Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File:                     wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier:          sGTpBQn4nx6A3OZqCF0uRFDmupWTOldF/YJPFBSr5vI=
Subject key identifier:   15:67:C9:20:94:71:D2:77:A3:16:D7:6A:29:23:B3:B2:86:81:CC:02
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer:       /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial:       0196760C1F946860F221FB9E5F158C4CCC01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number:          1465
Signing time:             Sun 27 Apr 2025 07:00:28 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:28 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:28 +0000
Files and hashes:         1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
                          2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: 3jBw3KZ+Zlsxfb19kdsIil+szh+pztQBREtH46RyU9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:1f:94:68:60:f2:21:fb:9e:5f:15:8c:4c:cc:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
        Validity
            Not Before: Apr 27 07:00:28 2025 GMT
            Not After : Apr 28 07:00:28 2025 GMT
        Subject: CN=1567c9209471d277a316d76a2923b3b28681cc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:3b:35:ea:5b:e7:7d:73:3b:93:13:50:13:
                    ea:df:1d:57:9d:92:7c:f5:f4:fb:74:8a:34:67:d4:
                    2c:0f:32:27:de:5e:db:40:b2:b6:32:fa:5b:32:e0:
                    16:46:8d:e7:fc:85:92:6f:6b:fb:17:07:43:a7:0d:
                    43:51:32:60:3f:a5:6a:c9:5c:a3:ca:f6:6e:01:69:
                    ce:aa:72:aa:71:6d:30:7c:ee:b0:59:59:94:98:75:
                    79:67:a6:a1:fa:e1:f0:40:a6:1e:b2:4a:37:6a:a2:
                    63:7c:6d:eb:97:48:3a:66:1d:76:36:5d:d0:e7:5c:
                    87:49:84:db:da:b0:c2:a1:6d:86:4f:92:08:d8:ba:
                    3c:b9:05:ab:c3:b9:41:91:43:5c:02:a5:e7:c7:c4:
                    15:1c:23:df:3f:54:67:23:6a:8b:ec:41:ce:69:b1:
                    93:11:0d:f0:03:d4:de:58:6a:e0:25:40:e8:f4:7c:
                    fb:b0:d7:cc:8f:79:45:db:7f:d3:e0:e7:fa:92:5c:
                    08:70:c4:86:a1:71:d9:94:66:ad:1d:e2:a5:a4:50:
                    73:ef:d6:6c:45:2b:ec:2f:f3:c4:d2:4b:b2:41:5c:
                    3b:d5:10:4f:94:2f:36:55:d5:04:ed:b3:35:c5:8c:
                    6e:54:9a:88:a5:33:b0:ed:d0:b3:79:4d:8c:d5:72:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:67:C9:20:94:71:D2:77:A3:16:D7:6A:29:23:B3:B2:86:81:CC:02
            X509v3 Authority Key Identifier:
                keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3d:b7:ff:51:ac:9c:77:c9:b1:6d:14:ce:fd:07:8c:cc:34:
         af:8a:fa:39:d9:00:82:9b:18:0d:7d:73:73:e6:3a:92:2a:07:
         1b:3f:c8:8c:5c:9f:25:63:63:0f:56:61:b4:17:38:bd:70:02:
         ae:9f:f1:e5:11:3a:a9:a4:5f:d0:3f:ff:95:20:4f:3b:cd:ad:
         37:4f:7f:ff:65:0f:84:45:df:32:b3:6a:4b:5e:31:ad:6d:12:
         9c:13:51:05:3c:6d:25:84:ee:c3:d4:ba:fc:e8:a8:98:36:80:
         74:d8:69:52:b3:7f:77:44:80:cb:34:12:06:7e:b7:a7:0a:77:
         9a:e0:ea:9b:0e:16:8d:d8:4e:7d:3f:17:98:e7:2d:af:bc:a9:
         8d:7e:f3:2b:29:3f:f0:c0:25:a4:d8:30:c2:0d:2b:dd:78:27:
         2d:0c:b5:c5:10:c0:cc:24:85:dd:81:8e:9b:80:31:4b:58:2b:
         a4:74:62:c1:98:57:56:7a:ec:e4:dc:74:73:15:51:ce:4a:9a:
         0b:69:b6:18:bb:11:f8:6a:a0:9c:3e:c8:fb:3f:5f:2a:20:49:
         93:d4:85:b2:7e:ee:6d:ee:0a:df:71:6e:e8:97:a0:b2:ee:61:
         2c:7f:0d:0c:63:5a:e7:44:35:cb:83:f6:a5:3d:14:5a:15:c1:
         bb:09:88:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:12:23 2025 by rpki-client