Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File:                     W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier:          nn+MEJB9nyi34JuLG9jPjGTkAV/CBlEA6cgw7RCMmho=
Subject key identifier:   A1:90:FD:B3:8D:D3:CC:98:EF:88:8B:C8:98:F1:91:70:B0:01:D9:FD
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer:       /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial:       0196C202482BBE43E2F9286D1ED25B234A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number:          0B7D
Signing time:             Mon 12 May 2025 01:00:51 +0000
Manifest this update:     Mon 12 May 2025 01:00:51 +0000
Manifest next update:     Tue 13 May 2025 01:00:51 +0000
Files and hashes:         1: DkAig3sreL5BEr4m7B4017Dqunc.roa (hash: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=)
                          2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: ZZaqK52IZ78LJEsgZ8UgAlQuv6zK8k4Hrgt1rswvYxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:48:2b:be:43:e2:f9:28:6d:1e:d2:5b:23:4a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
        Validity
            Not Before: May 12 01:00:51 2025 GMT
            Not After : May 13 01:00:51 2025 GMT
        Subject: CN=a190fdb38dd3cc98ef888bc898f19170b001d9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:35:3b:52:d1:1b:5e:a3:a4:a3:1b:da:00:
                    b3:23:a0:0b:8a:ec:ff:72:80:ba:15:dd:ad:05:1f:
                    0d:9c:e0:97:f3:aa:9b:c9:11:9a:96:f3:b5:65:e4:
                    b2:ec:3c:c2:f4:07:cc:a5:d0:10:a4:24:bf:34:7e:
                    bc:b7:90:c1:4d:72:6a:55:31:d5:24:2a:68:89:4e:
                    2e:a2:d6:2d:90:99:c5:30:79:d2:fb:16:28:be:4e:
                    0a:19:c8:75:e7:e1:43:02:c0:84:77:3e:be:7a:31:
                    ba:08:53:da:86:54:cf:f8:34:02:b5:4a:b1:d1:7a:
                    b8:66:1d:ea:ad:8e:4c:92:07:63:61:cd:1b:50:cb:
                    91:72:49:00:33:3e:4c:cb:1a:8e:97:f6:31:cf:71:
                    5a:86:c2:42:97:04:2f:05:16:16:8b:9f:70:cf:aa:
                    83:ea:ed:a0:77:ef:44:98:36:6b:b2:35:fa:ec:c5:
                    e2:29:08:6a:4b:9a:ac:e3:1a:8f:a5:05:61:e8:ea:
                    ed:48:e4:e7:f0:a3:1b:91:44:b8:05:9d:76:ed:15:
                    aa:25:6e:a0:02:08:f3:bb:2c:f1:fc:4d:19:a1:1d:
                    95:16:7d:92:48:6e:11:e9:20:f5:79:0f:fc:d9:53:
                    3a:8c:66:1e:56:12:56:46:c3:fb:85:fd:be:30:c0:
                    b6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:FD:B3:8D:D3:CC:98:EF:88:8B:C8:98:F1:91:70:B0:01:D9:FD
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:b1:b4:ac:b4:2e:7c:f7:82:14:c8:02:a7:fd:e1:86:7e:
         00:a7:12:60:ae:31:85:28:c3:b1:23:dd:11:b2:ab:d6:54:dd:
         0f:97:33:db:25:dc:e8:be:5e:aa:d4:c0:44:2c:e7:0b:9e:cd:
         e1:9e:85:23:d2:52:34:59:61:17:10:fd:1c:71:83:4a:93:e9:
         b7:f8:b8:ff:3d:2f:d2:f7:39:70:42:76:0d:5b:d5:b2:8a:b5:
         74:1c:19:c8:9c:7f:82:f2:75:5d:74:d2:9b:ec:0e:7e:49:b8:
         0d:98:cb:f0:79:d9:90:f4:55:75:60:c8:1d:f3:46:0b:5b:47:
         9d:0a:1c:2d:03:6b:78:c4:32:c8:10:6f:92:44:ba:71:97:94:
         f7:29:a8:19:5b:f0:82:51:85:2e:6e:16:1e:42:86:bb:e8:cb:
         46:c3:73:ce:e9:34:4b:11:5d:db:46:0f:ee:62:b6:f8:98:a3:
         4e:f7:26:df:bf:2b:98:bd:ac:27:a9:76:b8:0a:9a:3b:de:d0:
         04:b0:1b:85:9a:c2:c8:b8:67:0f:d7:dc:79:db:53:8c:51:18:
         b8:ee:9a:04:61:cd:e4:70:7e:49:bf:e7:89:bf:96:0d:37:79:
         3b:9e:64:4f:3f:36:a2:b7:a1:56:c7:5d:34:d4:7d:09:ba:a7:
         8b:e3:3b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:33:08 2025 by rpki-client