Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          WDSDROlQLpmC1XMk/jRQD1Ud6uejCRJsb9Z7F2UYy4g=
Subject key identifier:   0F:FA:31:AC:22:53:C8:6F:27:CA:2A:52:1C:19:2F:56:E0:E6:D1:0A
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       0196C5031632CF4E7174C9170CED99DAF091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          051C
Signing time:             Mon 12 May 2025 15:00:35 +0000
Manifest this update:     Mon 12 May 2025 15:00:35 +0000
Manifest next update:     Tue 13 May 2025 15:00:35 +0000
Files and hashes:         1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: SmSCdSUsjav/93Nn+UQsOnEjmGW6KwGZ3gYY1GqPqlM=)
                          2: I5lxuXg8Kfbx7zXSiGma80fdzJ0.roa (hash: H4ThFxj2wgOGFGxz87hZLwfWFdZQqMGoVJJaZVtoaOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:03:16:32:cf:4e:71:74:c9:17:0c:ed:99:da:f0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: May 12 15:00:35 2025 GMT
            Not After : May 13 15:00:35 2025 GMT
        Subject: CN=0ffa31ac2253c86f27ca2a521c192f56e0e6d10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:bb:c5:09:be:3f:3c:42:e4:11:11:ce:b6:
                    0e:5d:cc:f5:75:b7:13:ab:4a:ba:68:98:94:51:d4:
                    05:a7:78:62:b6:06:cc:e1:35:d6:38:29:02:7e:d6:
                    df:6a:3a:10:3e:ed:71:ae:4e:f9:47:5f:df:fe:30:
                    c8:ec:cb:71:3e:3d:d0:73:93:13:47:ea:a7:8e:69:
                    58:2d:f4:f5:4c:e5:80:1c:e2:ed:2e:38:f2:6f:c7:
                    c6:19:df:e5:f0:3c:57:b7:7d:b5:26:f9:ad:ca:a1:
                    ae:3c:83:18:a0:42:68:d6:b0:dc:d4:2f:e6:fa:9d:
                    ee:18:24:31:99:91:ec:24:6f:a1:7b:17:ec:df:cd:
                    08:5b:2b:9a:d5:d7:5e:5c:2b:16:e4:f2:ea:f2:48:
                    36:52:9c:d5:51:f7:79:a7:21:59:b6:52:a1:a7:15:
                    b4:08:1e:da:b7:68:92:4e:d7:ae:85:04:c1:91:16:
                    69:61:6e:42:24:b1:78:15:52:25:2c:88:19:41:ac:
                    d3:50:0c:fd:1a:a1:76:07:fd:d9:d5:83:9d:12:1a:
                    90:e0:8d:ef:71:d0:03:7f:75:4d:d1:03:fc:fe:c9:
                    69:75:85:09:72:c5:84:c3:e7:50:f3:8d:eb:cc:6b:
                    b1:66:4a:b7:04:c4:fe:c5:3a:1a:c4:88:33:87:c2:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:31:AC:22:53:C8:6F:27:CA:2A:52:1C:19:2F:56:E0:E6:D1:0A
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:2b:e2:0b:34:e9:7e:35:ef:ed:7e:c5:44:d6:86:ab:c0:79:
         8a:4e:a2:9e:17:f3:12:29:80:34:5d:31:f0:e6:3d:a1:03:5d:
         93:bd:f1:cf:6b:bd:92:5a:b4:8a:80:5b:0b:a9:83:35:63:e0:
         58:a3:ed:dd:8a:2a:65:88:2d:65:12:04:b7:15:53:d9:19:08:
         f6:71:26:cf:b0:7e:96:36:14:7b:fe:02:fd:f0:89:bf:dd:f7:
         2b:4c:ae:14:9f:8e:f6:4c:ef:c7:18:75:29:6e:d5:3c:ec:53:
         d0:b2:73:65:52:ad:73:c4:2a:5b:0f:65:f1:f4:1c:40:35:e7:
         af:7a:ec:3f:ff:46:74:37:ec:c8:d5:f9:5a:7c:e4:3d:f8:78:
         33:5b:af:15:44:7b:2a:58:c7:91:27:94:53:85:b8:09:4b:97:
         1f:d9:98:b9:83:60:1a:b5:c7:dd:f1:5f:a0:6a:78:f3:9a:7b:
         21:fa:e7:79:17:a2:12:fe:b1:3e:6c:57:29:d5:6e:60:f4:dc:
         c4:06:4f:f4:f2:6b:4e:62:80:6c:ad:54:3f:80:c9:2b:52:26:
         64:d5:84:2b:67:3c:e4:46:ad:64:79:5b:57:f3:24:90:37:72:
         56:cd:1f:68:50:3c:7d:4d:0f:3c:6f:27:4f:40:c7:51:fd:bf:
         f7:c0:cc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:16:49 2025 by rpki-client