5:24:8F:0A
Authority key identifier: 58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
Certificate issuer:       /CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Certificate serial:       01968435809B7CF7B964CCC4542129447A2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
Manifest number:          092C
Signing time:             Wed 30 Apr 2025 01:00:20 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:20 +0000
Manifest next update:     Thu 01 May 2025 01:00:20 +0000
Files and hashes:         1: WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl (hash: bBM9bs1fpjzSUiXGrXP0Oc71C4t6E2Ak034CPeurudo=)
                          2: eAhR6KTFJDA3HMwbGsQPK0o1VK8.roa (hash: WcYp6g2h67uQd+b5ZXbElPdlPfBrcS5ukz/v0+o3wuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:35:80:9b:7c:f7:b9:64:cc:c4:54:21:29:44:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
        Validity
            Not Before: Apr 30 01:00:20 2025 GMT
            Not After : May  1 01:00:20 2025 GMT
        Subject: CN=34063fb9d46013f17157d18afc33967ee5248f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:08:a1:eb:c9:27:5b:90:6b:39:52:0f:e2:
                    90:b4:0a:a5:93:90:69:ad:38:96:b8:be:78:d5:94:
                    d8:f5:73:eb:ad:92:89:f8:2d:c0:a5:71:c0:5a:80:
                    23:99:85:8f:60:87:b5:a7:98:aa:47:0b:42:48:98:
                    d0:c2:8d:e6:33:43:71:e7:5c:30:26:c4:f9:30:71:
                    7d:d3:53:ab:10:58:94:52:10:60:28:4b:91:9e:36:
                    f8:89:38:5d:22:4d:4a:b4:55:9e:c5:d9:bd:dc:04:
                    3f:a2:8b:c7:e4:07:34:51:95:c7:25:a3:89:e0:57:
                    3b:41:a1:13:40:39:98:25:0e:a5:77:d6:d9:57:78:
                    a6:fe:3a:b4:88:4d:b7:c4:4f:58:cf:27:90:4c:68:
                    76:9e:00:3d:99:33:d0:06:06:e9:fe:6a:68:6b:ba:
                    cd:1d:00:8f:c0:a6:3b:37:69:ce:20:5b:57:09:43:
                    d9:3d:65:97:5d:5c:f3:ec:c8:5f:b8:03:0c:bb:39:
                    d3:e2:d5:db:05:bc:d7:85:8d:b9:b7:48:df:78:73:
                    3d:29:b1:4e:72:49:2f:14:a5:94:5e:91:79:27:fa:
                    19:88:df:c2:35:43:e1:b8:9d:ad:ee:ad:fb:1c:64:
                    fd:2d:ff:38:b6:37:60:c8:7d:2f:5b:91:6f:58:fe:
                    ac:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:3F:B9:D4:60:13:F1:71:57:D1:8A:FC:33:96:7E:E5:24:8F:0A
            X509v3 Authority Key Identifier:
                keyid:58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:25:04:fd:96:60:58:fb:96:33:a6:bc:fe:4b:8e:20:1e:
         0c:f0:17:12:25:ef:5d:d5:5e:57:52:0e:54:b8:c9:11:4d:fc:
         51:a1:af:e0:ce:02:fb:96:b4:bf:ea:bd:4f:b9:c6:0e:fd:58:
         27:a1:22:f2:05:71:32:5a:6c:c8:8c:67:d6:38:98:81:6e:b8:
         4f:58:cc:d0:25:b4:af:e2:76:42:90:51:f8:4a:cc:18:bb:7c:
         c6:d0:30:cc:a1:fe:1f:7f:42:3c:cd:17:6d:2b:ec:6e:6f:6f:
         24:13:c9:24:00:ab:63:3f:0d:c0:b2:58:cb:24:ab:1e:2c:50:
         64:ce:7f:d9:af:b9:fd:ba:c8:dc:76:1c:0b:29:3f:74:ab:f7:
         1c:96:46:39:d9:d5:f3:d1:b9:fd:31:8d:fe:37:0b:8d:f9:a6:
         92:52:0c:23:bd:47:8c:b2:db:82:05:31:98:c0:6b:d4:7b:e2:
         54:f5:58:db:84:05:51:f4:42:bc:aa:53:72:95:98:a4:7b:25:
         c6:f7:8c:c5:37:cf:0d:07:92:7f:d8:8c:4d:7f:0a:1b:e9:5f:
         81:4e:45:81:e6:21:d3:30:4f:2b:ce:60:31:69:18:2c:e1:32:
         49:c1:d6:28:69:ae:d5:88:f6:a4:cf:d0:7a:be:d7:3a:73:c0:
         ee:cf:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:39:05 2025 by rpki-client