Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
File:                     w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json)
Hash identifier:          KrHn7gH8Cn4V8BIDHAW3LrQ6HM5dZih5i7D7dtGQnIg=
Subject key identifier:   E1:89:6C:44:5D:91:DF:ED:6C:6F:05:51:D4:50:D6:B5:CD:43:35:AE
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Certificate issuer:       /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial:       0196C3BA15697F071BEF4A6803E127450E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
Manifest number:          05FC
Signing time:             Mon 12 May 2025 09:01:14 +0000
Manifest this update:     Mon 12 May 2025 09:01:14 +0000
Manifest next update:     Tue 13 May 2025 09:01:14 +0000
Files and hashes:         1: ovuoYv_IY6H5VWP7UVhFEyUvZR8.roa (hash: tGIGMmrAiBAVPdoPhNgWbiaEcKncDLBEr0fehIJsIkA=)
                          2: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: 8RYWpW2ZSBhI8zLgY1F1g/DEh7mosIdeTQxxOn8vqaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:ba:15:69:7f:07:1b:ef:4a:68:03:e1:27:45:0e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
        Validity
            Not Before: May 12 09:01:14 2025 GMT
            Not After : May 13 09:01:14 2025 GMT
        Subject: CN=e1896c445d91dfed6c6f0551d450d6b5cd4335ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:22:be:df:90:01:77:8a:4f:e8:f7:a9:49:81:
                    a4:35:5a:36:de:06:10:a0:9a:2e:d3:27:c9:42:50:
                    27:de:76:11:fe:f9:92:e3:f8:e4:94:b9:8d:53:93:
                    fa:88:01:24:70:aa:7c:2c:26:42:cf:cd:a7:c8:83:
                    7e:34:1c:96:9d:1c:88:cd:0e:18:02:81:0d:1e:0b:
                    13:d1:5a:b8:f8:91:5c:02:e9:82:aa:5d:53:d4:35:
                    83:14:8d:43:51:ec:fd:72:6d:42:71:be:ff:a3:9f:
                    58:04:e1:65:d0:ec:ca:b0:cc:62:3d:be:7b:31:1d:
                    a8:ed:fd:f5:36:33:61:51:f1:c0:0e:85:ca:40:5f:
                    23:05:d4:d3:b9:78:f6:e8:8b:c8:cb:4a:c1:b9:86:
                    c0:cd:9c:6f:d7:2f:65:9f:3c:dc:95:a1:71:45:24:
                    c4:08:8c:8b:fd:15:93:0a:f2:04:31:b0:7a:0e:4b:
                    1e:7f:94:69:60:f7:9c:a6:0a:46:ea:bd:74:f9:41:
                    83:4a:49:70:5c:4d:e5:47:1a:ca:79:bd:1f:a9:e1:
                    c6:39:b2:e0:8a:4b:5a:f7:8c:80:df:63:4d:2d:00:
                    fb:96:64:17:99:6e:fd:6c:33:3f:93:b5:6f:e2:73:
                    a4:e6:18:ee:47:02:98:87:03:82:92:cd:a9:45:64:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:89:6C:44:5D:91:DF:ED:6C:6F:05:51:D4:50:D6:B5:CD:43:35:AE
            X509v3 Authority Key Identifier:
                keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:51:b7:0d:10:8f:ff:64:05:63:63:a8:77:6d:e6:9e:cc:3e:
         9b:20:a7:6c:aa:c9:ab:51:95:f1:40:8e:ec:b1:3a:5f:99:9a:
         ce:19:e6:11:02:36:25:c0:aa:2b:e5:4b:23:43:11:c6:e6:84:
         c2:0c:9f:a9:ed:c7:93:f5:27:ca:9e:30:30:79:3a:4e:09:74:
         d6:2c:1e:77:83:9c:68:94:99:ef:86:c9:d9:f6:4f:ef:3b:88:
         5b:49:8d:33:79:70:11:5d:79:50:3e:d7:3c:02:05:85:70:31:
         76:6d:6d:65:21:81:60:01:4c:a7:e2:81:7c:ec:63:8a:65:74:
         c4:7d:7e:fe:e2:8a:75:70:2a:fc:36:93:a4:10:4f:28:ac:63:
         f9:ea:0b:8c:ce:05:75:66:32:b1:6f:4b:36:cd:15:41:8a:4f:
         88:fe:ff:a0:8a:4f:bc:fe:b9:5a:7d:48:42:13:5d:32:3c:b5:
         02:da:98:0a:26:ff:5e:bc:0e:53:30:f6:65:03:c4:9f:df:43:
         d7:a3:09:b4:98:d6:23:02:87:ce:63:4b:5e:98:64:3c:13:41:
         bc:53:41:8d:11:31:db:99:91:99:73:5d:28:00:0d:dd:c5:b4:
         24:7a:55:ac:0e:f8:29:f7:cb:5c:9f:d1:4c:dc:6f:42:37:10:
         5d:d6:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:28:42 2025 by rpki-client