Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File:                     WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier:          PXSrgFygHSzIdvQShsHCybnLP7aRSydaDEKAMWJiAhE=
Subject key identifier:   E3:CD:24:3F:10:17:51:BB:83:95:FB:4D:60:C2:81:86:1F:C9:7B:CE
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer:       /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial:       01974DE9D9ACFA0A1DCCFCBFB675A3729AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number:          14E8
Signing time:             Sun 08 Jun 2025 05:01:00 +0000
Manifest this update:     Sun 08 Jun 2025 05:01:00 +0000
Manifest next update:     Mon 09 Jun 2025 05:01:00 +0000
Files and hashes:         1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: loifXdlv2Qv08r7wsCDvOzjsrW3TBM5vNaAhnu4s/b4=)
                          2: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:d9:ac:fa:0a:1d:cc:fc:bf:b6:75:a3:72:9a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
        Validity
            Not Before: Jun  8 05:01:00 2025 GMT
            Not After : Jun  9 05:01:00 2025 GMT
        Subject: CN=e3cd243f101751bb8395fb4d60c281861fc97bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:ed:33:22:96:c6:ab:cf:64:8d:2a:12:49:
                    f0:4d:45:f2:2f:f7:e9:81:f1:36:bd:57:98:83:78:
                    d1:65:d4:be:73:dc:c8:e5:60:3c:9c:ee:e7:8d:7f:
                    0d:a0:42:8e:56:cf:b8:6a:36:5c:d5:da:02:38:e2:
                    49:28:41:e4:07:7e:d2:91:90:d8:7d:1e:03:56:b7:
                    21:20:c4:12:54:56:bb:b1:05:67:09:4e:01:07:69:
                    b9:10:41:3d:cc:72:48:e5:79:77:7a:98:a8:be:72:
                    2d:04:d5:45:ed:da:6c:cf:8c:a2:d6:47:30:24:af:
                    db:06:67:c9:de:94:9f:bf:28:6d:a1:61:32:56:5d:
                    9d:3c:8c:ea:7e:c6:cc:83:c3:0d:71:03:60:06:92:
                    68:6f:aa:78:b1:69:47:c4:18:7b:a9:0c:d0:31:d0:
                    7c:81:42:d2:b5:2d:fc:06:a4:85:76:c7:60:31:52:
                    ad:8f:e3:4c:d7:de:a0:75:94:48:8b:50:77:54:c2:
                    7d:8c:2e:b5:0d:74:65:18:0a:bb:d0:dd:f8:a8:21:
                    54:60:50:b4:2d:ee:a5:b5:78:ca:e0:ef:26:ad:8d:
                    79:f4:49:06:1a:bd:bf:9d:d4:40:0f:29:64:99:75:
                    f7:c0:dc:88:a5:fb:1a:69:e1:65:58:13:b7:b5:b8:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CD:24:3F:10:17:51:BB:83:95:FB:4D:60:C2:81:86:1F:C9:7B:CE
            X509v3 Authority Key Identifier:
                keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a5:4d:2f:07:1c:b6:d1:67:0d:00:e4:ed:07:dd:38:74:97:
         67:c7:b0:88:2c:76:ee:92:49:9b:5a:c2:13:b6:71:59:f0:c1:
         f8:50:df:28:19:ae:72:e4:0e:fb:eb:10:e5:23:bf:2f:16:57:
         ad:6d:b1:f8:b2:7f:0f:04:64:dc:c8:50:0f:91:32:92:55:7f:
         00:a8:a7:2a:47:c5:c4:be:48:00:d7:37:b6:ac:16:f8:0a:a0:
         74:5b:09:08:2c:39:0b:99:3d:aa:00:64:f0:22:c6:a1:e1:fb:
         c3:3c:2b:f2:5f:3c:85:56:5e:2a:45:98:52:b8:28:2a:ef:5e:
         35:5c:19:3d:2e:a8:20:72:65:b8:3c:b4:65:5e:72:40:8f:80:
         03:d6:81:56:08:bf:6b:78:7b:97:15:c1:cd:43:3f:24:2d:7f:
         f7:36:7d:a6:e5:1c:d7:08:78:59:ad:f7:ae:c8:9a:a2:de:ef:
         77:63:90:26:46:c3:b3:f3:ce:01:5d:27:99:53:60:bb:2c:05:
         17:99:57:4b:a1:12:9c:d1:3c:ef:b2:25:51:42:7b:e8:83:0b:
         27:30:cb:56:c8:45:b6:48:98:ff:a5:bc:76:53:35:e9:5a:90:
         4e:70:c9:20:8a:2d:df:15:9b:6d:bf:28:9a:0f:15:82:4b:f2:
         08:7d:2b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:34 2025 by rpki-client