Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          8F4Ag0MLJ2PVkOCsmGoJyeWKPmO/FhOI3x9CvhvfsVQ=
Subject key identifier:   5C:B1:85:0F:07:6A:60:15:E8:7A:B1:CF:83:7A:CC:82:38:8C:1C:6A
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       019750462E483D0FD74932E4059955F30411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          13CB
Signing time:             Sun 08 Jun 2025 16:01:05 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:05 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:05 +0000
Files and hashes:         1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: uiaJK85iQ8UeHwqDwdP0BoE4GsnaLeJg/fgowBmnXw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:2e:48:3d:0f:d7:49:32:e4:05:99:55:f3:04:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Jun  8 16:01:05 2025 GMT
            Not After : Jun  9 16:01:05 2025 GMT
        Subject: CN=5cb1850f076a6015e87ab1cf837acc82388c1c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:a3:45:0b:73:71:7b:d1:da:d4:01:27:e6:
                    48:0f:8c:8f:31:4b:28:a2:a2:71:03:9d:55:5f:5f:
                    15:53:4a:d7:66:db:7e:d0:71:3c:68:b9:bc:55:ca:
                    21:46:ff:46:63:1b:ee:29:ff:27:79:33:3a:76:da:
                    64:61:d7:e7:fb:d3:9c:c1:d7:6a:60:ff:87:82:88:
                    c5:40:66:f6:4c:6a:f5:81:42:7c:60:c4:06:45:48:
                    09:93:0d:86:b5:33:a4:48:bc:91:b7:61:28:9e:56:
                    0b:6a:bd:59:4f:6d:2c:10:99:59:48:89:9f:c5:8a:
                    0e:52:05:51:99:48:37:87:ca:d0:17:7f:3d:fa:af:
                    8a:40:55:0b:70:19:7c:fa:52:5a:4b:d4:20:83:15:
                    05:26:0c:ae:22:c9:1a:10:61:87:47:e5:19:81:26:
                    ba:7f:b2:7c:64:d2:11:63:34:34:82:b7:bd:46:d2:
                    43:0e:23:d4:67:c1:5d:a1:77:45:66:9d:54:00:03:
                    b8:08:e9:d9:82:26:e8:be:1f:35:7c:a5:43:f7:75:
                    7e:3a:35:bd:64:81:88:c8:c2:88:18:8f:e0:a6:6f:
                    67:ac:ac:7c:17:68:77:86:75:2b:93:fd:07:9c:36:
                    3f:59:1d:e0:8c:8b:64:77:84:9d:cb:f9:b3:77:84:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B1:85:0F:07:6A:60:15:E8:7A:B1:CF:83:7A:CC:82:38:8C:1C:6A
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:d6:b9:7c:59:17:0e:88:23:2f:74:56:db:c8:9b:cf:ff:1e:
         00:53:3a:50:8f:fb:12:9b:bf:85:7a:da:5a:dc:62:a8:24:e5:
         83:8b:b8:61:82:7e:0b:f0:17:a3:81:01:69:fc:5c:07:11:c8:
         a9:37:4d:3a:11:0a:ff:58:32:8b:3b:ca:b5:97:83:b7:28:22:
         83:b7:fa:06:0e:d7:d6:37:ef:25:cd:ef:92:2d:cf:96:a9:11:
         40:b6:4c:53:e7:5e:88:79:54:e3:92:e2:d8:aa:83:a5:eb:05:
         8b:39:e4:70:65:b4:bf:c6:6c:9f:6a:48:8a:a9:63:57:0d:d6:
         c6:6b:43:96:51:68:82:0b:c9:a7:0b:27:e3:04:e8:45:6f:04:
         35:76:d4:c7:4e:78:ad:e4:bc:ea:9c:d8:d9:9d:42:cb:d6:36:
         f6:d7:95:97:20:1a:00:9a:cb:f6:ab:3a:e5:f9:c2:ee:3e:f7:
         19:dc:c2:1d:32:f6:7f:af:ec:77:90:9f:a2:2c:17:a9:40:a6:
         e9:34:28:6f:f1:58:52:44:3a:75:5a:fa:71:07:62:69:06:ef:
         90:28:a9:77:af:20:2e:e4:8f:ec:a9:38:5a:27:3c:c8:f0:2c:
         d0:22:cf:75:e0:74:d1:dd:56:32:9c:5f:70:e9:59:52:7e:3a:
         f3:21:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:36 2025 by rpki-client