Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File:                     Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier:          I26EX5HKjVCjH2vrFqCOfOSSsLekBgAHESuBuRcUZdQ=
Subject key identifier:   A9:54:6D:3A:89:D4:AF:3F:0C:76:8D:15:89:81:9E:94:64:84:88:52
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer:       /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial:       01963FFA830C81833EA99423E1D4190F77A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number:          0734
Signing time:             Wed 16 Apr 2025 19:01:44 +0000
Manifest this update:     Wed 16 Apr 2025 19:01:44 +0000
Manifest next update:     Thu 17 Apr 2025 19:01:44 +0000
Files and hashes:         1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
                          2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: L7061M9J0yqNx5df8GVNWT0VMfQoDhgn731DsEYOdO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:fa:83:0c:81:83:3e:a9:94:23:e1:d4:19:0f:77:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
        Validity
            Not Before: Apr 16 19:01:44 2025 GMT
            Not After : Apr 17 19:01:44 2025 GMT
        Subject: CN=a9546d3a89d4af3f0c768d1589819e9464848852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:43:1b:99:2e:a6:2b:0a:3e:be:25:df:7e:13:
                    a5:4f:a3:06:dd:a8:ca:18:51:27:0e:ec:c9:82:1b:
                    1b:17:13:1a:f1:cd:06:b3:b0:c2:a0:35:f4:ea:1c:
                    f8:17:d2:6c:92:62:63:64:d5:22:02:c3:6f:fd:3c:
                    1d:c3:c7:61:01:0f:9c:3a:63:82:6f:18:a3:ed:7c:
                    08:a6:28:46:fb:75:ce:55:a1:a6:12:95:9a:46:e3:
                    a4:f1:98:d7:65:80:20:ea:70:eb:79:9d:73:9d:43:
                    e5:af:5c:18:d2:f2:d0:aa:f4:a2:6e:04:db:c9:0a:
                    8d:f7:e3:a9:0a:eb:c1:cb:20:b5:ea:c7:42:43:14:
                    ac:7a:91:17:57:e2:9b:4f:c2:9b:ff:75:43:1b:91:
                    c1:c5:97:d1:4d:49:89:73:65:80:3d:d5:ea:cf:e9:
                    58:f4:bc:a9:7e:c7:d3:13:60:7f:c8:e1:db:fb:88:
                    5b:7a:c7:8a:55:3d:e8:a0:0e:1e:d4:35:5c:73:58:
                    70:e8:01:cf:1f:49:85:a1:a3:6c:07:7b:fa:35:10:
                    d7:f2:f2:e4:b5:d9:86:b5:81:85:cb:49:5a:16:44:
                    54:13:1d:51:31:86:dc:3b:f4:d0:40:b8:f2:f3:46:
                    7c:4a:ed:4a:4f:fe:c1:09:51:ff:89:f5:81:71:0b:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:54:6D:3A:89:D4:AF:3F:0C:76:8D:15:89:81:9E:94:64:84:88:52
            X509v3 Authority Key Identifier:
                keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:9a:58:83:ff:c0:2c:39:f4:c2:11:38:c2:0c:88:f4:a4:
         a4:2b:b4:44:00:04:06:61:c4:69:3a:44:b4:ed:2d:ff:67:d9:
         bc:67:82:00:f8:99:7a:9d:21:1d:7f:31:4e:89:a2:94:4e:58:
         08:c5:34:4f:a7:13:2e:f1:08:06:f0:a6:f6:52:16:c4:1e:72:
         37:2f:5c:d5:e8:37:2d:60:0e:aa:ce:93:b3:09:b6:3a:e0:58:
         e5:21:7a:93:ad:f8:83:6e:51:ad:aa:fb:bd:c2:db:b2:b3:28:
         68:34:5f:21:c4:b9:32:19:2f:11:e3:ab:02:7e:d5:53:e0:3d:
         7b:dc:fa:29:4d:00:21:77:45:17:c6:71:ea:74:f1:9d:80:21:
         95:9a:89:35:22:ca:b4:7c:94:84:65:bd:7c:1f:44:dd:70:5c:
         4c:c5:97:e5:f3:87:45:c8:05:6d:56:ae:16:85:ac:c8:56:f8:
         9a:ab:cd:a2:8a:fb:d2:81:4f:a5:4f:1d:08:ec:37:59:9e:ca:
         c3:88:7a:b6:4b:5a:b7:41:c7:bd:83:e9:80:1d:52:bb:53:7e:
         81:b1:86:af:d9:fb:c6:ae:c1:ae:ef:17:c3:f5:a5:11:86:c8:
         76:15:c0:76:88:c3:2b:bd:21:dd:21:2a:0d:be:6e:7e:f7:6c:
         dd:e8:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:06:27 2025 by rpki-client