Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
File:                     W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json)
Hash identifier:          QAeCbhGKqIfiN8ui4+Gh0Hr2VvwJhDCTUX3Mgqfqqvw=
Subject key identifier:   44:A4:EE:C4:EB:B4:76:E3:0B:DA:B9:86:35:7F:C4:91:EA:95:2C:33
Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Certificate issuer:       /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Certificate serial:       0197469EA3715E47892E8AC9A96E6D0F63AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
Manifest number:          0124
Signing time:             Fri 06 Jun 2025 19:01:31 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:31 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:31 +0000
Files and hashes:         1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: 3YiDLm6rOro2DV3XEP78733mpG5DwZlJfxcZtWDkXoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:a3:71:5e:47:89:2e:8a:c9:a9:6e:6d:0f:63:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
        Validity
            Not Before: Jun  6 19:01:31 2025 GMT
            Not After : Jun  7 19:01:31 2025 GMT
        Subject: CN=44a4eec4ebb476e30bdab986357fc491ea952c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:c8:69:d7:95:19:d2:47:01:c7:cc:75:d4:
                    e6:80:cd:91:47:d1:af:d0:3d:d7:a7:38:d6:9a:33:
                    9f:30:3f:4c:86:1c:c3:e9:71:23:e8:d1:60:15:a6:
                    dc:64:c9:14:9d:97:f7:30:04:07:be:bb:4c:67:ae:
                    f9:9e:f2:68:53:e7:02:c2:04:35:f9:51:27:2e:22:
                    46:f0:2d:53:92:da:13:69:cc:11:58:13:10:05:44:
                    53:b2:c3:92:fb:8d:81:1c:3d:fe:51:4e:a5:dc:33:
                    00:99:d6:25:16:7c:7b:14:89:35:e7:46:5a:1e:57:
                    37:00:e6:8c:46:ad:1b:aa:14:fe:2f:a5:b4:4b:c4:
                    90:69:33:c7:0a:21:1b:7c:62:96:bb:c6:f6:8c:5e:
                    ac:b4:ee:c0:b6:0b:4a:2f:cb:40:e8:dd:83:b6:74:
                    1f:32:0a:81:0c:a3:52:d4:7b:70:0f:28:d6:20:24:
                    dc:2f:38:33:d2:98:8b:c7:da:67:fa:0c:24:f4:de:
                    be:99:7c:54:93:4b:2e:0e:0f:13:c6:4d:c1:13:ce:
                    33:0e:09:0c:04:5f:97:9a:e9:9b:57:b0:fb:91:d3:
                    25:56:a0:12:e6:38:67:a5:04:86:62:6d:72:4a:60:
                    08:fc:1c:48:b6:12:e3:c0:b6:3b:40:b2:7e:f2:91:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A4:EE:C4:EB:B4:76:E3:0B:DA:B9:86:35:7F:C4:91:EA:95:2C:33
            X509v3 Authority Key Identifier:
                keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ff:93:93:0e:7b:ad:38:7d:5e:b8:0a:a5:9c:50:60:fd:58:
         a5:c3:32:88:a1:15:3c:48:98:97:2a:a3:e8:f5:25:7f:43:2d:
         e8:f1:d5:6f:46:38:df:97:3a:cd:d3:98:a1:1f:fe:ee:2e:d7:
         a9:87:31:78:a4:35:e6:2a:2e:67:b5:e7:d2:6c:a6:5a:1e:c7:
         ca:46:0b:d7:c5:f8:a1:02:80:d7:9a:8a:73:c2:be:cc:84:81:
         61:cd:ca:db:d0:f8:e9:80:76:f7:08:1e:de:83:ce:62:9a:70:
         bc:ca:86:22:3e:e4:b2:56:05:9f:f8:7d:40:7b:d6:ce:94:24:
         b7:4e:54:50:24:99:28:c5:75:b1:82:c2:e5:18:00:c0:df:53:
         eb:7e:f2:95:3d:00:8a:75:2e:fc:22:43:49:7b:36:a4:f9:b6:
         1d:71:a0:50:41:3d:a6:73:60:2e:8d:2a:a1:a9:2c:98:e0:c1:
         a2:07:ff:2d:e1:44:4a:95:ed:0e:52:c1:53:30:f0:14:b4:80:
         ae:82:f1:a3:99:79:cd:12:85:bd:3e:0f:ef:6b:12:55:db:28:
         f1:12:5c:1c:94:95:36:65:f6:9c:a0:02:45:70:da:35:af:9d:
         33:e7:5e:3f:bb:0b:a6:e5:ec:b3:f2:06:f2:d4:52:3c:df:b2:
         39:fb:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:24 2025 by rpki-client