Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
File:                     we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json)
Hash identifier:          O5QBalfSSjiXfjYO0cGxXBFFDl14vom/F4AOqhcjhLs=
Subject key identifier:   AD:83:CE:C8:C0:5E:0B:ED:0B:54:93:8B:27:CA:A5:F5:89:25:8B:E4
Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
Certificate issuer:       /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Certificate serial:       0196BD494E8A0C3BFE4A6277654A831437BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
Manifest number:          0114
Signing time:             Sun 11 May 2025 03:00:20 +0000
Manifest this update:     Sun 11 May 2025 03:00:20 +0000
Manifest next update:     Mon 12 May 2025 03:00:20 +0000
Files and hashes:         1: iCajC07N1wXhLZhUBQa5qaDtpkc.roa (hash: TBjsHC2hLzzwIzsyf+O4ISG2vQbLL5AsHhFZzfGik5g=)
                          2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: WqA2BOIIx2SVjNmaa4YQ4Vvgbkt0uFB/prrSeIP/yQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:4e:8a:0c:3b:fe:4a:62:77:65:4a:83:14:37:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
        Validity
            Not Before: May 11 03:00:20 2025 GMT
            Not After : May 12 03:00:20 2025 GMT
        Subject: CN=ad83cec8c05e0bed0b54938b27caa5f589258be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:b4:b6:e5:96:21:5f:24:cf:d9:2e:0a:3d:
                    b7:dd:0f:8b:df:72:92:8c:9f:d9:77:52:81:13:d4:
                    34:09:aa:82:fb:42:c4:40:39:97:0c:8a:93:98:e9:
                    84:db:a6:6a:16:3b:ed:54:45:60:c4:0d:fb:0d:c2:
                    50:36:15:e4:b7:1c:8a:7a:47:1d:41:fc:da:14:b5:
                    83:3e:28:90:4c:e8:de:8e:21:e8:c2:26:3c:d7:72:
                    4f:7a:07:98:62:57:c3:fc:b3:2e:54:0e:4b:b9:56:
                    4d:18:91:9a:5d:dc:70:24:16:9f:ff:3c:5c:de:51:
                    f4:87:3b:cd:e6:a6:a6:e4:40:f0:73:00:f2:0c:de:
                    4a:ea:b6:59:92:91:f4:f9:7e:e9:ad:9d:6f:e3:55:
                    2d:f6:f7:60:82:c7:f0:dc:99:74:0f:ea:ce:6b:e0:
                    46:fe:aa:4d:51:73:2b:49:91:e4:9c:cd:8b:ab:2d:
                    f4:5f:87:ea:c8:c1:42:cb:db:08:0c:3a:02:72:df:
                    f2:6a:ae:23:37:a9:0a:76:c2:a7:07:68:6d:b7:58:
                    b4:18:5d:da:df:5c:13:d8:74:12:38:0b:90:25:c0:
                    87:91:b9:56:00:12:98:52:56:30:ed:d8:ec:47:c9:
                    49:aa:c5:21:d3:60:4f:1b:f4:f3:21:73:97:af:70:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:83:CE:C8:C0:5E:0B:ED:0B:54:93:8B:27:CA:A5:F5:89:25:8B:E4
            X509v3 Authority Key Identifier:
                keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6d:cf:e1:9c:a2:0a:e4:6d:c3:5d:d9:6f:5b:3c:ba:eb:88:
         e3:46:e0:90:e1:38:1f:46:a8:48:53:e4:60:36:a1:6d:71:80:
         8d:04:92:de:7b:e7:92:f5:79:f5:7f:d9:52:79:5c:f4:79:6f:
         ad:92:80:94:95:6c:a1:2a:14:83:fe:7f:70:03:38:4d:57:39:
         cd:bf:da:3f:e1:4c:c7:95:50:21:7b:6b:48:9f:a3:c8:c0:3e:
         a2:1f:2b:fa:23:6b:34:0a:91:d0:a0:e1:37:12:36:00:5a:de:
         42:44:8b:20:da:da:d1:df:21:cb:04:62:5f:3b:69:e3:13:bb:
         00:48:69:1d:83:f9:a6:78:51:90:da:f5:42:2f:52:5d:6b:3a:
         8b:07:fd:61:ba:5f:f6:3d:71:9b:cf:3b:64:29:4b:c6:2f:47:
         fe:70:bf:42:dc:59:53:76:77:d6:1c:33:ec:ec:6c:e1:e5:65:
         d2:c1:c3:f1:80:ae:55:42:bc:69:74:b6:6a:1e:10:70:13:ac:
         4a:6f:68:cb:a0:db:c9:11:be:89:fc:32:87:30:f9:e0:f3:af:
         c1:9b:62:df:1e:b5:b3:8f:8f:99:5b:e8:3e:50:4d:50:aa:35:
         18:0d:7b:d8:f8:f5:bc:d5:18:c4:3f:70:10:b5:d7:5e:1c:64:
         2d:9f:8a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:13:27 2025 by rpki-client