Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File:                     WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier:          PL+69XyZMpVUzLLplvRKAOQq9eCNkZnRkK2MpfizcX8=
Subject key identifier:   8B:77:DB:BB:2D:07:CA:E6:10:9F:5B:4C:4D:4A:4E:C5:91:E1:09:AA
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer:       /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial:       01967C7C4414A468DA633B4F9C596A88DB40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number:          1515
Signing time:             Mon 28 Apr 2025 13:00:40 +0000
Manifest this update:     Mon 28 Apr 2025 13:00:40 +0000
Manifest next update:     Tue 29 Apr 2025 13:00:40 +0000
Files and hashes:         1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
                          2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: eQ49vITrR7B6vPr0hWVnXQ4Jal8/bEqXcs5n3GZN5oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:7c:44:14:a4:68:da:63:3b:4f:9c:59:6a:88:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
        Validity
            Not Before: Apr 28 13:00:40 2025 GMT
            Not After : Apr 29 13:00:40 2025 GMT
        Subject: CN=8b77dbbb2d07cae6109f5b4c4d4a4ec591e109aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:69:8a:78:b5:5c:75:42:a8:2f:22:2b:0d:63:
                    5c:cb:76:01:e9:e4:dc:a3:53:ad:4d:af:de:00:a2:
                    4a:c3:e9:e2:da:97:3e:6d:d0:6d:a9:75:50:dc:e2:
                    5c:fe:c3:c5:21:c4:ec:1a:06:3e:8b:55:ae:0a:93:
                    6a:b6:7a:24:0d:c8:9a:3d:ea:94:11:1c:ca:f9:95:
                    63:62:d8:29:5d:5d:4e:5d:e3:3f:2d:43:78:15:9b:
                    8b:ec:88:5d:f7:51:d3:09:2b:8a:24:16:aa:6f:54:
                    03:3c:7d:53:97:31:68:57:b2:01:73:4a:07:34:bd:
                    4e:1c:bc:1f:99:73:f0:23:98:0e:f7:79:6a:18:02:
                    f5:58:ff:80:94:22:2e:e2:a8:d1:d5:01:32:d6:80:
                    7d:6b:ce:92:e5:d9:93:c0:42:14:44:af:b3:c6:18:
                    ed:a7:c5:01:84:1d:1b:5e:dc:31:a7:f9:dd:79:37:
                    8f:44:c0:8f:85:52:4e:b1:ff:ef:dc:75:67:5b:5b:
                    24:e0:0c:aa:5a:24:7c:b5:00:75:c7:6d:49:7f:4d:
                    48:35:9d:c2:a2:1c:ab:c5:ea:79:44:77:7a:92:46:
                    15:a5:4f:dc:6a:00:94:eb:fb:30:49:50:97:00:8a:
                    63:83:3d:3b:fd:14:91:a9:f1:32:92:2c:94:0f:dc:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:77:DB:BB:2D:07:CA:E6:10:9F:5B:4C:4D:4A:4E:C5:91:E1:09:AA
            X509v3 Authority Key Identifier:
                keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:c9:de:97:c2:52:bb:b4:cc:e0:7c:52:4c:44:2f:9b:8f:
         5e:ad:ad:93:35:81:d9:d9:46:7b:23:2e:d1:e0:92:54:c2:d3:
         ab:ab:9e:ae:d5:0e:5b:4d:00:d6:49:87:d0:f0:e8:e4:b7:4b:
         a4:f3:03:cd:7d:69:cb:a7:86:4a:ee:93:6c:9e:16:e5:59:01:
         ee:03:bd:65:9e:24:cd:f2:98:e6:54:6c:c4:00:36:fc:8c:33:
         32:92:c6:d6:9b:da:c9:fe:ff:2e:24:22:26:20:1d:87:74:0a:
         b6:4c:8b:89:fa:ea:41:eb:0b:65:5c:9b:98:90:b1:fb:b3:77:
         b7:18:cf:b0:2f:43:af:ea:33:61:d7:f6:ae:54:39:51:af:de:
         b1:85:83:c6:ca:6c:04:9f:23:71:07:92:ea:30:6d:f9:be:97:
         8b:05:13:35:49:87:87:99:e1:6b:8a:87:34:cb:0b:63:73:1a:
         3d:fe:65:c8:7d:c1:be:81:31:6f:f0:35:d0:6e:a1:2a:5a:e0:
         4a:bc:73:a7:eb:b4:b4:aa:69:21:1f:22:6a:1b:20:89:86:c0:
         b9:19:13:7f:54:e8:2e:cb:19:66:94:ad:96:d0:30:b3:34:24:
         3b:f5:70:41:de:7c:aa:64:88:3f:e7:4f:b6:b8:d0:98:a3:1a:
         ad:28:da:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:12:29 2025 by rpki-client