Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File:                     W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier:          iNCdgOCUWK28hSL7ZVc7LhAYpBem+HEs+ik3go0Hcws=
Subject key identifier:   AA:C0:58:F6:35:1F:3F:54:E4:02:36:21:5D:80:10:C5:12:8A:65:63
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer:       /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial:       01975121EC0EB93EAF2E764E36C56DD8CD4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number:          1587
Signing time:             Sun 08 Jun 2025 20:01:06 +0000
Manifest this update:     Sun 08 Jun 2025 20:01:06 +0000
Manifest next update:     Mon 09 Jun 2025 20:01:06 +0000
Files and hashes:         1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: VlHcyObuIbWldESHAkIKIqVIRqFcPQld/aShVBpZA0Q=)
                          2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:ec:0e:b9:3e:af:2e:76:4e:36:c5:6d:d8:cd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
        Validity
            Not Before: Jun  8 20:01:06 2025 GMT
            Not After : Jun  9 20:01:06 2025 GMT
        Subject: CN=aac058f6351f3f54e40236215d8010c5128a6563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:3b:c4:56:cc:f0:d9:59:3a:fc:68:3f:af:
                    41:4f:92:30:d0:1d:5b:95:ab:e2:11:33:03:8f:68:
                    ad:80:33:25:70:3d:06:73:f7:f3:76:90:83:09:08:
                    16:6d:1d:37:01:fe:ae:58:79:36:cb:4d:e4:bb:21:
                    b9:ed:a7:09:73:07:e9:78:54:f1:bc:d3:9c:38:23:
                    56:f8:a6:4f:06:ec:75:4f:20:5b:e2:59:e0:ee:e6:
                    d2:65:99:a5:e3:74:2f:ee:bd:1f:da:c9:7e:6a:dc:
                    45:2a:63:ab:fb:86:c9:f6:d7:3e:0c:fe:74:b6:4d:
                    d6:25:c6:88:fe:50:53:ba:e9:50:24:ae:4f:43:a3:
                    88:4f:6b:91:49:fb:52:ac:97:ea:b2:8b:b1:20:c4:
                    28:c9:53:b8:14:51:09:05:2c:67:5b:b8:f2:6b:72:
                    0c:28:3c:6a:9b:bf:81:42:c3:b4:1c:f3:db:12:86:
                    51:66:b5:a5:66:c7:23:64:dd:41:6c:44:52:3f:80:
                    ec:5d:be:45:db:9e:75:a0:19:0c:c5:4c:56:e4:b2:
                    62:5b:11:4a:45:0e:6f:32:90:4a:7b:bf:9e:2a:23:
                    b4:73:c8:40:82:b3:87:8c:62:9f:74:ed:eb:d8:ac:
                    d2:15:90:50:c8:29:83:ac:91:03:19:62:ee:fd:d9:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C0:58:F6:35:1F:3F:54:E4:02:36:21:5D:80:10:C5:12:8A:65:63
            X509v3 Authority Key Identifier:
                keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:18:d2:7f:e5:84:c3:00:a5:3e:97:02:36:e6:df:64:bf:be:
         72:19:32:5f:f7:a6:6f:84:8e:64:60:e4:9f:f5:2d:76:3a:a4:
         6a:e9:06:52:75:64:9b:67:66:d4:6f:43:68:eb:0c:6f:3e:38:
         d9:98:53:5e:22:be:0b:6e:86:df:e9:c0:c3:7d:2a:70:d6:5f:
         29:c9:97:65:99:16:02:6f:06:87:2d:f4:13:1e:16:35:43:aa:
         60:72:64:b9:a9:f2:a7:53:3b:11:ee:5b:60:02:68:ca:8c:66:
         13:e6:78:fd:4d:b6:24:64:c8:2f:32:6a:d0:f5:81:bb:17:13:
         35:d6:0c:9b:90:0f:d1:a9:38:b2:9c:3b:a1:42:53:b0:2f:df:
         7c:78:16:8c:8d:e7:51:88:b3:9d:18:04:4a:54:1e:e8:5c:e0:
         61:59:05:4c:bb:06:a8:c5:99:8a:05:69:19:9c:4d:39:98:5f:
         b1:86:6e:e1:17:3f:25:82:29:20:b2:6b:2d:36:02:02:a7:f7:
         d4:6b:ff:fc:eb:c3:07:e9:6c:35:07:a0:71:50:c4:29:39:c2:
         11:1f:55:d2:87:f1:90:0a:09:d6:1e:7a:92:bc:db:19:65:a8:
         43:eb:8a:ee:f7:be:4c:dc:d7:88:75:dd:3d:7b:49:df:38:1e:
         47:e9:b1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:47:36 2025 by rpki-client