Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          W2oUB+9rwPFH0AoQZhqd6PqRMW/XlKRPVvZyKXJ6s6k=
Subject key identifier:   B9:04:DC:85:1E:2C:DB:C0:5F:A7:FD:C2:35:3D:AF:70:FB:79:90:50
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       0196A6F8C21AC63409439146DB6F4E99FD2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          146E
Signing time:             Tue 06 May 2025 19:00:42 +0000
Manifest this update:     Tue 06 May 2025 19:00:42 +0000
Manifest next update:     Wed 07 May 2025 19:00:42 +0000
Files and hashes:         1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: 5kSKp+ZN3FoBZTx3EEjo8Hol/46HSc+HjkdjlKuiZQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:f8:c2:1a:c6:34:09:43:91:46:db:6f:4e:99:fd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: May  6 19:00:42 2025 GMT
            Not After : May  7 19:00:42 2025 GMT
        Subject: CN=b904dc851e2cdbc05fa7fdc2353daf70fb799050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:58:07:66:9b:af:3b:9b:df:6f:f9:5b:ce:
                    80:2a:ef:53:07:79:0a:9c:1a:91:a0:d0:80:7a:4e:
                    77:16:2d:87:3e:2a:5c:f3:07:1d:42:e3:2a:a7:1b:
                    38:87:64:ef:3a:ce:11:e1:9e:0a:39:ba:b2:dd:b6:
                    47:bc:8b:cd:2d:e5:30:6e:ca:b2:4b:15:45:f1:c0:
                    0b:a7:c9:97:ab:4b:73:16:93:ea:42:07:a6:56:fa:
                    41:c2:6f:9d:1b:1c:f1:dd:4e:53:d5:fc:43:85:22:
                    66:59:ee:4c:1e:b9:36:42:23:5e:a1:2f:2a:ab:eb:
                    6b:89:29:25:dd:0c:3b:96:b0:91:7d:36:5c:92:f0:
                    af:27:de:03:24:d8:ab:43:ed:54:b7:2b:8b:5d:bf:
                    bd:26:2d:e1:b7:a2:c5:fd:de:16:af:bc:af:8d:5e:
                    ab:b9:63:fc:67:4f:e5:4d:ea:36:ae:36:be:d9:41:
                    65:1c:92:c2:bd:ca:fd:91:bb:e2:fe:2b:76:0d:47:
                    df:46:61:6b:ef:45:e3:0e:36:a5:1c:95:90:8d:51:
                    de:49:55:95:7a:67:ac:fd:01:60:8d:0f:3a:75:6c:
                    51:c1:da:e1:49:a9:d0:60:cc:1f:73:cf:ad:05:8a:
                    ef:82:27:06:4d:b7:f7:6b:d2:4e:21:56:4d:bd:78:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:04:DC:85:1E:2C:DB:C0:5F:A7:FD:C2:35:3D:AF:70:FB:79:90:50
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ad:50:4d:03:43:78:c2:2e:97:a3:51:9d:b1:fc:c6:05:f7:
         29:a1:63:7b:61:e8:51:9d:d4:aa:e7:af:75:70:04:cf:c3:f4:
         de:04:50:1e:5a:3b:9b:61:92:38:8c:6b:a8:60:2a:be:e5:fe:
         58:07:f3:c3:ca:66:9a:c3:70:6f:9a:b3:82:03:f3:ef:a7:e0:
         3f:eb:29:55:70:d4:a2:5a:9e:bd:9b:fb:78:18:c0:3d:7d:ac:
         bc:07:a4:07:6c:7d:3d:00:a4:33:d6:35:02:20:e2:49:bd:fc:
         38:ae:a9:4c:47:22:58:34:8d:a0:cb:68:1f:78:f8:cc:93:c0:
         6a:33:b0:6f:40:26:11:15:43:be:1d:cb:39:38:60:56:56:78:
         01:0f:d8:e2:07:b4:ee:36:4f:bf:a8:d8:da:56:70:81:e5:ec:
         25:b1:05:e3:1c:9d:b1:c1:6f:c8:cc:43:45:8f:d5:aa:73:6c:
         8a:3f:c0:fc:54:1a:37:db:21:2e:5b:fe:01:6b:d1:1a:b1:2e:
         db:d1:d9:1b:0c:ae:07:1e:7b:a1:e8:d0:f6:e1:b7:51:5f:44:
         c0:4a:8b:43:27:60:d3:47:3c:d8:ad:05:17:04:2c:8b:1f:b4:
         98:19:8b:35:07:ca:9f:0f:1c:01:d0:b5:8a:1d:a6:ca:c4:5e:
         c0:1c:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:10:33 2025 by rpki-client