Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
File:                     W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json)
Hash identifier:          ZzdVagPQic9/j9iUO/c5ucIi/BQbX0g72F+4uX6CgNo=
Subject key identifier:   FC:3D:7A:3D:01:61:F5:F4:F6:32:42:86:10:58:71:26:29:0A:6A:58
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Certificate issuer:       /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial:       01968F94D346324257772A68512A605E4839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
Manifest number:          12B5
Signing time:             Fri 02 May 2025 06:00:17 +0000
Manifest this update:     Fri 02 May 2025 06:00:17 +0000
Manifest next update:     Sat 03 May 2025 06:00:17 +0000
Files and hashes:         1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: p9oqIdDNz5SDn3aAAzLDfBy2iq/G0b4xz+wblgQvQ6E=)
                          2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:94:d3:46:32:42:57:77:2a:68:51:2a:60:5e:48:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
        Validity
            Not Before: May  2 06:00:17 2025 GMT
            Not After : May  3 06:00:17 2025 GMT
        Subject: CN=fc3d7a3d0161f5f4f632428610587126290a6a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:7f:d9:8b:75:5b:2f:e7:74:c8:24:92:ab:
                    ef:f6:c3:a9:d3:9c:5c:53:8f:e8:0b:43:ee:0b:8a:
                    86:3a:1e:94:65:51:81:1f:9b:aa:0f:9f:8b:75:f6:
                    af:87:1a:1c:f2:65:60:3f:3d:1d:f9:8a:bb:dd:e7:
                    c8:98:f3:46:6f:c1:3d:ec:88:cd:2f:e0:67:be:ef:
                    ad:fd:23:e5:35:9a:71:35:5e:b0:28:46:c1:9a:9c:
                    7c:5f:18:a4:8e:bf:7c:ad:d5:1d:81:3f:19:51:f0:
                    6d:d9:c9:78:35:73:af:78:82:9d:3c:20:86:31:96:
                    83:4c:75:33:6d:d1:20:ab:66:07:14:df:6c:d3:ff:
                    e7:56:39:f1:ac:34:45:c8:6d:0a:83:a5:95:ee:12:
                    60:f7:72:dc:94:e1:06:52:1b:fb:e1:91:ef:ce:be:
                    f9:f8:ce:5d:99:0a:6b:7c:c5:5b:84:00:6d:6b:9d:
                    3e:c4:ba:db:8e:84:f2:b5:11:2f:9a:d0:25:f5:00:
                    81:47:ba:d4:97:15:f0:60:1a:7a:a3:05:60:54:5f:
                    02:e3:7d:f5:d3:6e:6c:b0:55:52:97:7d:6b:c6:8b:
                    bd:e6:8a:4e:2f:bf:5f:52:01:f9:da:84:43:08:e3:
                    71:e7:65:5a:b3:af:23:4b:ea:e6:e6:55:62:30:34:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3D:7A:3D:01:61:F5:F4:F6:32:42:86:10:58:71:26:29:0A:6A:58
            X509v3 Authority Key Identifier:
                keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b0:5f:32:55:49:20:e3:f5:d7:79:40:d7:5b:77:8d:05:23:
         a2:4c:f2:a3:29:5a:be:80:79:7b:b5:de:b0:67:67:1c:fb:5e:
         54:51:f5:bd:b1:a4:8e:b0:dc:18:42:f0:14:22:cd:da:48:be:
         76:37:41:f6:04:f6:b7:8d:7f:3a:10:a0:52:0b:09:f0:98:a3:
         1e:18:5f:1d:f7:c0:fa:2b:a9:47:2d:2d:83:d7:da:3c:6a:87:
         90:23:ad:87:20:05:37:94:b1:a0:5f:c4:15:e8:8f:83:79:5d:
         da:bd:0e:e3:7a:8e:e9:1d:50:cc:78:09:e1:02:0f:43:42:ba:
         9d:b6:c2:14:40:ea:18:b7:50:3a:f6:38:c2:b0:fd:aa:b4:2f:
         73:4e:56:7a:f6:46:5f:d1:37:a2:59:8f:37:bf:a3:af:22:d0:
         5d:39:ca:a7:50:5a:2b:fb:23:a5:58:c2:3b:fb:97:ce:e9:80:
         61:df:21:eb:e1:6b:b7:72:0f:ee:32:b0:7b:c5:72:78:d9:ee:
         c9:01:90:9a:4c:ed:d5:6f:96:9e:cf:6c:ca:91:65:11:0c:21:
         07:87:1a:bc:93:cc:a7:50:40:5e:e8:44:b3:29:ee:f1:01:ba:
         0e:2b:12:9f:0a:f2:8a:cc:e3:99:d3:36:b6:60:cd:76:9f:23:
         96:92:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:07:44 2025 by rpki-client