Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File:                     wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier:          uF57HAWY1hxZ6hFvCq+RRXYzog44cDAfrOVB8BOMdsc=
Subject key identifier:   A5:82:DB:E9:BF:B7:4F:7C:B4:A6:FE:C4:44:ED:13:FC:A6:B1:82:21
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer:       /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial:       0196B3A1A5EC96AB4A934750C9C8EA140FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number:          0C11
Signing time:             Fri 09 May 2025 06:00:37 +0000
Manifest this update:     Fri 09 May 2025 06:00:37 +0000
Manifest next update:     Sat 10 May 2025 06:00:37 +0000
Files and hashes:         1: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (hash: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=)
                          2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: s0eOkaYLuhcPuGMHMu0Npc0aFu2BaBK16VeWg9xtQug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:a1:a5:ec:96:ab:4a:93:47:50:c9:c8:ea:14:0f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
        Validity
            Not Before: May  9 06:00:37 2025 GMT
            Not After : May 10 06:00:37 2025 GMT
        Subject: CN=a582dbe9bfb74f7cb4a6fec444ed13fca6b18221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b4:fc:a1:98:0d:dc:0d:8a:9e:55:49:c7:91:
                    93:4a:a3:b2:49:43:b0:34:90:83:95:3b:fa:e8:79:
                    1c:9c:84:81:92:57:00:d2:70:9e:20:38:58:19:a3:
                    d6:1f:56:8b:95:0d:4c:8f:ed:78:2f:c7:5b:95:dd:
                    b5:a2:f2:86:75:a0:60:84:f8:c3:91:0e:9d:94:bb:
                    9d:5a:16:d5:dc:2a:ff:a3:6d:25:7a:a9:0b:9c:70:
                    46:51:fe:31:c1:e8:f9:00:da:aa:02:33:f4:ea:08:
                    0b:ed:b6:b3:9c:b5:e1:92:9a:80:fe:65:d2:c9:3a:
                    41:fe:f5:cb:0c:ed:60:56:0e:4e:a7:2a:df:85:c2:
                    c1:39:89:33:96:4a:e1:58:30:e6:d3:b3:16:f6:d4:
                    b5:e8:18:fd:68:f6:23:ca:e8:83:25:c1:11:83:c1:
                    24:ff:a8:48:9d:a2:0b:07:33:a6:c7:19:ce:5f:a4:
                    40:e7:c4:c2:ae:69:51:5d:8c:40:d3:c3:c3:08:c0:
                    ec:95:80:e2:c2:20:3c:a3:19:98:0b:58:26:5e:98:
                    0d:85:80:44:f8:87:e0:87:63:68:70:a4:22:45:f8:
                    86:85:cf:09:ba:3d:43:eb:ba:e5:59:1a:08:e7:ac:
                    8e:f8:ce:08:26:26:61:cb:68:55:e1:43:6c:da:c2:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:82:DB:E9:BF:B7:4F:7C:B4:A6:FE:C4:44:ED:13:FC:A6:B1:82:21
            X509v3 Authority Key Identifier:
                keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:9c:3d:97:9a:95:aa:cc:a2:f0:30:f0:35:32:4b:aa:7d:
         61:07:f1:c0:78:49:72:5d:e5:c6:d8:17:56:04:0e:bb:ab:34:
         d4:ef:67:83:1a:10:7e:a5:17:c6:52:4a:9d:c3:69:ce:16:cc:
         e9:bd:db:ee:2c:93:69:6b:40:bf:9a:56:65:4c:58:c2:c6:f0:
         2a:1f:1d:3e:af:bd:8f:f4:22:80:2f:11:f8:27:93:8c:64:97:
         35:c6:c2:1a:69:8f:f9:5d:06:78:1d:20:f0:cc:65:6b:8b:6b:
         c3:8c:63:63:35:f7:61:c8:7f:db:bc:a2:23:69:f0:9e:9f:78:
         35:cd:b9:fc:4b:3c:fc:89:eb:05:0c:9b:6d:cf:04:42:32:19:
         d2:47:33:21:7e:b3:b0:3a:84:98:21:37:51:fd:0e:f8:fb:3e:
         2b:ea:66:51:d2:28:69:75:ea:4c:9b:f4:f8:4c:72:55:62:93:
         06:4e:02:dc:9a:6a:8a:02:eb:90:be:11:44:54:77:03:fc:2b:
         77:1f:20:28:bc:e3:b0:c8:13:23:29:8a:76:7e:ff:06:f3:36:
         5d:64:41:d0:8d:9b:b8:c6:07:81:ee:a1:94:9e:fa:5c:2c:74:
         a3:8c:27:04:39:b4:ff:ce:0f:06:a5:43:b7:48:21:d5:6a:aa:
         27:be:05:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:41:54 2025 by rpki-client