Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
File:                     W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json)
Hash identifier:          Kyj4Xq67ZU558R7AMAuLYDXGcA8+R+/9Q/rf1A9bnVo=
Subject key identifier:   5B:50:8C:44:A9:20:8F:94:63:2B:34:DE:00:06:52:EF:16:80:4C:3A
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Certificate issuer:       /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial:       0196CD61F7753E05AA6CBF9DA2706CE98619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
Manifest number:          12D5
Signing time:             Wed 14 May 2025 06:01:11 +0000
Manifest this update:     Wed 14 May 2025 06:01:11 +0000
Manifest next update:     Thu 15 May 2025 06:01:11 +0000
Files and hashes:         1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: AK6+fO57v6jS/m02+8iuREb/dDYNwnrWgpa1UZNB+dA=)
                          2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:61:f7:75:3e:05:aa:6c:bf:9d:a2:70:6c:e9:86:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
        Validity
            Not Before: May 14 06:01:11 2025 GMT
            Not After : May 15 06:01:11 2025 GMT
        Subject: CN=5b508c44a9208f94632b34de000652ef16804c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:55:57:58:4f:2f:d3:e1:84:10:1f:84:c5:
                    bd:90:e1:eb:86:fa:91:b9:b9:da:18:85:bf:80:0e:
                    bf:d0:e0:f3:c5:5f:11:35:00:fc:1c:46:53:88:5e:
                    46:9d:8e:fc:d8:7d:4f:8e:a1:2a:8c:85:d7:3d:eb:
                    56:b5:3f:79:37:5b:6e:ff:b6:50:e9:7e:9f:07:6a:
                    21:83:fb:cb:8f:32:70:2f:10:3c:b4:ad:2b:04:37:
                    e9:08:f1:71:09:57:58:2f:07:2c:d3:1b:74:47:5c:
                    5a:01:e6:fd:b2:e1:11:d8:df:e5:87:c7:37:8e:22:
                    16:97:8b:f6:84:70:39:0c:fa:74:9c:a8:a7:7c:aa:
                    7a:0f:89:31:c9:95:04:ae:94:76:ea:da:9f:38:d7:
                    09:2c:7f:14:4b:cb:40:d1:5d:05:6e:c4:0d:d5:4b:
                    6d:85:d6:c5:90:a0:b9:d2:ed:1d:70:bb:a8:d1:66:
                    c6:27:46:91:d0:e7:ac:09:c7:f4:3f:c4:1c:9b:62:
                    7c:86:c2:4a:bd:c5:4a:40:ed:ba:e6:c8:51:eb:78:
                    11:fe:67:38:fc:60:3c:92:3e:e9:3e:d4:85:16:a2:
                    38:26:f1:a2:e7:81:81:32:8e:6c:5d:76:c8:4d:a7:
                    9a:a4:75:37:6a:7b:ac:ab:01:8c:76:8f:0c:ab:46:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:50:8C:44:A9:20:8F:94:63:2B:34:DE:00:06:52:EF:16:80:4C:3A
            X509v3 Authority Key Identifier:
                keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:cf:51:44:18:03:92:fb:3d:7a:fc:6d:ce:ec:c1:f9:07:
         0f:0c:a9:87:35:85:db:a8:64:88:63:b7:e5:c3:56:14:3b:9e:
         04:7e:68:32:db:3c:3f:4f:79:b1:43:a9:57:a4:5d:ef:e5:35:
         b6:d1:d5:2c:77:e5:87:ea:98:8a:f6:05:bf:59:0c:69:df:54:
         04:12:a3:9e:b9:34:4f:7f:6a:68:06:4f:4f:6e:ec:b6:e3:a7:
         75:c3:ec:82:33:65:4b:a7:97:0d:fa:c8:7a:81:7c:be:46:a2:
         35:05:08:e3:18:f4:eb:16:57:4c:0b:f5:68:02:f9:27:32:b6:
         2d:a3:e2:4e:54:1a:ce:f1:71:7c:74:e2:eb:02:bd:fc:71:43:
         31:81:f6:24:56:49:7f:4f:ea:8c:b1:88:49:d2:a3:43:5b:e4:
         ed:13:15:ff:11:23:aa:8b:41:85:b9:00:6e:4f:d8:9f:d0:1a:
         73:50:e8:a1:af:be:f3:32:90:f2:35:15:20:ea:dc:42:10:e2:
         df:f9:4e:e2:76:ff:de:b4:b6:97:19:8a:b3:4d:ff:bd:33:1f:
         3a:13:08:26:a3:8e:6d:bf:73:89:a0:fa:1a:93:d6:aa:10:1c:
         be:5b:73:6c:88:19:99:80:73:6d:7f:0e:22:96:d0:5d:c3:70:
         81:aa:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:23:46 2025 by rpki-client