Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
File:                     WZyb6F-CikOPCNH1CvrCUz0qbsI.mft (raw, json)
Hash identifier:          AEOuUzfaFe6MKTi0xcwAB2O2CHPNy/UFKc+MhC5Iqjs=
Subject key identifier:   05:E1:6E:6A:5A:3B:E3:DD:37:A3:AF:40:4A:EC:3D:F6:12:0D:FD:F8
Authority key identifier: 59:9C:9B:E8:5F:82:8A:43:8F:08:D1:F5:0A:FA:C2:53:3D:2A:6E:C2
Certificate issuer:       /CN=599c9be85f828a438f08d1f50afac2533d2a6ec2
Certificate serial:       0197470BC6AC9B2581CBA4CC5F5C46D112BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
Manifest number:          054B
Signing time:             Fri 06 Jun 2025 21:00:43 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:43 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:43 +0000
Files and hashes:         1: WZyb6F-CikOPCNH1CvrCUz0qbsI.crl (hash: +iLxq0efvHWfAMFRVHWzV47dCgXrG/Im8iB/UwZsumE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:c6:ac:9b:25:81:cb:a4:cc:5f:5c:46:d1:12:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599c9be85f828a438f08d1f50afac2533d2a6ec2
        Validity
            Not Before: Jun  6 21:00:43 2025 GMT
            Not After : Jun  7 21:00:43 2025 GMT
        Subject: CN=05e16e6a5a3be3dd37a3af404aec3df6120dfdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:e1:22:f5:ba:f7:32:b5:60:b6:7f:b2:e8:
                    4f:01:05:6f:7f:6b:47:00:4e:47:f3:7e:52:ca:99:
                    c4:23:c1:b3:6d:33:68:09:e4:56:b9:28:12:c8:4d:
                    07:0d:3d:92:7e:6d:c1:48:af:13:70:16:2b:1d:ca:
                    ff:62:9d:aa:89:fe:ab:44:62:bb:a3:86:6c:d8:4c:
                    4d:92:17:c5:65:87:1c:ae:ef:df:3e:5d:52:d6:96:
                    ed:11:67:3a:9d:72:5b:2c:4a:65:bf:0a:ce:03:10:
                    4a:8b:f5:6a:28:1f:e9:e1:02:2c:0f:cf:11:b0:ad:
                    7b:29:e5:ff:53:82:57:e1:6d:d7:27:14:9e:2b:56:
                    60:41:bd:28:8a:ec:bc:83:c1:04:2c:34:09:b0:2b:
                    f0:76:db:5c:c7:f3:9a:6f:a7:08:27:e0:5f:50:d4:
                    2f:4d:ed:93:fb:a1:16:48:4c:e8:1c:8a:20:af:43:
                    43:11:7e:85:41:00:fd:cd:83:36:1c:3f:a3:56:8f:
                    67:8a:35:5f:e5:1c:ef:bc:f3:15:bd:95:05:4b:c9:
                    35:df:7b:92:71:28:44:bc:74:a7:e7:03:82:40:82:
                    05:1a:54:71:7d:db:4a:9c:ce:83:cb:01:73:fd:3f:
                    87:62:74:56:60:51:bb:09:76:74:47:42:bd:8d:d0:
                    3b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E1:6E:6A:5A:3B:E3:DD:37:A3:AF:40:4A:EC:3D:F6:12:0D:FD:F8
            X509v3 Authority Key Identifier:
                keyid:59:9C:9B:E8:5F:82:8A:43:8F:08:D1:F5:0A:FA:C2:53:3D:2A:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZyb6F-CikOPCNH1CvrCUz0qbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/aa9d76-305d-4ad7-9cb6-4c068ee8897f/1/WZyb6F-CikOPCNH1CvrCUz0qbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:96:63:0f:99:a8:66:8b:ed:2e:2b:93:f7:95:21:21:0c:e1:
         4b:4c:b5:e6:81:f2:9f:54:c1:16:04:5f:59:3b:e9:75:99:81:
         88:d7:0b:b3:01:67:62:91:2d:45:d4:83:ef:38:e1:35:21:38:
         09:fb:89:cd:69:57:76:6f:67:91:d4:e0:c0:b1:2b:48:0d:44:
         57:1b:86:05:ba:38:60:cc:36:4d:aa:f6:27:ec:f9:81:56:01:
         43:83:06:b3:90:3e:58:64:87:92:24:a0:03:7f:76:da:29:c6:
         bb:61:b5:02:9c:8b:a4:47:6e:5f:2d:2d:4b:3f:76:26:4e:b4:
         b7:bb:b2:78:f4:f2:77:85:ee:c9:6f:3a:e6:e0:83:99:92:dc:
         e1:d8:88:cb:c8:e4:d6:b4:c4:25:19:69:e0:1e:ca:30:9e:6c:
         45:7c:6f:72:20:38:57:ac:b0:18:70:a1:86:8e:fc:ad:5b:1e:
         f2:27:8f:01:74:7f:dd:8f:60:e6:12:b9:0b:c6:05:96:b5:51:
         1c:57:5e:f6:ab:c7:78:13:a4:c1:d3:1a:3a:f9:b5:92:36:b8:
         65:43:e0:15:b4:86:7f:8a:01:81:88:9e:45:df:ef:a7:ca:ca:
         62:a9:18:b2:b6:9b:2c:62:4e:01:35:73:60:7d:cf:21:de:4c:
         e7:43:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:29 2025 by rpki-client