Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
File:                     WZyb6F-CikOPCNH1CvrCUz0qbsI.mft (raw, json)
Hash identifier:          SHSnbnHsrC/HG7yqe4B7YnJ+uEG1y0Zce+26GkZ7byA=
Subject key identifier:   86:72:2E:7B:74:16:23:8E:1A:FC:48:9A:0D:1F:6D:D5:56:EB:B7:0C
Authority key identifier: 59:9C:9B:E8:5F:82:8A:43:8F:08:D1:F5:0A:FA:C2:53:3D:2A:6E:C2
Certificate issuer:       /CN=599c9be85f828a438f08d1f50afac2533d2a6ec2
Certificate serial:       0196A0F6E0013BD1CABDC0D3876DEF9721CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
Manifest number:          04F5
Signing time:             Mon 05 May 2025 15:00:55 +0000
Manifest this update:     Mon 05 May 2025 15:00:55 +0000
Manifest next update:     Tue 06 May 2025 15:00:55 +0000
Files and hashes:         1: WZyb6F-CikOPCNH1CvrCUz0qbsI.crl (hash: qid36e8kt05zs3vzCssbJZZ/Cw8SJGAQr0ZvHF4mz74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:f6:e0:01:3b:d1:ca:bd:c0:d3:87:6d:ef:97:21:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599c9be85f828a438f08d1f50afac2533d2a6ec2
        Validity
            Not Before: May  5 15:00:55 2025 GMT
            Not After : May  6 15:00:55 2025 GMT
        Subject: CN=86722e7b7416238e1afc489a0d1f6dd556ebb70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:aa:dc:0b:08:81:55:b9:81:9a:7a:6f:05:49:
                    d9:a6:07:85:71:3d:13:1b:62:f0:99:2d:63:9b:ae:
                    7e:76:91:e7:85:3d:7e:ff:f9:22:bd:0c:8e:9e:e9:
                    c8:a0:68:f0:1c:96:5d:52:e5:a0:18:a7:a6:71:fd:
                    52:1b:b0:4e:75:4f:48:f8:46:a9:14:4e:2a:93:7e:
                    a1:a9:db:98:b2:c7:ad:bd:0f:b5:a6:84:bd:2a:d1:
                    bd:fd:58:3a:df:6e:cf:f2:9e:8d:68:cc:cd:89:cf:
                    f8:18:60:b1:aa:3f:d9:8b:97:a4:9d:6a:71:48:48:
                    25:3d:ae:6b:0b:c1:7c:38:d3:f5:34:74:1b:d8:cc:
                    d5:47:a0:80:9c:7c:de:75:6b:3b:75:2c:4f:3e:ba:
                    51:38:5a:f1:9f:6b:ae:11:ae:66:cc:9f:d3:28:a9:
                    37:08:05:3a:18:e1:bf:ab:c7:48:6b:8d:bc:ad:a6:
                    17:84:0c:e5:67:cd:17:0d:3e:0a:7f:33:e3:d3:07:
                    30:de:0f:25:03:7e:16:05:4d:2b:19:e3:1a:3a:7f:
                    f1:11:8f:8f:c4:d9:30:43:28:59:d8:bc:c8:11:5c:
                    29:2e:03:ae:97:df:e0:e2:4e:f5:b9:84:e5:9b:dd:
                    e7:12:6c:74:11:5c:b4:9e:6d:0d:37:88:ea:37:21:
                    0b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:72:2E:7B:74:16:23:8E:1A:FC:48:9A:0D:1F:6D:D5:56:EB:B7:0C
            X509v3 Authority Key Identifier:
                keyid:59:9C:9B:E8:5F:82:8A:43:8F:08:D1:F5:0A:FA:C2:53:3D:2A:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:af:34:47:19:92:04:70:c4:a6:85:49:86:b5:3b:3c:15:81:
         ac:6f:86:b5:b7:fb:2c:64:d6:aa:44:b2:c3:57:64:d9:f5:06:
         15:e3:e2:dd:bd:26:80:71:ea:a6:13:fd:fd:eb:72:63:6f:82:
         73:46:a2:e2:0c:bb:5c:af:4e:cf:cf:56:b5:e2:f5:1f:f4:96:
         d3:ff:51:e1:47:fe:7d:2d:79:e4:fb:e2:f6:d0:ea:ca:7e:24:
         a5:ce:c6:9d:18:8c:14:9d:fe:54:a5:19:fa:95:01:9f:1a:cf:
         cd:a1:a0:cb:c8:6e:4c:90:53:15:d5:14:e8:f6:30:37:39:31:
         ef:79:4b:80:64:1f:52:3f:f4:7e:4a:8c:e1:a8:25:36:0a:02:
         c0:d1:7d:62:aa:f0:96:db:fc:13:bf:df:1b:9b:b6:3f:4b:be:
         3d:dc:b7:ca:5f:f2:02:fd:de:59:cf:bf:d5:2b:fd:e5:f8:25:
         da:b6:07:7f:c3:ad:b9:52:09:63:c0:4b:2d:f9:e7:8c:f5:41:
         47:20:00:b1:2b:30:84:a6:43:e2:a6:16:0b:ac:23:e7:c5:5e:
         45:47:c6:3f:71:66:ed:a6:e2:55:26:38:ef:80:a8:60:53:b1:
         ad:68:5c:02:ff:ef:02:65:db:b3:0e:39:9e:7a:21:00:ac:30:
         49:83:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:42:02 2025 by rpki-client