Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
File:                     wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft (raw, json)
Hash identifier:          wFCIuaQXobjjSgx6ZLkm7dbDc/SCcLk+R4qUR0rJjII=
Subject key identifier:   4E:D6:2F:20:87:EC:EE:01:D0:ED:74:E0:A9:D8:E0:75:05:D5:A7:0D
Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
Certificate issuer:       /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Certificate serial:       01967EA17B0D371CA57DE17D30271155D452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
Manifest number:          0234
Signing time:             Mon 28 Apr 2025 23:00:34 +0000
Manifest this update:     Mon 28 Apr 2025 23:00:34 +0000
Manifest next update:     Tue 29 Apr 2025 23:00:34 +0000
Files and hashes:         1: 9cUx35pJdH2wM_3eSozbimAeHfU.roa (hash: 7YW1ZDiZMJTYn9KTvcJh6SoR/wbiN8bpaQ2O/a0WApI=)
                          2: wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl (hash: kPPFNlhro/f4I97YsObbgYhTx43BQXNPgR/qpLm8bWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a1:7b:0d:37:1c:a5:7d:e1:7d:30:27:11:55:d4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
        Validity
            Not Before: Apr 28 23:00:34 2025 GMT
            Not After : Apr 29 23:00:34 2025 GMT
        Subject: CN=4ed62f2087ecee01d0ed74e0a9d8e07505d5a70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:15:04:e3:aa:ca:68:66:2a:29:ee:23:d8:
                    a7:29:0b:a5:2e:a9:03:c3:4b:ab:12:6d:1c:ae:c1:
                    79:ff:46:b9:21:5f:1f:af:a3:57:15:37:d4:12:3c:
                    64:7e:1a:e8:5c:13:4c:2c:66:b4:ec:f8:91:1e:1d:
                    fa:f1:cf:23:9b:f0:4b:80:1e:1a:87:ec:29:2c:3b:
                    69:7f:8c:ad:90:ab:ce:f5:65:01:ab:55:1b:4e:5f:
                    9e:e1:a7:44:80:19:11:a2:de:5c:65:8d:68:e7:68:
                    88:f8:98:44:b3:7e:53:3a:14:e5:da:8d:61:01:aa:
                    f6:01:18:81:d0:a8:8a:81:b0:54:20:18:61:9b:08:
                    48:79:85:3f:ff:48:e4:ab:71:c0:11:82:9b:f1:39:
                    4d:db:17:12:12:1a:4b:64:3c:43:4a:7d:0d:af:31:
                    88:d1:f4:ec:f3:bf:a5:25:1f:19:62:57:5d:7b:2d:
                    f9:12:3e:c8:c8:e3:a4:ba:64:e4:8d:2b:4f:a1:ba:
                    c2:21:9f:91:6d:a7:af:2c:f7:3d:f2:09:18:dd:7b:
                    8d:e3:7f:7d:e6:d7:78:c2:f5:6f:e6:80:f0:19:93:
                    82:d0:31:d6:12:60:b1:56:77:91:ac:7f:ad:31:13:
                    e7:84:a0:25:f1:eb:a6:5b:40:00:73:a6:12:11:3d:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:2F:20:87:EC:EE:01:D0:ED:74:E0:A9:D8:E0:75:05:D5:A7:0D
            X509v3 Authority Key Identifier:
                keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f6:d2:81:eb:26:f3:94:0e:48:a2:09:5e:61:15:0a:5a:2c:
         6b:e3:00:63:87:85:37:4f:79:00:08:7c:04:ca:87:e6:59:9e:
         d9:7c:7d:eb:fd:a7:c4:41:d2:77:55:c2:00:78:52:cf:be:39:
         2b:ae:a7:82:73:1a:f3:6a:71:14:bd:08:03:4c:59:b7:2b:42:
         e4:0a:36:49:a4:0b:dd:44:58:e4:00:04:24:42:e7:4c:01:eb:
         ae:32:32:0f:cb:ab:ce:c5:eb:c4:cc:3e:39:4a:1e:1c:98:a6:
         31:5a:09:9e:8f:a4:5b:18:d2:4a:4f:8e:92:db:57:9e:59:fe:
         ef:54:48:22:f4:e6:0c:23:c3:fa:5a:86:31:55:d1:e4:73:2a:
         07:02:ed:d7:b8:60:0c:d4:cf:c7:d0:16:ca:70:60:04:1e:ba:
         9a:5c:65:01:c9:3f:51:db:dd:5b:7e:9d:71:6a:21:d1:6b:a0:
         e3:15:b3:74:38:bf:0f:4e:a1:b9:4c:eb:6c:ff:db:3b:fc:dd:
         dc:b6:27:f7:a3:fb:90:fc:9f:f6:0b:28:83:9e:b0:dd:6b:d4:
         d8:7a:45:27:0a:21:96:fb:62:1f:59:65:ca:15:70:25:19:27:
         d7:64:10:4a:77:6d:ad:c0:fb:4b:bf:19:f3:06:e1:ef:ce:f7:
         ef:c4:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:45:53 2025 by rpki-client