Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          5rKYd+l/rUbhtwIe7I7aF3mRVM9HJRch6x1H8ZWhJdo=
Subject key identifier:   DE:55:AA:68:2B:F2:ED:BA:D9:A5:77:11:26:07:18:26:65:90:91:15
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       0196B4B3FAB04D1DE42C7F3E17593BB830B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          0334
Signing time:             Fri 09 May 2025 11:00:15 +0000
Manifest this update:     Fri 09 May 2025 11:00:15 +0000
Manifest next update:     Sat 10 May 2025 11:00:15 +0000
Files and hashes:         1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: 4hrjUH7nPBlS3WUrw8YpnDoZA7fK4+ceCKQt/yL2O5g=)
                          2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b4:b3:fa:b0:4d:1d:e4:2c:7f:3e:17:59:3b:b8:30:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: May  9 11:00:15 2025 GMT
            Not After : May 10 11:00:15 2025 GMT
        Subject: CN=de55aa682bf2edbad9a577112607182665909115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:2b:25:fb:41:dd:97:76:6e:3a:c4:5d:56:
                    93:e4:1b:17:e9:d5:30:61:dc:3d:c5:9b:23:e1:5f:
                    21:62:44:c2:d1:1d:72:eb:a1:74:14:85:d5:2c:03:
                    c3:56:a4:f5:2a:9f:1a:b6:3a:d6:90:83:d2:69:6f:
                    14:a7:b2:00:96:c0:82:b4:7c:fc:66:c2:07:ba:e7:
                    14:b5:b8:db:4f:e3:15:7f:a1:3c:b7:48:d4:0e:a9:
                    4b:00:bc:a4:fb:9b:2c:4d:01:72:72:e7:03:f1:80:
                    eb:39:4a:bb:af:53:e4:44:c2:14:2d:f6:a2:d9:0d:
                    e9:88:eb:73:c2:c3:03:7f:91:f8:61:3a:ff:e3:3b:
                    71:63:e9:04:10:f8:5e:ee:69:37:79:d4:a0:3d:67:
                    6a:24:d6:05:56:f4:2c:08:bc:35:77:89:82:88:60:
                    cd:a1:8a:53:5d:e0:a8:16:f9:10:eb:92:62:e3:01:
                    28:76:41:cf:7b:a0:4a:37:40:9b:81:9c:bf:69:e1:
                    93:64:64:d8:53:b8:2a:38:74:00:94:a1:2e:22:99:
                    63:d6:64:05:4d:b9:14:39:2a:66:13:cd:73:0f:8e:
                    c3:dd:9d:df:d6:cf:05:67:b8:f7:d2:31:44:47:69:
                    38:30:22:64:b9:69:97:fe:6f:61:42:a5:c3:19:58:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:55:AA:68:2B:F2:ED:BA:D9:A5:77:11:26:07:18:26:65:90:91:15
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:01:f1:73:3c:f9:44:e8:ce:5a:1f:21:f9:fc:9e:11:4b:20:
         ff:f1:07:33:5a:61:08:ba:0f:ff:f1:b4:36:f4:69:62:dc:1d:
         86:c0:76:35:19:ca:fc:d9:07:21:ba:96:bc:49:60:e8:14:3b:
         df:08:23:4f:a1:73:df:89:15:e7:71:a3:9d:a0:07:25:ae:96:
         64:9c:3a:0d:6f:8a:b1:cd:05:5a:51:63:43:15:05:63:3e:cc:
         85:5d:52:04:54:c4:29:c1:50:43:3f:13:46:68:79:d5:19:ef:
         e7:f6:49:13:24:4b:d7:1f:e8:0b:93:fb:eb:97:39:9c:9d:62:
         3e:a1:9f:aa:a0:d4:98:43:8c:7e:07:40:30:ea:f0:0b:e3:0e:
         f4:50:0e:cb:77:1d:32:c7:ad:fe:a0:d6:d6:d9:13:b1:15:8a:
         4d:76:3b:e2:43:73:17:54:c7:87:ac:51:ab:89:bf:03:f0:10:
         ba:47:02:54:3f:0b:a6:ab:19:47:0f:94:c1:8c:9b:70:40:c6:
         2f:07:51:2d:0f:17:82:ef:c3:f7:71:5b:d9:a5:21:92:ad:43:
         d1:de:98:dd:6e:e9:8c:b0:19:ab:0a:3d:13:33:d2:bd:de:23:
         1c:05:08:0b:84:b8:23:f7:af:d9:10:99:fb:ad:95:72:84:9d:
         59:97:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 14:12:14 2025 by rpki-client