Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File:                     W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier:          efOePFW1nvOsR3kFco2MIdE6lzJ1F8V7f6EZUfDMhfI=
Subject key identifier:   93:10:E3:AC:82:81:2A:04:7F:72:78:8B:0E:21:6A:78:B6:0C:EB:D3
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer:       /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial:       0196B891460CF48876BE78926A286BC3E587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number:          04DC
Signing time:             Sat 10 May 2025 05:00:50 +0000
Manifest this update:     Sat 10 May 2025 05:00:50 +0000
Manifest next update:     Sun 11 May 2025 05:00:50 +0000
Files and hashes:         1: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: QhITqFbRHrmxW8AYdqNyqb0fCQhPgV5nPtJoeThIcSw=)
                          2: aC3k6Pc-VbYaZAExCYMf-r0FJik.roa (hash: sjHut+jtNlmiU2BIEntfi+uVsFkRaMGa8qqarc0jF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:91:46:0c:f4:88:76:be:78:92:6a:28:6b:c3:e5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
        Validity
            Not Before: May 10 05:00:50 2025 GMT
            Not After : May 11 05:00:50 2025 GMT
        Subject: CN=9310e3ac82812a047f72788b0e216a78b60cebd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:77:8a:ba:d8:36:f0:91:f8:04:1a:33:a4:
                    85:5d:74:d3:62:80:90:c7:88:f0:fa:52:a1:e8:0f:
                    86:c1:0a:c2:e0:49:a6:87:ee:a4:34:41:fc:7a:87:
                    b2:7a:a8:3b:40:c1:6a:74:9a:3f:f0:8b:1d:f4:cb:
                    63:55:75:bb:72:cd:8d:9a:68:eb:63:a2:05:0a:ea:
                    3c:83:41:d1:d1:62:5f:af:45:53:d8:1c:3b:30:b3:
                    41:6b:76:e2:5f:69:4f:41:8c:f8:d2:50:79:e4:11:
                    db:50:8b:0e:33:55:e6:f1:35:90:57:6e:0f:90:b2:
                    ac:0b:a5:f3:7c:0e:d6:b9:ce:b3:71:13:f7:e0:bf:
                    2f:63:f2:67:ae:56:7f:f7:fa:05:d3:f1:5f:a2:69:
                    a8:1b:2a:00:cd:21:b7:c1:ed:13:a8:4d:a4:b3:5d:
                    43:44:f7:6d:14:61:e8:7f:e0:83:03:e9:e8:65:98:
                    4a:9b:ff:d6:43:c0:9b:20:6a:71:95:96:69:0c:e7:
                    6a:77:69:18:14:5e:25:e4:ac:7a:6d:4b:b8:85:e7:
                    51:df:9e:7f:79:b8:9e:aa:4f:b0:e2:ec:8f:15:d0:
                    aa:16:a0:bf:99:28:2e:3a:db:e1:d2:30:76:40:9b:
                    78:56:89:53:26:35:15:60:b9:f7:8a:72:78:90:ca:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:E3:AC:82:81:2A:04:7F:72:78:8B:0E:21:6A:78:B6:0C:EB:D3
            X509v3 Authority Key Identifier:
                keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bb:9b:b2:ee:64:68:43:f1:3d:0c:e2:ad:84:e5:d8:46:45:
         f7:ea:2d:d0:75:54:85:fb:4c:5e:2e:ff:ae:64:78:8c:80:4d:
         72:08:6a:19:2b:8f:38:36:ab:60:d7:b2:1f:ce:8c:61:fd:0d:
         51:42:c6:2e:4d:0d:95:f9:04:c0:c8:ce:2f:fe:70:cb:75:0a:
         4c:c7:ff:1f:3d:2e:ad:2c:53:02:6c:4f:04:0f:17:a1:c9:70:
         df:76:8b:a9:f0:10:0e:c9:8e:52:58:1a:9b:c9:b9:7a:bb:3d:
         03:6a:83:99:79:bf:93:c5:a9:75:c7:29:a1:14:ed:72:df:29:
         55:12:a8:09:70:4d:02:ad:e8:b5:9f:6a:19:47:54:49:9f:2b:
         5c:0f:bf:53:0a:87:52:e3:c1:0f:47:7c:ae:c7:01:5a:7e:0e:
         fa:5b:2c:cd:db:9e:f8:0e:90:08:5a:a8:b7:69:3b:fc:a4:f5:
         c4:3d:78:46:6b:4b:7e:55:58:9b:6e:a6:0d:27:36:7b:3f:09:
         5e:29:5c:5b:8c:a6:db:8c:b6:9f:b2:2d:c1:ed:10:7e:a2:23:
         98:24:51:30:aa:47:f1:3f:f3:58:39:19:3f:f1:73:ec:dc:72:
         88:b9:eb:26:45:84:35:7c:b6:6c:e5:8f:28:54:02:36:e1:fb:
         6c:f5:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:23:31 2025 by rpki-client