Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File:                     W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier:          CD/F2GBTmL1yUSTx76DYdcUaXntz3QNFKnv6T1IocYA=
Subject key identifier:   8B:E2:5F:00:93:4E:5D:BE:C4:29:B2:85:BC:8A:F0:D6:75:1F:57:46
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer:       /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial:       01974779BA3A82483D6D3E0B15312E225010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number:          0526
Signing time:             Fri 06 Jun 2025 23:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:49 +0000
Files and hashes:         1: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: 57++dJb9n4qa7H9A2YjMXjvySLqBjJxo/If+CHykQ64=)
                          2: aC3k6Pc-VbYaZAExCYMf-r0FJik.roa (hash: sjHut+jtNlmiU2BIEntfi+uVsFkRaMGa8qqarc0jF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:ba:3a:82:48:3d:6d:3e:0b:15:31:2e:22:50:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
        Validity
            Not Before: Jun  6 23:00:49 2025 GMT
            Not After : Jun  7 23:00:49 2025 GMT
        Subject: CN=8be25f00934e5dbec429b285bc8af0d6751f5746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:e8:73:4a:5f:30:bd:e3:1f:f8:4b:49:8e:
                    a6:7d:e3:15:41:80:0e:41:46:f9:81:d6:38:41:db:
                    d3:0c:ea:8d:59:04:84:1a:60:16:24:f6:d1:65:96:
                    79:2d:87:e9:23:af:7e:0a:2d:47:02:d3:0b:2e:30:
                    1d:11:04:34:30:86:59:ff:f8:33:07:51:b4:ad:aa:
                    08:ab:cd:f7:42:ba:c7:45:cc:55:d7:77:a6:20:5d:
                    85:be:ab:ae:61:96:0f:34:4b:df:9a:26:a1:61:3e:
                    af:67:e1:69:8e:37:77:b9:84:fb:75:d8:e7:39:98:
                    a8:80:46:27:df:f0:66:a6:c2:21:ab:e3:dd:99:15:
                    8f:28:7c:21:2c:9a:8b:59:af:45:4c:1c:44:c1:65:
                    dc:d2:16:7a:24:f5:82:17:61:11:4f:d3:04:c4:a2:
                    8d:fc:2a:ee:15:48:6c:be:ed:4b:fa:5f:c6:12:12:
                    67:4e:b4:c9:ab:ff:6a:77:79:76:4c:02:b1:92:d6:
                    ce:34:16:ea:df:45:8f:64:bb:bc:82:60:1b:2a:1b:
                    7f:ce:27:af:0f:db:ed:3c:01:34:5c:95:5a:b3:7e:
                    0d:7b:1e:8d:e9:67:fc:dd:43:d2:5e:6d:10:9b:04:
                    6e:6e:31:bb:3f:92:89:b6:6d:a2:44:87:9e:84:11:
                    2e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E2:5F:00:93:4E:5D:BE:C4:29:B2:85:BC:8A:F0:D6:75:1F:57:46
            X509v3 Authority Key Identifier:
                keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:07:a8:b7:e9:3c:ad:64:93:a5:1b:09:24:58:8f:2b:f3:e6:
         e7:9c:ae:4d:df:7f:1d:88:26:b4:1c:62:9d:c3:f4:8d:01:18:
         14:4a:bc:aa:83:53:f7:65:d3:7f:bb:ae:ae:09:c9:18:86:f0:
         a0:2d:d2:2c:df:c1:6b:c1:90:e2:f7:1d:b7:7e:b1:d6:fb:11:
         12:cd:bd:77:53:5a:3d:35:ff:af:23:db:a1:d6:08:b4:c3:f8:
         35:96:4d:b6:33:b7:11:c7:7b:c7:b9:a0:5e:9e:a8:27:2b:8b:
         3a:4c:dc:3d:9f:f4:99:92:ed:2c:f2:dd:cd:10:70:d7:22:a6:
         12:02:0b:ba:d1:f3:86:9a:66:bd:c4:45:c9:56:74:a1:c7:32:
         4d:3c:d9:aa:32:dc:2b:08:c2:1f:7b:26:fc:01:8d:d6:6c:27:
         ba:e3:41:bd:0f:16:dc:55:85:9f:11:e9:42:41:54:02:d9:46:
         ae:37:26:df:d4:5d:4e:ec:f4:d7:c1:6b:92:3a:93:ca:82:60:
         02:ef:a1:ca:da:ec:f8:74:5d:ed:41:90:47:b7:90:38:d3:1c:
         7f:28:eb:68:db:d5:5a:05:a7:2f:e1:36:0a:51:a1:3b:df:d8:
         95:90:55:c8:19:ec:6d:5d:32:b2:71:34:21:5c:bd:0a:3a:de:
         9a:39:d0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:19 2025 by rpki-client