Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File:                     W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier:          jQXLWGLwmJbjzOJm5+M27u+GUiWsIfKWGtp//TQHtaY=
Subject key identifier:   A6:9D:ED:54:2C:25:0A:C3:5B:34:45:50:82:CD:A3:81:18:CA:28:C7
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer:       /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial:       0197537D6BF369C6048E0707298A50A84348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number:          1581
Signing time:             Mon 09 Jun 2025 07:00:17 +0000
Manifest this update:     Mon 09 Jun 2025 07:00:17 +0000
Manifest next update:     Tue 10 Jun 2025 07:00:17 +0000
Files and hashes:         1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
                          2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: Dsm8Qkkrb5StlCy4rsXQ9BF47xXekX14GFzWABKHYeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:7d:6b:f3:69:c6:04:8e:07:07:29:8a:50:a8:43:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
        Validity
            Not Before: Jun  9 07:00:17 2025 GMT
            Not After : Jun 10 07:00:17 2025 GMT
        Subject: CN=a69ded542c250ac35b34455082cda38118ca28c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:64:86:22:a9:1e:60:4d:5d:66:8b:cd:5c:4e:
                    f6:a2:3f:1b:28:e3:67:06:ab:7c:45:70:a9:be:4b:
                    38:9f:10:63:a1:64:ef:eb:8d:9d:70:96:42:92:01:
                    6f:17:96:20:b2:aa:67:19:c9:ab:d0:67:f0:c5:d9:
                    1f:64:cb:64:e8:53:85:ac:3d:9d:5d:7f:e8:43:b3:
                    14:19:29:13:38:59:11:93:e8:5d:09:38:05:2f:3f:
                    9e:63:35:2b:8b:f2:e0:17:f0:1c:c9:9b:95:0b:e0:
                    e1:28:2a:8d:69:8f:6e:73:40:95:f6:39:c3:e3:e1:
                    9a:3a:81:0c:b4:56:0f:9e:51:65:3f:26:42:57:1d:
                    b0:13:5f:23:77:a0:e3:f0:8c:76:6d:37:96:a6:6c:
                    16:66:30:6f:5a:55:a4:67:a4:f2:15:98:91:ae:e3:
                    2d:0d:32:a1:26:03:d2:2b:d2:85:36:aa:d1:53:ab:
                    7d:ee:0e:fc:7d:11:d8:96:9a:6d:b4:90:c0:73:a3:
                    4c:af:ec:df:d4:87:6c:c1:10:5e:d6:80:83:dd:e6:
                    d2:d5:82:8e:15:56:75:02:de:29:39:33:46:fb:3d:
                    c4:7a:64:ca:a3:2c:11:6c:de:41:7e:4f:17:13:47:
                    9a:8c:1f:1b:d2:db:36:b7:3d:31:51:9c:a1:c3:94:
                    02:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9D:ED:54:2C:25:0A:C3:5B:34:45:50:82:CD:A3:81:18:CA:28:C7
            X509v3 Authority Key Identifier:
                keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:14:cb:f0:aa:22:08:ea:bb:7d:26:37:89:62:7d:ff:ef:37:
         a4:e6:ff:4a:02:58:16:27:ec:7f:fa:dc:d6:2b:cb:6e:29:bb:
         b9:9b:eb:89:12:3c:de:a7:2b:97:5e:19:c3:db:7a:d7:b8:31:
         6d:7a:4f:91:67:ef:da:f3:9c:fc:96:63:e8:40:46:dd:29:27:
         1f:d1:21:1b:74:ef:26:a8:7a:5e:6d:a0:d4:d0:00:de:75:0b:
         1c:ea:74:30:ce:46:0e:a4:5d:73:53:6b:67:e8:00:db:eb:c4:
         11:1b:ef:0b:50:ca:0c:fb:20:60:b9:62:18:25:2e:8f:63:d9:
         15:c2:65:0b:5d:76:39:9c:b1:3c:39:9b:9d:6f:ff:df:3d:e8:
         70:64:12:f0:db:0c:78:f2:ec:80:ac:ef:a0:17:31:b4:09:a2:
         2e:36:9d:5c:b8:b4:14:96:b1:c6:ca:c6:98:f8:de:77:9f:b4:
         74:00:3e:bc:f6:3d:48:e0:a9:d4:18:e7:ba:a1:ef:0d:86:ef:
         f8:3a:6b:59:41:8d:de:54:d5:75:5c:ba:a8:e4:4e:ae:db:86:
         f1:93:7a:4a:c8:e2:6a:9b:91:bd:44:79:1a:61:9b:fa:c7:c8:
         5f:b0:c2:16:75:cc:3d:5e:61:73:17:3a:22:c9:1b:dc:c7:76:
         fb:1a:8f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:54:52 2025 by rpki-client