Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File:                     WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier:          a94zU7ODlFKcPXmIS2Q1g93ias2MXjGDjfFGFOzyFeA=
Subject key identifier:   CB:8E:BF:22:07:6D:6C:85:F0:50:45:0D:8D:3F:F0:BE:9A:C9:92:C6
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer:       /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial:       0196B0D7DBB9595AC561FA9063504508000F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number:          01A5
Signing time:             Thu 08 May 2025 17:00:58 +0000
Manifest this update:     Thu 08 May 2025 17:00:58 +0000
Manifest next update:     Fri 09 May 2025 17:00:58 +0000
Files and hashes:         1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: kLEjoSgOL5sjRJsNSRrhOQltDXP7wE7c62Ul99NbZBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:d7:db:b9:59:5a:c5:61:fa:90:63:50:45:08:00:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
        Validity
            Not Before: May  8 17:00:58 2025 GMT
            Not After : May  9 17:00:58 2025 GMT
        Subject: CN=cb8ebf22076d6c85f050450d8d3ff0be9ac992c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:c0:bc:7f:2a:d9:8a:e5:dc:a2:37:4f:cd:
                    b6:88:82:4f:38:94:88:72:ba:bd:b7:40:1d:7b:98:
                    0a:87:db:b1:ec:88:a4:e3:bf:47:80:99:a6:cd:42:
                    7c:2e:89:59:bb:ca:9c:9b:4b:59:b2:90:11:b6:45:
                    4a:d5:4c:aa:83:50:62:55:49:02:60:ec:59:42:ad:
                    e1:25:55:c6:24:27:14:66:98:63:6e:ba:87:03:81:
                    2a:67:6c:17:28:54:9a:6d:00:83:5e:88:d3:95:96:
                    bb:26:a6:90:dd:7b:72:11:b7:fe:f0:4e:6f:d8:c2:
                    26:51:b1:2c:a2:a0:d6:50:20:42:3e:c9:f8:d9:26:
                    a6:f2:7b:f5:58:0c:67:f8:b6:b7:1f:45:64:c2:58:
                    13:00:ab:8e:5c:2c:c1:7c:b6:ab:7b:37:b7:db:89:
                    76:1e:59:fc:60:c7:14:10:01:25:6a:f3:f7:c8:c6:
                    30:c7:20:8c:5a:51:fe:1e:29:02:62:da:f2:3d:c8:
                    af:b0:bf:10:0b:7d:1c:04:8c:c4:43:56:b1:c6:13:
                    49:0c:66:e7:87:51:d2:36:6d:1a:e4:6c:59:29:19:
                    c7:98:24:ae:2e:f1:11:fa:36:e1:93:34:fe:f8:dd:
                    e7:63:0b:53:42:ae:9f:0c:06:58:d6:5a:dc:93:79:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:BF:22:07:6D:6C:85:F0:50:45:0D:8D:3F:F0:BE:9A:C9:92:C6
            X509v3 Authority Key Identifier:
                keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:07:5e:f3:dc:20:9d:af:92:b8:88:24:41:3a:fe:87:e8:b3:
         04:79:bd:25:1f:0e:1c:16:7d:71:74:2b:60:8e:10:5b:aa:9f:
         2a:0c:03:ed:e3:72:33:c5:ab:7e:44:16:ec:ad:0c:00:a4:75:
         27:47:0b:7f:20:30:7c:ff:a6:6d:3d:02:11:d5:95:93:42:91:
         93:b6:f9:7e:f4:e3:38:b7:08:a8:45:69:9d:4f:4d:80:83:c4:
         0d:ca:b4:a8:9b:1f:39:d8:14:fb:2e:31:06:e2:a6:6c:6d:98:
         26:2d:fd:d6:03:2f:43:1c:37:f1:2c:72:5e:1f:1f:f9:f1:ff:
         2e:b3:ff:56:0e:24:f3:4b:ea:af:ea:7a:52:91:09:24:e5:8d:
         25:6b:01:d6:4b:c8:2b:db:07:09:99:a3:53:fe:94:de:ab:07:
         02:c1:68:cc:93:3d:8b:bf:d1:f6:e0:f7:6e:f7:9f:65:24:3a:
         09:fd:e2:dd:a8:a8:34:d1:3e:16:96:79:c1:24:a5:bb:6c:3b:
         55:e9:6b:6a:ee:05:6e:06:b1:19:d9:e7:2c:7c:b6:0e:5a:18:
         e5:29:ad:73:d6:13:db:57:f0:bd:f6:7d:d1:62:ed:81:0c:ef:
         a6:ea:cc:0c:b0:40:09:66:21:ac:ee:00:4e:fd:4b:c7:22:07:
         20:a3:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:00:43 2025 by rpki-client