Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File:                     WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier:          G7rhfp2paMxsdgIaxf1y28oo6Fkhpug1S769224Lpi0=
Subject key identifier:   5D:77:80:A9:D7:4C:23:90:66:8E:49:4D:86:60:53:FB:B8:5D:C9:69
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer:       /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial:       01974742DA5F36843984ED976CE89B6FDEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number:          09F3
Signing time:             Fri 06 Jun 2025 22:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:52 +0000
Files and hashes:         1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: Z3cSMvMDxEoG/ROq67MJ8oc0Juil+0WJmQ298K+eCes=)
                          2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:da:5f:36:84:39:84:ed:97:6c:e8:9b:6f:de:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
        Validity
            Not Before: Jun  6 22:00:52 2025 GMT
            Not After : Jun  7 22:00:52 2025 GMT
        Subject: CN=5d7780a9d74c2390668e494d866053fbb85dc969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:41:66:a1:cb:f0:9f:d0:e2:fd:89:bd:dd:
                    6f:03:92:32:60:d8:87:ac:fe:9e:ed:3b:a6:81:96:
                    05:85:08:fd:e5:40:4a:26:df:a2:f2:36:a4:42:d6:
                    d8:2e:ab:40:5f:c6:b1:a2:81:16:62:8f:3f:18:52:
                    ba:d2:54:dd:16:83:2f:e3:26:54:94:0a:ca:53:18:
                    9b:21:1d:c7:36:e6:e6:bb:a9:f9:56:52:84:2c:d8:
                    02:18:44:7e:5e:68:7d:a0:58:89:3d:72:58:f7:ae:
                    88:df:a2:0b:6b:44:c7:b0:78:cd:c7:cb:d5:bc:9e:
                    80:08:b2:5a:53:29:2d:87:35:a3:80:66:a9:88:c5:
                    ea:20:5f:75:24:e4:c8:d4:15:6c:17:36:f9:6c:5e:
                    25:58:43:05:6a:c2:1a:87:a2:d7:f0:b0:ae:7b:a1:
                    a5:e5:3b:eb:c3:b9:9a:bf:18:b4:8e:43:ce:6a:49:
                    2e:41:85:57:60:46:fb:d2:7a:41:ab:5f:02:45:3d:
                    88:24:f0:54:d1:6b:6a:a6:7b:db:40:9a:42:44:cf:
                    b8:af:9f:0f:d0:14:ed:e5:5e:cd:40:b0:86:95:47:
                    c6:98:15:05:09:fb:46:4a:eb:06:cd:5e:a6:af:78:
                    d2:a6:d9:0e:19:9d:3f:c9:3a:29:3b:7e:60:2c:f0:
                    e0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:80:A9:D7:4C:23:90:66:8E:49:4D:86:60:53:FB:B8:5D:C9:69
            X509v3 Authority Key Identifier:
                keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:11:7a:6f:0e:ad:c1:b4:a2:57:e9:f8:52:21:3e:23:8e:1c:
         4e:3c:05:ea:55:e9:f4:c8:ef:d7:a0:1b:af:4f:1b:15:fe:57:
         a6:46:e7:61:a9:53:ac:1d:0a:f9:c8:33:83:97:64:8c:d6:cf:
         c0:88:b9:58:7e:af:7c:29:76:bb:98:f8:eb:d4:fd:fd:30:e6:
         dd:fc:d7:33:f2:68:0f:64:16:1e:73:6a:74:7b:f0:e4:6c:33:
         d1:54:40:8f:51:aa:0b:f9:bf:16:86:29:2c:37:a9:91:53:2e:
         f5:1e:4e:55:32:19:94:a3:30:70:1e:0d:0e:b6:3c:ce:4d:a0:
         59:1d:67:f8:c3:c7:4c:ff:7f:ef:b2:af:4e:cd:6e:b4:6d:fd:
         64:1d:63:c3:76:9d:05:36:f3:cb:1a:23:c8:5c:5e:41:78:9a:
         2c:2b:d0:f7:7e:f2:8c:59:66:67:51:96:2d:31:c2:5d:04:80:
         ae:ab:43:e0:f1:3c:15:ba:d7:5e:6a:5c:4b:83:4d:99:f5:48:
         98:cf:fb:6e:c3:e8:2d:31:52:f0:64:54:59:dc:a3:02:6d:2d:
         67:3b:81:4a:61:ba:cb:06:d8:25:6c:c8:5d:05:a6:76:68:1c:
         c9:67:8a:80:0e:ca:88:a7:60:2d:39:8f:74:54:55:40:21:21:
         76:f8:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:32 2025 by rpki-client