Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File:                     W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier:          S9c6id8oc4rQOjm6/xAPNSzIygBuK5m48RWfL0mwbK8=
Subject key identifier:   C3:90:C2:66:9F:81:0D:55:43:B6:6F:5E:EE:53:DC:97:AE:05:8E:29
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer:       /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial:       0196BC00629AB7D23DAE4F102E0F364287D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number:          1274
Signing time:             Sat 10 May 2025 21:01:03 +0000
Manifest this update:     Sat 10 May 2025 21:01:03 +0000
Manifest next update:     Sun 11 May 2025 21:01:03 +0000
Files and hashes:         1: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: HGJcZonRMjlgYH6XgriSXzoO3MRqboASjhtP0EPX5qo=)
                          2: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (hash: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:62:9a:b7:d2:3d:ae:4f:10:2e:0f:36:42:87:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
        Validity
            Not Before: May 10 21:01:03 2025 GMT
            Not After : May 11 21:01:03 2025 GMT
        Subject: CN=c390c2669f810d5543b66f5eee53dc97ae058e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:93:5e:e2:63:c1:d8:b5:59:d9:d4:cc:9b:93:
                    d6:5c:19:f2:fe:f4:6e:00:1b:64:cc:d6:8a:01:3c:
                    0d:41:40:c3:08:3a:0f:99:d6:d1:1c:ef:2c:7d:b9:
                    42:ca:63:80:c1:84:47:e6:f1:09:ce:86:bf:3c:5d:
                    80:c9:7f:39:f6:1d:67:b5:e7:3b:66:68:86:f8:4e:
                    98:66:4f:de:0c:a4:43:57:ec:5a:cc:23:6a:09:76:
                    58:9c:81:e8:ee:f0:76:ce:e6:cd:87:23:26:7f:82:
                    a1:f0:fb:5d:1f:e2:84:3b:5d:87:c7:c1:f9:fe:3e:
                    17:8d:4e:13:2e:a9:ca:db:1c:b3:fb:34:bd:50:f5:
                    f3:ec:b6:72:1e:bd:b8:7b:dd:72:d9:c8:a1:32:95:
                    16:3e:7e:2a:77:66:9e:e9:ec:92:e1:d2:f7:c4:a2:
                    be:8d:0b:cd:a8:84:4a:8f:18:c7:01:99:8b:89:44:
                    4a:fd:c0:3c:60:31:4c:68:b7:bb:80:32:72:7b:f2:
                    28:53:45:9a:3f:41:9b:3f:12:1c:71:79:ff:5c:ef:
                    85:d7:4a:88:02:9b:aa:8c:ab:55:bc:39:d4:c6:56:
                    d9:7b:e4:1c:c4:b7:a1:d6:44:56:df:04:41:ba:b6:
                    0e:3c:8d:14:73:4b:61:58:de:40:e7:54:a9:73:fb:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:90:C2:66:9F:81:0D:55:43:B6:6F:5E:EE:53:DC:97:AE:05:8E:29
            X509v3 Authority Key Identifier:
                keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:3a:ac:66:c1:6d:24:c9:78:a5:a0:fb:d4:5e:e6:8a:24:
         da:17:54:2e:45:ad:2b:f0:b1:dd:1d:0e:ce:1d:6c:b1:fa:17:
         4d:c3:04:94:ea:3d:41:0a:bc:4e:46:20:41:fa:2f:c0:0f:bb:
         27:ed:77:db:eb:c8:fc:87:38:bf:65:da:2a:79:28:03:c4:f5:
         03:b0:06:0b:47:13:01:17:17:56:ca:f1:8b:2c:2b:09:80:1f:
         f3:6e:e1:83:66:82:ec:9c:7c:20:5c:f5:0d:ce:d3:cb:02:cb:
         81:2d:22:49:97:21:be:ae:12:31:05:40:3d:85:76:bc:82:37:
         70:c4:ed:10:1d:f9:e3:61:00:a1:66:43:2a:27:87:4a:87:da:
         ca:5d:74:6d:b8:43:83:90:e6:e5:01:91:f4:c1:3c:6e:fd:90:
         2e:3a:87:35:73:f3:d1:86:79:d9:bf:03:5a:91:4f:92:c2:3e:
         69:99:df:05:22:15:ad:ca:17:4f:08:36:4b:48:9d:79:49:a4:
         33:cc:1f:34:8d:27:24:0d:b9:94:18:4a:4f:3d:3e:c3:18:cc:
         a7:04:7a:13:43:36:85:1e:2d:1a:13:bc:d7:53:45:df:10:6a:
         94:a0:b5:aa:4b:54:23:d9:2d:54:af:76:00:87:73:2b:5d:65:
         e7:5b:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:19:38 2025 by rpki-client