Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
File:                     W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft (raw, json)
Hash identifier:          HiPNkk/6jrlC/96bVDZ1r6/Bvq1WEVG5r00aMTL1+08=
Subject key identifier:   BF:E8:B5:CA:40:B9:B2:D6:D8:FF:A2:07:48:B8:34:97:45:D8:55:75
Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
Certificate issuer:       /CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Certificate serial:       01977A8B26532F29128E2C26AE44B8778A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
Manifest number:          1536
Signing time:             Mon 16 Jun 2025 21:00:28 +0000
Manifest this update:     Mon 16 Jun 2025 21:00:28 +0000
Manifest next update:     Tue 17 Jun 2025 21:00:28 +0000
Files and hashes:         1: Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa (hash: PzV+Hvm8wXtJUXwK3RxNsLo6F6xHiBk0IePHLXsbPqk=)
                          2: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl (hash: lPiV9Zc81q6XuGEleGMkIZoPopb77FOkBVRRt+5pTwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:8b:26:53:2f:29:12:8e:2c:26:ae:44:b8:77:8a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6
        Validity
            Not Before: Jun 16 21:00:28 2025 GMT
            Not After : Jun 17 21:00:28 2025 GMT
        Subject: CN=bfe8b5ca40b9b2d6d8ffa20748b8349745d85575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:62:f6:9a:ec:1d:8e:79:79:c8:9f:4e:41:
                    1f:cb:dd:69:fc:20:35:c8:05:28:e0:83:46:e3:04:
                    3a:aa:6f:97:c1:fc:d9:7a:a1:d6:cc:73:45:61:71:
                    89:b1:77:e9:a1:f2:44:7a:f2:b1:e7:cb:2b:af:6f:
                    e1:80:59:08:2f:2e:3a:19:63:83:ea:ee:5f:b7:aa:
                    0d:1e:7f:4d:b5:e9:fe:43:21:ad:73:c1:2b:e9:1a:
                    67:5f:a6:08:83:54:6b:95:3e:ff:49:ca:89:57:8e:
                    19:34:eb:6f:ae:cf:44:45:e5:73:5c:52:55:e1:c7:
                    88:55:f2:ea:64:d2:07:85:4f:70:7e:75:06:10:8f:
                    bd:d1:99:a3:d5:3c:f0:d5:44:61:1f:d9:6c:37:8d:
                    ea:be:03:e9:33:c3:6a:ac:80:45:f9:ba:5d:de:09:
                    fe:e0:27:9b:5d:fd:6b:4f:0d:56:3c:48:d7:8e:62:
                    41:77:e5:6f:75:c9:04:fe:d0:f4:b5:e5:e3:bd:d6:
                    15:17:c9:39:4f:5c:aa:64:cd:9d:c5:2c:5d:a6:11:
                    c9:12:fe:45:8b:dd:91:fa:fa:ee:90:1e:1b:0b:32:
                    b8:15:31:36:33:59:79:1d:bd:02:fb:b0:87:85:db:
                    8d:62:79:74:04:14:a2:24:34:84:e6:53:53:66:d4:
                    d8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E8:B5:CA:40:B9:B2:D6:D8:FF:A2:07:48:B8:34:97:45:D8:55:75
            X509v3 Authority Key Identifier:
                keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:1a:d0:e6:a8:88:4b:d3:7b:9b:79:17:fe:69:64:3d:9c:
         c7:6e:b6:9c:b9:9d:1c:6e:54:08:a7:c1:35:02:d7:09:2a:1a:
         7a:19:c6:c5:75:0f:21:67:93:6e:c0:9e:80:79:b3:84:17:b8:
         b6:c9:47:e9:9b:81:d1:2c:da:bf:d8:47:53:d6:66:c3:78:bf:
         0f:4e:b3:f6:89:ec:de:c9:fb:ab:f0:65:1b:85:42:26:d9:1e:
         d4:6a:4e:17:05:21:68:6d:3e:e8:a8:3c:e2:69:e1:4e:3d:ee:
         29:42:89:d8:99:e1:f1:a8:23:7d:bb:58:c0:6a:51:18:7f:d1:
         a7:38:cf:67:60:3d:1d:40:67:aa:47:f9:8b:30:ed:73:9e:90:
         0c:5a:71:9e:35:40:db:e5:65:21:2b:7a:d3:47:14:29:de:f3:
         3b:09:00:61:b7:9a:b9:0e:c8:5b:24:88:5a:ab:b2:2b:75:de:
         ac:f3:b7:b7:c5:76:a6:e5:09:82:b5:01:a0:9c:a0:ea:29:cb:
         43:8c:d0:05:da:71:14:a5:5c:8a:dd:19:61:c5:cd:2c:34:87:
         f1:9f:d6:a4:96:6d:15:c3:22:a5:0c:75:25:fb:76:46:43:07:
         60:ce:d6:98:3e:ec:3f:3b:7f:d1:f6:c4:40:9e:2e:65:3d:ef:
         66:51:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:25:36 2025 by rpki-client