Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
File:                     WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft (raw, json)
Hash identifier:          lmgDXNUSPBlmw4lIjyI0Dw35bOvSLw1hNWb40GTl3bE=
Subject key identifier:   22:F8:A2:C4:63:C7:C1:6E:5A:F9:B3:C2:78:B6:BB:E3:A8:62:D3:48
Authority key identifier: 59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5
Certificate issuer:       /CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
Certificate serial:       0196A79D6DBA3AA9724F5CE5C5164C1D1681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
Manifest number:          1267
Signing time:             Tue 06 May 2025 22:00:34 +0000
Manifest this update:     Tue 06 May 2025 22:00:34 +0000
Manifest next update:     Wed 07 May 2025 22:00:34 +0000
Files and hashes:         1: WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl (hash: +SiCCOtIlLU0CbM8y2mOQfG1hWEAPUdHFB9IgLkhAEU=)
                          2: Xihi8aGiKGmm1wm5o0bdg-SFO4M.roa (hash: UB6flWnnaqdKwm5uBg0CvnmFwbf9VSTpt0Wz6M2wzJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:6d:ba:3a:a9:72:4f:5c:e5:c5:16:4c:1d:16:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
        Validity
            Not Before: May  6 22:00:34 2025 GMT
            Not After : May  7 22:00:34 2025 GMT
        Subject: CN=22f8a2c463c7c16e5af9b3c278b6bbe3a862d348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:c9:1b:73:ff:14:0d:c0:6f:24:d4:61:72:
                    c3:1d:8b:25:a4:1e:71:24:ac:db:52:05:a5:60:13:
                    0f:21:ef:65:b4:31:a6:64:a9:d2:7c:01:77:a7:6a:
                    ac:1c:bc:cd:f5:80:fb:be:bc:18:7d:36:ed:5b:df:
                    43:e3:4f:60:ee:67:52:f9:31:05:3f:ed:da:5e:bd:
                    46:89:0a:e1:d7:b2:1e:3c:47:83:19:8d:8d:13:9a:
                    19:4a:80:99:79:9a:28:4f:4a:94:02:b5:83:85:4f:
                    1b:9e:dc:ec:f2:a5:38:b6:27:61:31:4c:88:c2:33:
                    66:7d:10:8f:da:a9:ce:6a:27:5f:b9:72:84:a4:8f:
                    2b:2c:e9:13:fc:53:e6:35:4e:28:eb:fc:06:c7:32:
                    19:d6:69:1f:9e:c9:d0:04:19:6c:d0:88:85:c1:bd:
                    92:d6:67:e6:3a:cb:1f:a7:f8:59:69:d5:ca:37:ae:
                    1c:31:5b:23:bf:b6:d5:8a:94:7e:c2:5e:44:87:40:
                    1c:2e:f1:0b:ee:e1:34:1c:df:3b:cc:0a:a8:c1:d8:
                    84:79:95:36:e3:8d:95:99:24:48:50:72:2f:7c:a1:
                    1a:35:5e:de:f5:f6:d8:e0:65:00:5b:e8:d2:92:b8:
                    8e:a9:a0:d2:d5:78:ac:4b:7a:bf:b6:a1:c8:a4:c0:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F8:A2:C4:63:C7:C1:6E:5A:F9:B3:C2:78:B6:BB:E3:A8:62:D3:48
            X509v3 Authority Key Identifier:
                keyid:59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:98:e7:55:e0:77:1d:fb:79:5d:2b:e2:ba:2a:b8:68:eb:43:
         40:3b:a9:5f:07:5f:7c:19:e6:ef:fb:c9:16:b1:d2:a9:14:ee:
         62:aa:1f:3c:52:e0:6f:79:ac:b1:a1:5c:4e:e5:28:b0:b8:ee:
         84:c8:b2:5d:00:83:f6:fa:25:6f:e2:e9:a8:e0:b0:de:7b:6a:
         c8:40:ad:3b:05:12:86:49:3b:d4:9c:e2:b4:0f:51:c6:56:5e:
         55:58:40:52:68:8f:cb:8d:47:6e:82:cf:3e:c9:9c:e2:1f:74:
         5a:05:45:0c:33:e7:b5:04:73:d0:7f:b9:45:70:c4:95:eb:3f:
         e2:bc:48:8e:fa:78:95:81:2d:0c:95:a8:0b:36:d4:d4:ed:40:
         fc:77:b1:f2:de:ec:7a:71:e5:ba:b4:64:eb:19:85:8a:77:bc:
         ae:57:f2:42:41:3b:1c:98:39:f0:f0:81:92:a0:ab:ef:a1:fa:
         42:d3:8a:6b:5b:b2:b2:db:3c:90:af:62:61:6e:05:2e:c6:5e:
         d7:75:a7:4b:ef:e3:67:ce:8b:63:88:ee:b6:82:11:8b:22:5a:
         11:62:17:bf:7f:68:b2:36:d7:cf:9b:3d:31:66:6d:ea:7e:a6:
         8f:12:f3:89:f1:76:9f:d4:48:1c:e6:a2:8d:94:97:ec:2f:25:
         5a:81:5d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:18:13 2025 by rpki-client