Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
File:                     wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json)
Hash identifier:          IfPgimoh5uV+s85DafZptAShk7/NCv122arSZ6yeMj8=
Subject key identifier:   89:B8:6B:13:E5:1F:54:07:A4:7A:54:25:A3:19:E4:22:46:58:F3:EB
Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
Certificate issuer:       /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Certificate serial:       0196BF6E979A5F1D646CCCE9A6C5555BF1B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
Manifest number:          115B
Signing time:             Sun 11 May 2025 13:00:18 +0000
Manifest this update:     Sun 11 May 2025 13:00:18 +0000
Manifest next update:     Mon 12 May 2025 13:00:18 +0000
Files and hashes:         1: 2tiVBKWJb3sKibII0w4_JEP8cX8.roa (hash: yXLW83i0e/6bCMs04Sj4WwVKDgNnsbMkg4zpZba2Js0=)
                          2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: 65ekvPUN/Y1zn3SAohVuTaLDPptx/fcMyJGSSRhluGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6e:97:9a:5f:1d:64:6c:cc:e9:a6:c5:55:5b:f1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
        Validity
            Not Before: May 11 13:00:18 2025 GMT
            Not After : May 12 13:00:18 2025 GMT
        Subject: CN=89b86b13e51f5407a47a5425a319e4224658f3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:51:0a:d3:d7:64:d7:17:54:c2:22:66:ca:
                    e4:2c:ab:58:0c:bb:bc:78:2f:85:b5:9f:19:4c:ab:
                    72:e1:6e:ae:19:77:c3:46:01:ec:10:8c:56:e0:32:
                    d8:5b:df:7e:84:65:13:0b:0d:9d:2f:8f:3f:80:64:
                    24:91:a8:24:13:e9:81:4f:a0:b0:ca:08:68:58:fe:
                    e0:38:49:78:10:2a:d4:2f:a1:ad:56:84:cb:e4:51:
                    1a:d3:5e:0d:29:4b:0e:9e:e6:a7:32:e2:f8:ac:c1:
                    7a:c7:da:38:85:01:e6:22:b3:6e:bd:38:ba:d2:b1:
                    c2:68:7c:58:f8:88:b8:bf:ca:30:1e:94:e1:ac:35:
                    78:91:a6:72:81:7b:d3:2f:d3:ca:b1:0e:6c:76:97:
                    d4:a8:01:fd:51:4b:e3:65:c3:45:69:42:97:5d:98:
                    ce:eb:9c:32:a2:f5:91:de:d5:c5:a4:79:1f:15:94:
                    78:f3:2e:cb:1f:49:dd:e0:e7:4a:a2:57:7a:07:49:
                    53:19:fe:78:91:50:05:3b:1c:61:a8:f9:b0:aa:b2:
                    04:59:3f:cd:ec:c8:c6:b8:80:40:59:33:22:3d:30:
                    1f:29:69:7f:05:6f:df:db:ec:90:7d:81:0e:5d:d3:
                    64:f3:71:f5:97:44:2e:69:92:c9:f7:1c:9a:1b:6e:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B8:6B:13:E5:1F:54:07:A4:7A:54:25:A3:19:E4:22:46:58:F3:EB
            X509v3 Authority Key Identifier:
                keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:79:32:b8:a5:a2:d8:91:58:16:a7:7a:61:88:74:64:0c:99:
         f2:d8:26:d0:39:45:7f:f8:12:ad:ec:ff:2d:10:5e:40:3b:a8:
         30:28:94:f6:82:3a:ad:23:96:a2:03:b4:9c:cb:f1:d0:ce:69:
         11:3f:78:23:21:d1:92:a8:dc:fc:7a:0f:6d:6f:0c:a4:08:72:
         77:51:2a:05:78:fb:b2:25:e3:62:80:8f:41:b6:9c:0a:72:c3:
         b8:6f:36:29:3a:c0:26:60:08:bd:c7:5f:f0:a9:d5:bd:89:10:
         4a:f3:a5:77:ff:50:e4:0d:79:1b:8e:15:fe:96:5d:29:19:82:
         f8:c7:8a:36:ea:b6:ba:dc:fc:a9:ed:cf:5c:2c:2b:f9:13:05:
         5e:0f:f9:cb:6b:34:1a:e2:a8:88:9a:58:53:28:2e:0d:a4:de:
         28:f6:2e:e6:c6:e5:3d:e2:14:ac:fc:c8:06:6e:65:09:47:74:
         c8:51:a9:4c:7c:22:dd:ad:9d:4f:b2:08:2b:2c:b6:ef:53:ff:
         ae:d4:5a:0e:f2:44:cf:37:da:ac:ed:17:33:09:d0:69:b6:9d:
         13:d8:fc:96:d1:ad:1f:d3:d1:7c:0c:5c:54:02:3c:7f:bd:ac:
         d1:98:2b:3d:ca:93:44:71:83:d7:fd:64:b6:bf:b1:bc:5e:0f:
         a7:ed:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:15:01 2025 by rpki-client