Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
File:                     WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json)
Hash identifier:          P1TUkSPYCJqpblNVjoSfkiT3Ig58ZoYUNidaQ2NWcxA=
Subject key identifier:   1A:E0:61:D8:23:9E:75:DD:3F:9C:2E:14:F6:57:74:32:F5:B4:91:8B
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Certificate issuer:       /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial:       019691BA59C86F1B4BE57D0370C55590D5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
Manifest number:          05C6
Signing time:             Fri 02 May 2025 16:00:31 +0000
Manifest this update:     Fri 02 May 2025 16:00:31 +0000
Manifest next update:     Sat 03 May 2025 16:00:31 +0000
Files and hashes:         1: K0PX8tAD77x55aOB4lGVD3Te4QM.roa (hash: UD1F2ZNVLCoZ48JUjpO0xFjx7uROUMFlQ4rjADgkheg=)
                          2: UJ3xF6-J16Fa8k3eaGL7GyfbMsM.roa (hash: +l2bpUdZY142qcpXeo96uEK0+oOCrNS16D7kEOarOhI=)
                          3: UwiSYqu907lovqaGg4NrpGn_w58.roa (hash: WU+BWR/d5PWzJ2OdHrznAwNZSWnmyCygcFXxl/zP2K4=)
                          4: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: 2zraKkAxLCc22gwbkwiIpjPNukHOPrYLInS72TGMb08=)
                          5: XExZy3xfPa1cjEoGNup9lp-X8-0.roa (hash: 2iOx91qP9fUpsmi2JFq2RvxeQJsiSVTDFwUu6ATpiUM=)
                          6: qTVlhtMwwYSmdU4s4aw8LX1HUQk.roa (hash: 1OoG2vJGoOMZAkIiJXpkJz8avwOwz/vrOZSTQO2Gud8=)
                          7: sonKZ6RLZeWxN59PkZsMbIW_dgQ.roa (hash: U+YmmIIsbPg2a19Hq1tCZyulxVqTtZ1DrsXtoHgjVqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:ba:59:c8:6f:1b:4b:e5:7d:03:70:c5:55:90:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
        Validity
            Not Before: May  2 16:00:31 2025 GMT
            Not After : May  3 16:00:31 2025 GMT
        Subject: CN=1ae061d8239e75dd3f9c2e14f6577432f5b4918b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:13:93:b3:36:22:bc:7d:d5:13:b9:99:cb:f8:
                    36:f2:68:98:21:70:cb:37:d2:88:ac:fa:84:56:5c:
                    06:ef:5a:ec:9a:92:5a:cb:e1:60:f7:5e:35:4a:22:
                    84:39:2f:c5:f2:11:bd:5f:14:64:4d:e9:d2:42:fe:
                    fa:e8:9e:15:de:36:7d:24:97:d4:af:35:c4:24:24:
                    7c:10:7f:71:76:30:a3:28:26:d7:e8:2d:3b:bf:dd:
                    a5:e4:b9:da:4e:65:0e:89:34:87:e4:39:36:f2:fb:
                    2c:6d:32:00:80:08:0e:ff:1d:49:50:ed:1a:46:a8:
                    77:7d:54:ba:40:e2:47:3e:41:80:d1:25:c2:40:e2:
                    1b:d6:0b:51:86:cf:f9:99:ce:b0:bb:4b:c4:6f:13:
                    f3:3e:41:48:bc:ed:9a:e0:89:cb:9d:51:28:cf:c6:
                    ac:81:e6:a4:ab:4d:4f:0e:fb:c3:4e:12:41:68:3d:
                    4d:49:72:68:1b:2c:f6:f0:70:e1:2c:08:1d:12:d3:
                    27:8f:5f:31:c4:fa:0c:24:47:c2:b7:dd:69:15:4c:
                    9a:53:e5:a2:f2:80:68:74:73:45:ac:b1:67:63:cd:
                    8b:35:bd:2c:c8:80:40:87:2d:10:3f:b1:93:b9:cd:
                    52:05:12:9a:f6:8b:b0:03:79:8a:77:6a:d9:5b:1f:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E0:61:D8:23:9E:75:DD:3F:9C:2E:14:F6:57:74:32:F5:B4:91:8B
            X509v3 Authority Key Identifier:
                keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a8:15:76:af:1b:ba:c1:35:cb:2d:16:38:f5:67:2b:bb:63:
         ea:90:db:5c:c6:72:73:e2:54:db:91:83:d3:11:63:4f:cc:10:
         28:3b:88:e8:42:eb:1d:76:d1:cc:b9:c4:25:85:64:08:3c:3e:
         74:62:5b:24:d1:bf:af:cc:d7:30:88:2f:a6:b4:25:50:ae:16:
         cb:c0:c2:5d:8b:f0:f2:54:cc:7b:45:b1:11:47:b4:73:41:2f:
         8f:80:0b:50:26:e7:3a:ac:16:9f:2c:39:ad:6e:36:98:5e:92:
         ba:31:b0:d6:88:89:b4:66:c7:20:97:cc:f8:1d:73:7e:3c:f9:
         46:3f:dd:c6:db:c4:33:56:0e:44:3e:25:5d:55:0c:b7:bb:3c:
         98:e7:b4:a7:51:8a:d1:13:13:dc:91:fb:5c:db:d0:54:ae:c6:
         e4:65:a3:88:0b:6b:07:38:ae:0a:f3:9b:d0:76:17:50:83:d9:
         92:6e:07:68:f8:d6:e2:d3:dd:26:1e:c2:ba:5d:f7:6a:d0:12:
         01:c0:d9:ad:db:1e:f3:ac:76:67:47:8f:29:e5:2d:8d:a8:af:
         44:71:9e:41:7e:8f:0b:cd:1f:50:6f:eb:30:fb:b1:53:5b:9e:
         45:7b:d3:6b:9a:2e:bc:fe:bd:5c:4a:18:a8:85:dc:5a:62:0f:
         74:39:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:24:57 2025 by rpki-client