Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
File:                     W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json)
Hash identifier:          +NkXw0qKSe1miofEse9nQRkjmyYh+bE31c5se4FZ6EM=
Subject key identifier:   F8:D2:A2:E3:EA:1E:75:2C:5D:9B:6C:B0:79:CE:3E:C0:1A:0C:7B:89
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Certificate issuer:       /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial:       0196A19B53D2D9DB150330291D64988CD2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
Manifest number:          1525
Signing time:             Mon 05 May 2025 18:00:33 +0000
Manifest this update:     Mon 05 May 2025 18:00:33 +0000
Manifest next update:     Tue 06 May 2025 18:00:33 +0000
Files and hashes:         1: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: mefqvx3Rj6yZGCOigtlPfP4YrOs8sUwKm4asamRxlBY=)
                          2: YSvlEI-QwRaOJVEKhPo-n7hFfMs.roa (hash: 2D47YFaNK7fea1JKhXlBWUic8EXXrjyXZMVK5ghBVPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:9b:53:d2:d9:db:15:03:30:29:1d:64:98:8c:d2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
        Validity
            Not Before: May  5 18:00:33 2025 GMT
            Not After : May  6 18:00:33 2025 GMT
        Subject: CN=f8d2a2e3ea1e752c5d9b6cb079ce3ec01a0c7b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ba:96:11:4a:d8:42:48:94:79:bc:bb:ec:19:
                    79:5b:aa:bd:1f:59:d5:dd:c3:22:56:18:2b:a8:8f:
                    aa:56:ac:9a:89:96:3a:d1:fc:02:f8:dd:d5:4e:88:
                    61:56:e5:f0:73:bf:f8:3c:20:ef:c0:fe:58:bb:22:
                    63:2d:2f:2a:a5:27:40:5f:36:21:fc:5b:22:72:5d:
                    af:3b:ce:46:a9:7b:e8:df:99:80:06:50:b1:82:a9:
                    89:6a:ba:0c:75:6c:4f:9f:2a:5f:c3:19:38:f0:53:
                    a5:76:34:7c:96:5e:59:0b:60:4a:24:d3:53:c0:ed:
                    f0:a0:4f:73:77:89:52:55:99:82:2f:4a:ca:74:1d:
                    11:e9:03:5f:cd:cd:67:21:e9:19:99:cf:8f:ca:97:
                    b7:55:7c:62:6b:92:e8:a9:12:6b:c5:ad:e6:80:62:
                    cd:75:d3:b1:8a:75:28:40:35:29:d0:6e:52:79:12:
                    1f:6e:30:f6:e1:de:0b:ef:91:17:bd:82:f8:e1:dd:
                    62:1f:9c:9c:b1:df:34:94:0c:fa:3d:10:5b:47:9f:
                    ad:22:c4:62:1b:b5:1b:0c:27:b9:74:3d:e4:93:33:
                    44:79:e6:79:e0:55:bf:b6:32:d6:79:0b:ac:86:41:
                    9a:08:81:9a:dd:de:86:0c:89:a1:bc:a0:dc:74:fd:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D2:A2:E3:EA:1E:75:2C:5D:9B:6C:B0:79:CE:3E:C0:1A:0C:7B:89
            X509v3 Authority Key Identifier:
                keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:30:67:3e:1d:fd:24:5d:7c:fe:1e:d3:05:6c:76:dd:a1:7f:
         56:f8:1d:bf:c2:66:6c:d2:cc:e7:5a:ac:4d:34:ec:c7:b9:ac:
         44:22:8e:a5:7c:e6:d8:8a:9f:b5:e5:94:78:e6:ff:4e:f6:6e:
         c8:c0:d0:c0:01:2e:b9:a0:c6:e3:0a:43:ad:d6:e8:7d:80:e1:
         a2:f6:69:d9:4b:24:39:e7:1f:af:27:cc:ad:dc:9e:0b:8d:69:
         20:30:ce:b5:4c:5b:37:db:44:8f:b2:35:f9:b4:19:60:25:9f:
         c4:7c:d7:5f:1e:d3:64:c5:e9:b5:26:7c:d5:3e:86:40:a3:65:
         c9:1b:5f:00:9b:a0:66:7e:34:e0:28:c7:55:a6:2a:89:03:33:
         40:df:d9:6e:12:6b:10:9a:ae:df:e5:5b:99:8d:03:ba:19:07:
         a2:f5:36:5a:35:31:82:c8:a4:d0:ee:21:6c:c7:c3:f3:72:17:
         55:4e:f4:30:d9:7d:a8:96:7c:8e:0e:cf:c8:70:d0:4c:2d:3e:
         4c:8f:94:7d:53:cc:b4:c3:68:d5:c7:3a:35:80:70:ba:c5:1e:
         ef:1a:12:bb:97:ec:ba:c1:af:96:86:08:64:1d:39:06:42:54:
         6e:be:f0:54:2d:9c:c9:a6:f9:73:98:6a:fa:ec:83:41:fc:5b:
         71:73:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:10:48 2025 by rpki-client