Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File:                     W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier:          m5cRAdjVoBCfTsB29vzCZqqtcdYNa32sSxMBTuqlH4I=
Subject key identifier:   D4:8E:03:F9:26:92:2C:3B:77:14:77:8C:6A:82:48:06:AB:F3:E6:7C
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer:       /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial:       0196A5AF9EA01A3516EE824A24E684526F85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number:          0F4E
Signing time:             Tue 06 May 2025 13:01:12 +0000
Manifest this update:     Tue 06 May 2025 13:01:12 +0000
Manifest next update:     Wed 07 May 2025 13:01:12 +0000
Files and hashes:         1: BYEpO3dKB_ok3YL5Nvkz1BqvKfY.roa (hash: tzMMybSfOyrsE8fXw9tkAmX7iTeiSe2VTc77bmai8Ps=)
                          2: FvfQzenY4vuGvPjzUDTw1tjiG2s.roa (hash: zkGEFuUXYUubPgf+SgQqduDAgySAdGnP1m7nGCOsPPE=)
                          3: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: Cb89Yhs2ubKIAO3P7NP5z556pXp/t67vEcCscibqAw4=)
                          4: YHhKqKllORo1YpLh6r99OV2fKdU.roa (hash: mexx1monVzWkvXW1/Ufj3sXVxDrM1B0b6uh/TwyrzYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:af:9e:a0:1a:35:16:ee:82:4a:24:e6:84:52:6f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
        Validity
            Not Before: May  6 13:01:12 2025 GMT
            Not After : May  7 13:01:12 2025 GMT
        Subject: CN=d48e03f926922c3b7714778c6a824806abf3e67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:01:7c:58:45:fd:f7:00:6e:92:03:9e:4d:
                    2f:68:e5:c8:73:6d:64:8e:94:7d:eb:84:5f:96:cb:
                    e6:d1:c4:9a:17:47:1f:fb:b3:02:af:31:66:51:78:
                    f2:3f:af:3a:ab:1a:26:38:67:26:fe:db:92:5a:5a:
                    d3:3f:aa:ac:7c:49:24:20:72:11:c1:d9:de:e3:ac:
                    86:92:a4:79:11:32:af:a7:22:73:d7:58:9d:b3:b5:
                    53:b7:90:e0:49:f7:de:29:8b:cd:69:f7:b8:c6:b4:
                    3b:79:83:80:29:99:20:8c:cd:e1:c9:e4:6a:70:13:
                    3f:e8:3e:c0:ec:a9:ae:8e:69:65:8a:0f:8b:01:25:
                    75:22:de:2b:ea:fb:d8:27:76:c3:d6:db:a6:5f:44:
                    b4:02:c8:6e:1e:e3:0a:d4:98:ef:e2:98:f4:b7:69:
                    f9:59:2d:e8:c8:ba:5b:73:82:17:a1:e1:cb:2b:ad:
                    12:aa:07:59:81:ee:97:4f:79:24:36:4c:d5:12:98:
                    9b:45:40:10:7f:24:4c:78:4d:3f:99:b7:2a:9e:cf:
                    38:27:cb:b8:9f:33:e7:90:6e:e8:4f:a6:08:b0:17:
                    dc:89:c0:74:a5:c8:be:de:94:24:62:89:89:92:7c:
                    dc:e6:8a:5f:49:28:6b:48:f9:8f:dc:8b:5a:94:be:
                    81:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8E:03:F9:26:92:2C:3B:77:14:77:8C:6A:82:48:06:AB:F3:E6:7C
            X509v3 Authority Key Identifier:
                keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:06:00:7b:4b:db:4e:70:c0:71:9c:dd:18:5a:40:75:b7:3c:
         3a:88:51:59:76:0d:bf:38:56:3d:37:cb:42:64:e1:53:2f:69:
         f3:ea:73:80:c7:85:17:1d:dd:3a:1d:a8:dc:e8:5c:10:17:8a:
         d9:e0:bb:75:8f:32:82:24:f2:b8:39:02:bd:74:19:e4:d3:d2:
         18:32:f8:26:3c:31:c5:df:93:d4:28:8a:46:13:ec:81:a4:d9:
         6d:f0:c3:48:8c:ca:5a:9a:1d:86:53:cf:74:aa:af:d7:51:88:
         12:b5:e5:98:77:77:48:1c:d6:65:b4:b5:9b:65:24:00:71:13:
         5d:a6:28:30:3c:dc:3a:90:ef:3c:4d:dc:57:27:4a:d0:72:eb:
         87:7c:47:a3:9b:e6:6d:d5:ef:1a:1d:87:50:63:cb:28:c5:53:
         40:f1:d4:f9:33:df:5c:0f:7a:25:25:dd:b4:c7:0d:8e:db:ea:
         a8:08:ec:01:9b:eb:ed:ca:0b:d1:44:b5:03:6a:b4:61:97:4d:
         a4:98:6c:62:aa:62:82:17:da:f0:b7:cc:26:a9:de:3f:be:48:
         13:ed:c3:bd:11:37:07:6a:35:c0:c8:a6:b8:24:92:ab:3a:2c:
         b9:f8:07:9e:f3:62:e5:d9:ed:e1:35:55:a6:7c:93:94:96:1a:
         ea:b0:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:22:23 2025 by rpki-client