Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File:                     W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier:          jCNCY/Pt/uNaecu577hgU83xJ+Qatf+Qf0TdOd5332I=
Subject key identifier:   28:95:54:48:D4:CA:4C:6C:7E:1C:54:EF:89:82:95:F9:F6:CB:00:02
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer:       /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial:       01974742EC52FD0DDF6559F0AC8AFB2EACAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number:          0BC2
Signing time:             Fri 06 Jun 2025 22:00:57 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:57 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:57 +0000
Files and hashes:         1: DkAig3sreL5BEr4m7B4017Dqunc.roa (hash: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=)
                          2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: XWXzk2r8OBZcqP/9ovLUp5ysvPPj5om9LqG3/iyvQss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:ec:52:fd:0d:df:65:59:f0:ac:8a:fb:2e:ac:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
        Validity
            Not Before: Jun  6 22:00:57 2025 GMT
            Not After : Jun  7 22:00:57 2025 GMT
        Subject: CN=28955448d4ca4c6c7e1c54ef898295f9f6cb0002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:ee:90:ce:2f:a8:7a:e5:56:f5:a0:a5:02:
                    ca:28:8e:bb:66:78:de:15:81:aa:63:2a:0b:ef:72:
                    83:f4:0e:a0:37:a7:2e:f3:e6:71:a4:e0:de:54:82:
                    64:cf:2c:6c:0c:ee:b7:73:ac:76:5f:37:ae:20:01:
                    ba:5e:b8:18:e2:8f:1a:91:91:1e:15:32:fb:90:ca:
                    c2:a1:7f:30:89:70:2e:44:31:fa:2f:f4:f7:94:6e:
                    22:35:d2:20:b7:c8:0d:73:f8:1d:12:ed:6a:b7:b3:
                    2a:85:fb:ff:99:7e:d3:e0:d0:5b:32:23:0a:ae:b0:
                    5c:d1:44:68:f0:1a:9f:c5:b6:ec:c9:34:af:9b:6d:
                    15:b9:c6:04:00:43:3f:f9:ad:ef:8b:0b:87:a2:e0:
                    5b:55:31:c3:a5:d0:7c:99:12:2a:9a:a5:bc:06:1e:
                    24:d4:b2:9b:40:bc:0a:57:c3:81:07:85:0e:4d:2a:
                    cc:0f:27:a5:81:65:5f:53:3b:e8:62:97:fa:26:37:
                    d7:10:ce:fa:b5:91:0a:0c:8e:10:a6:8e:91:f1:15:
                    84:4b:f8:29:30:21:1c:01:48:67:80:b2:1a:df:65:
                    4a:1c:5d:17:1c:6e:c0:62:9a:22:95:5c:77:aa:87:
                    73:5d:40:63:7a:15:b6:a9:eb:e7:87:cd:c8:09:e0:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:95:54:48:D4:CA:4C:6C:7E:1C:54:EF:89:82:95:F9:F6:CB:00:02
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:4b:4b:dc:1c:ef:92:ce:3f:60:ef:bf:8f:c4:9a:49:e4:
         91:82:f2:87:b1:34:9e:a5:f1:df:92:2e:12:75:6c:0d:d3:c5:
         3f:71:fb:5c:f6:76:6e:7c:88:b4:b0:27:df:d0:4e:f9:4b:39:
         9a:27:5f:e0:fc:a5:ff:a0:b5:81:b5:8c:3e:38:ad:21:aa:15:
         34:5c:00:0f:01:04:f1:f1:25:ef:d4:35:0c:6f:43:41:c0:ea:
         8e:f5:28:de:83:94:c9:b7:a8:97:47:1e:df:a1:6c:d5:55:31:
         91:46:3c:28:37:9f:93:31:24:16:cd:67:1a:60:31:ed:25:5e:
         05:a4:bf:e8:a2:ee:3b:71:20:a0:d2:ae:5b:1c:67:a6:ab:aa:
         86:68:fc:e5:cc:25:d4:1d:ef:83:f0:c4:fd:ea:ef:8a:cf:29:
         b1:ae:c6:f2:d4:c5:67:c6:ec:4e:20:c9:50:03:6a:46:5c:4a:
         61:2a:9c:f3:76:69:5c:8f:2f:45:42:aa:64:44:e9:ac:51:64:
         c4:93:87:d9:e4:87:47:8e:6d:a8:f1:69:57:c3:1c:9c:52:25:
         9d:ac:f4:ab:98:0f:9c:b9:fe:6c:86:cc:39:83:54:5f:02:4e:
         3b:49:8d:69:c1:73:6e:8b:7c:65:15:1d:bb:b3:8d:49:b4:f6:
         30:be:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:44:30 2025 by rpki-client