Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File:                     W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier:          o43bFcDDhXyKhzRg1n/qmxYK6QJmSTLHSUd1XQ6bWbo=
Subject key identifier:   28:B5:62:84:1C:6A:8A:1B:E5:51:BA:61:5E:6D:9A:61:76:09:0A:42
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer:       /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial:       0196C2024416299D25689A739AD17785151C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number:          0970
Signing time:             Mon 12 May 2025 01:00:50 +0000
Manifest this update:     Mon 12 May 2025 01:00:50 +0000
Manifest next update:     Tue 13 May 2025 01:00:50 +0000
Files and hashes:         1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: LECvrssf4i0Do4IL323uSSA4vXlTK6AwgOdx+vKPd1E=)
                          2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:44:16:29:9d:25:68:9a:73:9a:d1:77:85:15:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
        Validity
            Not Before: May 12 01:00:50 2025 GMT
            Not After : May 13 01:00:50 2025 GMT
        Subject: CN=28b562841c6a8a1be551ba615e6d9a6176090a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:4a:36:b2:2d:cb:39:51:91:c6:af:d4:32:
                    f2:fc:11:b7:08:f2:8c:9a:b4:ce:e5:bc:91:b9:8c:
                    c6:0f:1d:d6:e7:8c:50:6d:02:b8:70:50:88:09:58:
                    28:41:45:be:13:1f:5d:52:71:82:28:d1:4f:d2:e7:
                    31:b1:15:45:57:2d:2e:13:7a:7a:e0:28:21:e0:06:
                    83:42:65:51:39:c9:5c:64:87:2e:fb:bb:8e:ae:ef:
                    78:68:d6:e5:ea:3e:b4:31:6b:91:69:82:a6:21:29:
                    15:87:cd:dd:0d:f9:34:ba:48:94:02:0f:53:dd:ec:
                    46:86:53:47:dd:72:29:58:fe:9a:c5:49:bf:13:a1:
                    d9:a4:7c:e1:69:68:5c:2a:45:4b:99:d5:24:6f:8c:
                    1b:24:3d:22:4e:9a:8f:86:48:1a:ea:c9:fa:cf:25:
                    4d:22:1e:87:97:b1:05:6b:14:3a:13:6d:c1:c6:a4:
                    36:76:b9:e9:b6:ba:c1:52:e9:37:0d:38:f5:91:5e:
                    07:ff:a3:b4:07:ff:da:c0:2b:2a:58:47:38:9b:2f:
                    ab:99:69:51:70:98:08:1a:ba:fa:3d:b8:be:7c:0d:
                    58:dc:b3:c0:ad:6c:84:61:7a:12:31:c0:f1:c4:1f:
                    8b:b3:ae:9b:f6:48:20:49:c9:a7:20:7f:a7:b0:44:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B5:62:84:1C:6A:8A:1B:E5:51:BA:61:5E:6D:9A:61:76:09:0A:42
            X509v3 Authority Key Identifier:
                keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:de:f9:da:df:11:4c:6e:d9:78:16:d1:24:cb:d3:b9:17:
         db:1a:90:b1:42:39:78:2f:30:b1:5d:fa:c8:f7:bf:18:d4:a8:
         bf:46:fa:c2:8a:0b:9e:df:9a:39:03:78:31:5e:ab:56:d2:4f:
         9c:d9:d0:9e:39:27:db:61:20:ac:23:bb:fe:13:8e:ad:ce:ca:
         8b:1d:29:91:28:10:9b:40:c9:62:1f:c2:ca:11:a4:10:2d:8a:
         ea:80:cf:ee:3d:07:42:5a:bf:c9:66:99:f5:35:2c:61:a4:93:
         18:52:a8:a5:0c:17:ad:06:55:51:92:29:23:54:1a:b6:80:e0:
         1b:95:c8:2b:12:ed:53:e0:71:ed:fe:f1:fa:c1:53:0a:65:7f:
         e6:af:0e:3e:c1:a2:f8:80:ff:29:5f:6a:b5:02:74:6f:0f:89:
         71:af:9b:d5:87:66:b9:6d:c4:a3:e9:b6:7b:76:8b:1f:ae:27:
         e6:d1:f6:c7:86:e1:9e:52:a9:b1:78:40:55:61:f0:15:df:45:
         a3:36:05:80:6b:6a:e6:e3:48:c5:26:60:a1:67:fe:c1:81:5e:
         1a:74:c8:94:46:ee:5a:2e:68:79:2b:68:1b:80:92:9f:9e:d5:
         46:b7:8b:df:1d:26:ce:55:c4:6e:d6:49:d3:00:2c:e2:39:4a:
         7a:a8:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:47:52 2025 by rpki-client