Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
File:                     wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json)
Hash identifier:          a+x18bRFoT6YIFI+xWhpo4ep5SyaFHbkjCBiXT4utU0=
Subject key identifier:   D8:6E:A4:2D:72:64:FB:A0:EF:CE:9E:7D:72:FE:FF:A1:D7:4C:72:45
Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC
Certificate issuer:       /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
Certificate serial:       0196A6C1B4BD0CAA45AB93EF0A9F1F34ED8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 18:00:34 +0000
Manifest this update:     Tue 06 May 2025 18:00:34 +0000
Manifest next update:     Wed 07 May 2025 18:00:34 +0000
Files and hashes:         1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=)
                          2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: Rs5XMVkaDHOJSxP5kFmkmCoEzcWyFpeIOKDHyb8T9W0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c1:b4:bd:0c:aa:45:ab:93:ef:0a:9f:1f:34:ed:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc
        Validity
            Not Before: May  6 18:00:34 2025 GMT
            Not After : May  7 18:00:34 2025 GMT
        Subject: CN=d86ea42d7264fba0efce9e7d72feffa1d74c7245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:dd:62:4e:ac:e3:e4:ab:ae:5c:3c:9e:42:
                    23:f8:c2:ac:91:cf:e3:15:b1:37:93:7c:9b:3c:cb:
                    1b:70:a7:ca:17:d3:75:34:f0:63:04:7f:6b:0b:6f:
                    0e:a7:e7:69:b2:83:d4:db:a5:62:f7:a8:7d:ac:ce:
                    00:a7:d3:a2:89:2a:da:fe:1e:b2:fe:d2:5a:15:48:
                    d4:e0:27:6c:4c:94:c3:a0:ef:8c:55:7e:f4:a1:0f:
                    6b:58:51:df:c2:d6:69:7b:70:27:2f:87:cc:a1:c1:
                    05:e3:21:08:db:e7:8e:6c:40:5f:bb:f0:1e:a8:5a:
                    7e:a2:18:7d:cc:5d:a9:4c:d2:07:13:23:23:d9:64:
                    b5:4c:22:c8:35:78:ab:26:69:70:37:5c:46:28:fc:
                    31:94:87:01:00:9a:e7:b2:41:8e:bf:f5:fd:34:48:
                    a9:e3:a8:2e:3c:88:af:ba:d4:e4:63:f5:9f:8d:6d:
                    b4:34:53:76:8c:b2:d0:e6:ef:78:ad:29:dd:23:c9:
                    e6:6e:59:ca:24:05:c8:9b:b1:1e:74:f8:4d:70:10:
                    f3:1d:b3:4b:e6:5d:9a:1f:d1:cb:57:ea:70:24:57:
                    0f:c3:66:5d:5c:51:e2:07:78:31:2b:6d:a7:7a:68:
                    04:ca:90:73:af:ba:ae:86:57:be:10:5f:a3:79:04:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6E:A4:2D:72:64:FB:A0:EF:CE:9E:7D:72:FE:FF:A1:D7:4C:72:45
            X509v3 Authority Key Identifier:
                keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:9b:fb:dc:2b:4e:8d:8e:2e:8e:12:a6:a9:a5:ee:e5:51:
         e0:ba:8d:a9:25:ce:79:71:73:de:82:fc:69:09:04:e2:bd:d1:
         12:ec:fd:4c:c2:10:e6:fd:69:42:f5:8c:fb:76:9a:06:2e:7d:
         e6:55:a3:31:32:73:e8:00:da:0b:c6:82:44:3c:77:c3:ad:c7:
         bd:28:36:36:45:d3:a8:07:21:cc:9a:90:b6:31:a1:58:dd:40:
         5d:8a:cb:6e:09:70:2a:7a:a3:2f:63:48:d2:d5:9e:64:85:f4:
         6e:79:f2:ed:fc:fc:4c:c1:81:eb:de:8e:e8:90:93:da:78:35:
         dd:d7:da:4e:02:1f:b2:23:b9:ed:7a:45:fb:34:ec:05:cd:35:
         b7:a5:46:e7:97:03:90:92:29:47:9f:33:3f:a3:05:30:bc:01:
         31:ca:53:ba:84:ce:69:29:90:81:84:e2:82:79:81:50:f2:9f:
         d9:61:32:0d:d4:63:85:20:99:f8:b3:11:97:24:58:b4:f5:69:
         56:34:66:e0:e4:8e:99:5a:07:c5:12:1c:de:32:c0:ef:43:16:
         c4:4c:e2:4c:d2:a1:b1:e9:bc:78:52:58:b0:71:87:06:a6:e8:
         29:19:b3:66:b8:17:e6:7e:7a:de:45:1c:e5:4a:65:1b:61:25:
         b5:9f:fe:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:39:48 2025 by rpki-client