Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
File:                     WQYyXjRBilfOVm78DD6LOKDvpds.mft (raw, json)
Hash identifier:          lfA4+GdhrF67sFfFnT9UZdzxHRDHxwm+utpTZDj//HE=
Subject key identifier:   AC:10:2F:26:F0:F2:E9:D1:49:B3:6D:5A:50:37:E6:F9:2B:9E:11:0C
Authority key identifier: 59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB
Certificate issuer:       /CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
Certificate serial:       0196A72F7868727F1751DAF2FC517CE5E2A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
Manifest number:          0509
Signing time:             Tue 06 May 2025 20:00:28 +0000
Manifest this update:     Tue 06 May 2025 20:00:28 +0000
Manifest next update:     Wed 07 May 2025 20:00:28 +0000
Files and hashes:         1: CHolCMPV9MDfWslO2iJddWWgMxU.roa (hash: xbO5/GWIWdRSiMSxSxvQxXxVcngA8nyNGqLLz8U68pk=)
                          2: WQYyXjRBilfOVm78DD6LOKDvpds.crl (hash: fWMAvAFYVoOnlgLnm3WXx+MRBR5LA1GbfOhurt0vw0M=)
                          3: lJbRiLiZGOi-fCWDGGzZN5ma7W8.roa (hash: BxDOajJXMhzwiCUKNNyd1p9JlNupPH3KBSPrVsuMQCs=)
                          4: xyGqaFm8wV6in1t_6bj0_LRGfV0.roa (hash: m0Saw+cLOstpLd2stdgUm+hFFozHrcVyidN3zuOottg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:78:68:72:7f:17:51:da:f2:fc:51:7c:e5:e2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5906325e34418a57ce566efc0c3e8b38a0efa5db
        Validity
            Not Before: May  6 20:00:28 2025 GMT
            Not After : May  7 20:00:28 2025 GMT
        Subject: CN=ac102f26f0f2e9d149b36d5a5037e6f92b9e110c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:c7:ce:f9:84:b4:44:84:6c:c4:4d:5f:13:
                    5d:f7:ac:e0:37:4c:a7:a0:7f:66:2d:bb:5b:c9:a5:
                    a0:83:7b:82:1e:a3:e3:4e:d0:74:87:96:24:a4:d9:
                    0f:92:ae:a8:0f:cf:8c:12:ed:6a:23:2b:49:80:f7:
                    70:17:65:b8:35:80:26:b2:71:0c:19:76:ce:66:d1:
                    90:ca:22:23:f9:48:b8:25:d1:d5:22:e1:ab:f5:94:
                    97:6f:a6:25:6d:7f:7e:a3:06:4f:ef:73:db:49:68:
                    28:74:b4:28:cb:e7:6c:84:91:bf:22:e8:a2:75:71:
                    0d:5a:90:6d:b6:bd:d2:bf:ad:8d:7f:95:ab:0a:25:
                    a8:01:c8:5a:f6:0a:d5:9d:bf:be:e4:af:ab:5c:a2:
                    0d:91:1f:a0:7b:b2:ad:fd:63:67:05:8c:20:8a:f7:
                    6b:84:61:e3:0d:e8:ea:41:00:7e:b6:25:28:2b:39:
                    e4:c3:4f:46:a3:df:7b:6d:ec:37:42:3d:85:06:5b:
                    1f:7a:c1:cf:65:95:a2:6a:0b:9b:28:a5:b1:97:a6:
                    6b:56:1d:cb:e4:a0:00:ae:a3:ff:13:92:d8:ad:6c:
                    b0:76:c1:46:1e:5d:8a:63:b7:42:9c:1d:c1:a3:7d:
                    15:a0:a2:d8:af:94:cd:52:90:88:25:83:7e:1f:df:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:2F:26:F0:F2:E9:D1:49:B3:6D:5A:50:37:E6:F9:2B:9E:11:0C
            X509v3 Authority Key Identifier:
                keyid:59:06:32:5E:34:41:8A:57:CE:56:6E:FC:0C:3E:8B:38:A0:EF:A5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQYyXjRBilfOVm78DD6LOKDvpds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a46349-1bc0-4a0b-b67f-b217a68ceaf4/1/WQYyXjRBilfOVm78DD6LOKDvpds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:62:cd:69:c8:de:b2:24:c1:05:91:7b:95:32:e6:94:f3:1a:
         3a:b6:f9:11:89:3c:d7:8a:aa:cb:df:3f:93:8e:b0:9e:d0:f8:
         71:a6:e5:03:39:92:2e:5d:2d:28:c6:46:77:07:33:0c:13:9a:
         fa:0b:8a:cc:b0:14:a8:e3:08:5c:27:dd:b3:1e:33:1c:78:56:
         4a:42:d8:a0:b4:58:e9:7c:52:ed:fd:7f:58:46:1c:1e:fa:16:
         f1:65:8c:3a:1e:95:c6:77:ab:e6:d4:f6:27:5d:34:5d:0a:b7:
         97:82:77:87:57:ca:73:e2:b6:74:b5:05:93:d8:02:86:7d:83:
         79:3f:0d:ff:0b:99:e1:d9:58:f2:64:7b:fb:b2:30:58:3c:42:
         03:dc:fd:e8:f2:07:26:0d:b9:70:bf:90:47:9f:f8:e9:f7:24:
         12:5a:98:2f:8d:72:54:83:22:15:bc:15:4f:81:dc:22:97:bc:
         4b:0c:81:0e:6c:33:ec:fa:e8:83:e6:90:cb:ce:ce:70:11:8f:
         3b:a6:b4:ed:7f:ec:70:00:4b:d2:45:46:5b:bc:5d:38:69:76:
         57:8b:d7:09:d7:6c:b8:a6:e9:6a:87:be:a6:8a:da:d4:d1:34:
         58:ba:e8:00:2a:d8:8e:7a:e3:4e:77:2b:e7:41:97:11:1e:15:
         bb:07:af:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:30:13 2025 by rpki-client