Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
File:                     Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft (raw, json)
Hash identifier:          zP6q3n0BY7bqufkvumw0+rdS7alRa06dhy99fxnz30s=
Subject key identifier:   DC:C8:E7:EB:D6:87:AA:73:CB:0E:F3:B2:60:EB:D4:61:D0:05:1B:0B
Authority key identifier: 5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79
Certificate issuer:       /CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
Certificate serial:       0196C12618153808D16E6494B7AEDCDF0CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
Manifest number:          DD
Signing time:             Sun 11 May 2025 21:00:21 +0000
Manifest this update:     Sun 11 May 2025 21:00:21 +0000
Manifest next update:     Mon 12 May 2025 21:00:21 +0000
Files and hashes:         1: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl (hash: ycioSwkpdaigmNuHYZuddodTIVuaGmBkhh0K4iNi4mI=)
                          2: ua40xe-nVHZa06FKIiUk9wTe5FM.roa (hash: 73qF1PGF97l5Z0mjbYS8YfyN8FxoYFUMQ+beopo0LTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:26:18:15:38:08:d1:6e:64:94:b7:ae:dc:df:0c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
        Validity
            Not Before: May 11 21:00:21 2025 GMT
            Not After : May 12 21:00:21 2025 GMT
        Subject: CN=dcc8e7ebd687aa73cb0ef3b260ebd461d0051b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:c7:cc:55:5d:76:37:19:0b:bb:99:58:37:
                    d8:f5:26:a2:8a:94:b9:7a:5e:c0:08:4b:25:bb:7b:
                    46:0d:f4:81:b3:af:06:cc:19:63:25:a6:41:a1:cd:
                    fe:6e:11:03:05:3e:f4:76:87:d1:6d:ed:17:63:50:
                    67:c2:b6:32:9f:e9:82:17:cf:53:3e:ba:7d:46:db:
                    53:50:50:15:11:0c:61:69:b9:03:ca:62:5e:07:9a:
                    84:84:76:38:dd:cc:d1:8c:f0:99:f6:f4:e7:22:04:
                    07:25:2b:7b:66:9c:20:f5:d0:b7:fe:96:4b:16:cc:
                    0a:da:07:65:11:b1:b4:1e:d2:08:12:f3:38:47:57:
                    f8:c8:b2:a4:0b:62:12:40:d5:87:d6:21:89:f1:0c:
                    32:bc:f1:13:b4:e2:07:e4:c2:b0:b2:92:6a:52:67:
                    fe:7f:4f:a7:3c:87:8c:58:ee:0b:79:ac:8f:da:3c:
                    ae:6c:d9:fe:52:90:54:c4:9f:f6:f4:a2:ce:ef:1b:
                    4c:2a:e5:46:10:05:62:86:45:2c:6d:b6:62:1c:58:
                    7e:e0:f8:19:43:5f:24:e5:99:a7:ad:c8:ac:9e:4f:
                    e7:38:e4:1b:4e:6d:08:88:2c:cd:5d:71:2f:9b:cc:
                    15:be:c7:4a:45:20:78:4d:37:04:97:09:ee:c7:40:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C8:E7:EB:D6:87:AA:73:CB:0E:F3:B2:60:EB:D4:61:D0:05:1B:0B
            X509v3 Authority Key Identifier:
                keyid:5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f7:73:99:74:07:c7:69:6a:65:6f:3e:42:e6:de:62:bc:4e:
         dd:34:93:bc:1c:e1:8c:1d:3e:2d:83:f6:b4:b9:c1:5a:11:25:
         e3:9f:4c:61:d3:2c:a3:d2:f9:da:ab:6c:34:f7:dc:dc:c1:84:
         02:a0:22:71:40:01:f0:19:6a:79:9f:63:ed:2e:60:4c:e0:23:
         2b:e8:3c:63:b3:a3:7c:53:4f:ff:1f:fa:ff:58:68:61:2a:34:
         2a:57:02:b7:94:1e:f2:98:30:2e:e4:6b:59:3d:bd:8f:ec:4d:
         c1:3d:aa:26:3e:a9:6c:66:00:72:08:63:5f:ac:13:0c:e4:b8:
         5d:c0:1b:88:23:18:73:43:4a:62:a5:cb:cd:06:ba:94:30:d1:
         d9:91:80:3b:15:14:b8:75:f8:48:41:67:62:e3:ad:9c:c0:2a:
         27:95:fb:21:5b:cb:ac:6f:60:62:7c:a5:f9:e7:cb:ce:51:05:
         4d:f7:a6:96:3e:a5:b0:7e:6b:9b:35:66:e9:2d:47:76:7a:9c:
         f5:39:0c:de:1c:cf:53:96:53:1e:d9:77:7e:6e:cf:d8:52:cb:
         7a:0a:fc:e5:9d:be:ed:df:0d:2f:20:e3:51:0e:d7:27:9a:ec:
         4b:d0:a7:1c:c8:7a:0a:cd:fb:e4:8e:a8:18:c8:c4:2e:10:85:
         d6:a3:c3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:33:44 2025 by rpki-client