Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File:                     WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier:          +B4aqWINEtJu8nzkj8/3Kt+iZbPJ5jHRQkFl/f33gsI=
Subject key identifier:   03:58:6B:F4:88:9E:7A:97:7C:AC:CE:F2:2B:BF:1B:9B:D3:27:93:7D
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer:       /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial:       01969D5135A679D73BC4284D495B97B1A069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number:          099B
Signing time:             Sun 04 May 2025 22:01:07 +0000
Manifest this update:     Sun 04 May 2025 22:01:07 +0000
Manifest next update:     Mon 05 May 2025 22:01:07 +0000
Files and hashes:         1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: 0Yn51eH9YGRmpPMgIw+UpJhWDFo8c7PVp21ym3uRCLs=)
                          2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:51:35:a6:79:d7:3b:c4:28:4d:49:5b:97:b1:a0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
        Validity
            Not Before: May  4 22:01:07 2025 GMT
            Not After : May  5 22:01:07 2025 GMT
        Subject: CN=03586bf4889e7a977caccef22bbf1b9bd327937d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:28:d7:38:02:b7:4f:de:7c:09:e3:14:42:
                    b9:0d:88:a6:3e:fe:2e:ee:37:55:47:ba:1a:d7:da:
                    09:1f:ef:aa:86:69:15:bc:3d:c6:6b:80:d7:9c:9b:
                    7f:c7:1f:2c:f8:67:d4:00:00:64:ac:35:1d:71:d3:
                    e0:ae:32:cb:70:40:20:57:a8:93:6a:dc:40:c3:16:
                    d4:51:24:4e:5d:96:7b:f2:e9:8b:ce:30:d2:93:f3:
                    c6:65:74:cd:d5:79:29:98:67:b9:3a:3c:b1:a2:76:
                    e3:cf:dc:81:7c:fe:ef:fd:11:36:12:c0:03:3d:29:
                    76:44:58:64:b8:a1:5a:04:29:4b:50:60:2d:3a:56:
                    b3:fa:60:3f:26:73:bc:9d:be:f1:dd:92:34:00:cc:
                    a4:f9:76:ba:52:05:aa:1b:82:69:c3:b1:24:6e:d8:
                    62:9b:11:e0:70:c2:0b:ff:7d:e7:5c:02:9f:71:7f:
                    82:29:8f:14:94:19:72:94:c5:ab:e3:80:73:eb:5b:
                    76:33:7b:72:d0:93:54:1f:1e:9a:4a:4b:10:2b:bf:
                    2c:ae:d1:ff:da:4b:24:49:48:69:dd:ba:e8:b4:91:
                    51:f3:01:84:6f:ad:e3:2e:72:d5:07:e3:78:ec:04:
                    8c:81:81:68:8a:99:d5:34:de:29:4b:6c:64:c4:70:
                    56:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:58:6B:F4:88:9E:7A:97:7C:AC:CE:F2:2B:BF:1B:9B:D3:27:93:7D
            X509v3 Authority Key Identifier:
                keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:80:03:19:b7:54:a9:2a:2f:9f:8f:04:df:29:92:79:32:c6:
         83:b9:e7:9f:a6:3c:7e:1b:b1:91:05:b9:cf:9c:fe:f6:df:91:
         00:9d:9b:d3:98:16:8b:76:51:ab:b2:03:01:41:7b:ec:23:3b:
         d4:78:d1:a6:5e:e4:c8:7b:13:d9:dd:79:a1:9b:3d:96:bc:8c:
         74:a5:c4:77:c4:cd:4a:c1:18:9a:59:70:82:d2:58:b6:9a:38:
         da:7b:dd:e9:33:2e:94:f2:bb:05:c4:d0:95:b7:56:07:a9:68:
         5c:ef:8a:33:ef:fd:cc:56:34:ac:3e:5e:c1:45:6a:a9:56:bc:
         b9:9b:ad:ab:64:ff:37:68:12:1a:e4:b7:e2:d6:1e:74:cd:29:
         04:ce:2c:5a:3d:6f:30:e0:9f:e6:cf:37:86:03:d6:41:c4:c9:
         d1:e5:25:32:6f:b5:93:93:ba:6b:1e:41:09:a9:60:75:47:ed:
         18:2c:00:bc:43:80:fb:4a:32:bd:0d:51:51:e0:76:99:81:bd:
         cf:70:a1:71:48:cd:52:d5:09:5c:27:17:d0:87:13:05:97:4f:
         ed:c7:bd:c8:77:33:03:fc:c1:8d:16:5c:89:63:99:8f:bd:b6:
         67:b0:3d:e7:d7:a0:f7:39:11:2d:8c:ea:fc:64:f6:98:90:d8:
         f4:fc:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:21:04 2025 by rpki-client