Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File:                     W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier:          ufdeb+hEYqK3cHukxKTNsmxq0xPrd0w2cEKCor7Ovt4=
Subject key identifier:   AC:5A:27:C5:73:97:32:83:C8:25:2F:32:52:32:B6:48:19:83:79:63
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer:       /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial:       01977B9E8A0831EAB510F2E2AAFC03FB181C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number:          0541
Signing time:             Tue 17 Jun 2025 02:01:16 +0000
Manifest this update:     Tue 17 Jun 2025 02:01:16 +0000
Manifest next update:     Wed 18 Jun 2025 02:01:16 +0000
Files and hashes:         1: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: jQxg0s2rsBvyii/jTddkLhM4o/z0eeGzjkos/3Ai6XU=)
                          2: aC3k6Pc-VbYaZAExCYMf-r0FJik.roa (hash: sjHut+jtNlmiU2BIEntfi+uVsFkRaMGa8qqarc0jF00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:9e:8a:08:31:ea:b5:10:f2:e2:aa:fc:03:fb:18:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
        Validity
            Not Before: Jun 17 02:01:16 2025 GMT
            Not After : Jun 18 02:01:16 2025 GMT
        Subject: CN=ac5a27c573973283c8252f325232b64819837963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9f:4f:1f:74:26:11:bd:0a:b2:c8:cb:be:d2:
                    31:61:c4:d1:69:bc:fd:be:0a:a4:a1:55:da:98:67:
                    c3:75:61:5e:f4:aa:76:6c:8a:54:01:71:2f:38:a5:
                    1d:c1:f5:78:1c:f3:85:5e:8a:b8:6a:9b:8d:fa:17:
                    83:dd:81:80:dc:4f:fa:65:d8:26:bd:83:43:28:d1:
                    30:69:eb:04:1a:dc:d1:be:ea:01:e4:36:02:a8:2e:
                    54:6e:09:45:e9:18:6e:dd:94:91:3a:67:01:7a:c6:
                    a4:96:94:46:41:dd:59:cb:65:9f:10:3b:19:c4:d3:
                    3f:c6:be:b0:2d:64:58:51:51:a7:62:c3:19:e7:7c:
                    86:17:6c:92:8f:d1:cb:25:d7:91:c7:e9:da:45:08:
                    fc:c4:b3:fb:0b:11:0b:23:5e:94:ec:cc:a9:28:dd:
                    4f:ba:21:d9:92:77:14:e0:dc:ad:fc:8e:0a:c2:ef:
                    21:1a:82:73:21:02:9a:31:2e:35:eb:c3:83:be:33:
                    b3:3c:01:7e:f3:32:e8:d3:9f:f2:bc:ec:14:c2:36:
                    6f:f7:49:e1:4a:77:36:1b:38:8b:c3:b4:86:3b:e4:
                    08:db:39:ec:ee:7d:a7:f4:14:0e:78:ca:e2:41:d1:
                    1a:76:f0:17:05:85:6a:eb:90:3f:9d:06:52:4e:1f:
                    ce:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:27:C5:73:97:32:83:C8:25:2F:32:52:32:B6:48:19:83:79:63
            X509v3 Authority Key Identifier:
                keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:1c:1d:3f:a2:c2:49:98:a2:61:2f:0a:54:07:2e:a7:ea:
         81:04:a6:ca:00:4f:ff:78:69:16:cf:30:c8:59:fb:a0:ef:38:
         d9:94:09:1c:6c:c1:f2:a6:19:f2:2e:ce:da:30:07:6c:ee:bd:
         f4:ec:8a:4a:81:5f:f1:74:dc:17:16:73:bb:2f:4f:76:e0:e5:
         c5:32:d3:15:85:c1:86:23:dd:6c:9b:0a:28:4a:27:83:71:b0:
         c4:a7:7c:8b:3c:77:63:36:2a:24:3d:99:64:c4:80:98:71:75:
         48:be:d0:5b:f8:f2:9c:e0:52:4d:7c:e4:d7:04:88:a1:82:01:
         0d:91:57:6d:52:c7:27:60:80:7b:e6:fb:fd:64:0d:41:0a:8a:
         3f:8b:05:70:fa:6e:4c:3a:dc:14:da:49:91:e1:43:1a:ff:56:
         bd:2c:37:27:7b:be:d4:bd:b5:d7:3b:eb:0c:6c:b1:a5:7e:aa:
         3a:fe:74:f4:39:32:41:d1:45:85:41:9f:08:87:b4:5c:0a:ac:
         4f:30:f5:4c:67:10:71:c1:fa:48:86:c7:0a:d3:25:a8:80:30:
         c7:e6:7a:06:ca:33:ab:55:6e:74:6e:d4:b2:79:7b:e0:2b:7f:
         cd:d7:f9:25:70:1f:01:19:6f:9f:8d:15:9a:2f:fb:c7:85:7b:
         b2:0a:c7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:46:35 2025 by rpki-client