Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File:                     Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier:          8dS+l27oq6KdWW88TqtcmrVbFcJvRQLVL1UR1hY0AVI=
Subject key identifier:   17:5F:53:30:1B:F1:C3:8E:5D:20:BF:F1:49:14:8F:5C:A6:0B:59:6D
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer:       /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial:       0197816921D47A480E2BDEA639758359BD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number:          156E
Signing time:             Wed 18 Jun 2025 05:00:39 +0000
Manifest this update:     Wed 18 Jun 2025 05:00:39 +0000
Manifest next update:     Thu 19 Jun 2025 05:00:39 +0000
Files and hashes:         1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
                          2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: WfM2AHViZG/4H4sSiZpkKA4XrcKH+JnAjMH712Nr7Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:69:21:d4:7a:48:0e:2b:de:a6:39:75:83:59:bd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aae19678aa37525512229a94e7890147183273c
        Validity
            Not Before: Jun 18 05:00:39 2025 GMT
            Not After : Jun 19 05:00:39 2025 GMT
        Subject: CN=175f53301bf1c38e5d20bff149148f5ca60b596d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:c0:19:e4:ac:34:79:1d:c9:b7:6b:9f:bd:
                    08:44:07:5c:b1:73:3c:2f:e1:6d:dd:8a:a3:65:fe:
                    d6:87:69:23:6e:66:c2:86:e8:29:8d:43:8f:cf:32:
                    09:d6:8b:13:f2:bf:9d:20:bb:3c:07:6a:e9:c0:d4:
                    76:b5:ea:dd:a2:3a:26:72:47:e1:8e:43:46:ee:94:
                    dd:0d:27:69:71:3c:b7:72:a4:e6:b6:e3:30:9c:80:
                    f2:a3:90:9b:4b:c2:46:29:c7:c5:75:35:3d:33:ba:
                    78:b8:95:b0:34:98:94:c2:4a:01:4c:0c:73:27:0b:
                    a1:96:73:15:b1:fc:b1:9a:30:4a:c0:f7:a8:2b:8c:
                    11:95:30:ca:06:a4:a6:ed:66:4f:cb:d9:2d:ea:38:
                    80:b1:35:b7:6e:86:12:71:c1:51:b0:d2:ae:57:b7:
                    b6:9a:f7:3d:0b:bb:f5:e8:2f:57:00:ea:eb:ce:fe:
                    cc:50:28:54:f4:6d:1c:9f:00:43:3e:a8:21:87:ef:
                    56:70:a7:fa:b4:6c:c9:b5:49:1b:61:03:91:2b:df:
                    9e:f6:73:99:a7:85:2f:35:d9:81:89:28:a3:6b:1d:
                    67:a8:48:7b:20:4a:de:bc:96:88:e0:8d:c6:1b:db:
                    08:9d:64:ae:12:c3:50:88:55:19:ab:6b:a4:39:76:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5F:53:30:1B:F1:C3:8E:5D:20:BF:F1:49:14:8F:5C:A6:0B:59:6D
            X509v3 Authority Key Identifier:
                keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:0f:80:9d:8c:94:aa:c6:d4:2f:42:e1:8e:c2:68:7e:0c:
         bb:c2:be:29:de:05:9e:48:cf:4a:1a:a4:3c:f4:01:13:1a:ab:
         8e:14:b1:bf:0e:83:33:17:2d:ef:59:85:d1:79:88:3f:7f:0b:
         65:9d:fb:93:c2:04:0f:e7:48:6c:d0:c3:ec:f2:c6:24:0a:84:
         b2:32:c7:33:3d:69:ba:b0:c1:a9:1c:ad:df:b5:03:9a:85:3b:
         a7:ad:96:08:62:78:70:81:db:e4:ec:5b:ee:97:ca:19:f6:1a:
         44:71:a4:b7:08:ce:ef:65:fa:71:c0:94:0e:c1:e2:ba:9a:a3:
         a6:2a:8a:23:b0:f6:d7:52:f6:09:2b:05:2c:1d:97:2f:c9:3b:
         e8:c9:cc:d4:30:af:f0:15:60:cf:9a:37:0b:ea:9d:c7:b0:71:
         b5:0c:f5:bd:4a:69:d4:d0:e1:f3:c4:89:28:4b:44:3b:49:42:
         91:24:f0:cc:f4:b5:71:57:13:39:d2:f8:f7:01:cb:05:87:a2:
         d8:4d:cc:23:79:b5:aa:f8:cf:3e:66:5b:64:22:53:50:04:09:
         b1:ac:e7:99:73:98:8d:3a:86:8c:e6:03:3e:f6:36:15:d8:e0:
         d8:fb:6f:19:06:04:db:a0:68:e3:73:c7:ad:b6:e7:6d:64:2a:
         2a:78:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:49:56 2025 by rpki-client