Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          82h9TO7eK5exnZlGgK9MtOxGMSPxRIGs6RVdp9dIu/E=
Subject key identifier:   11:F4:E8:B2:03:5C:14:29:E2:E9:36:1E:88:69:7B:A0:35:C4:43:60
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       0196AEB2B0B76E487B657836803FEF997037
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          1532
Signing time:             Thu 08 May 2025 07:01:08 +0000
Manifest this update:     Thu 08 May 2025 07:01:08 +0000
Manifest next update:     Fri 09 May 2025 07:01:08 +0000
Files and hashes:         1: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: G7qnxy1j42SeRrRx7XY+44BOevXzHPQlC/6Kt3Iaylk=)
                          2: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (hash: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=)
                          3: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (hash: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=)
                          4: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (hash: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b2:b0:b7:6e:48:7b:65:78:36:80:3f:ef:99:70:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: May  8 07:01:08 2025 GMT
            Not After : May  9 07:01:08 2025 GMT
        Subject: CN=11f4e8b2035c1429e2e9361e88697ba035c44360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:73:3c:df:32:c7:0b:09:85:52:dd:3f:19:
                    2f:f8:3e:53:f8:fd:97:89:65:df:b6:5a:0c:41:e7:
                    d3:b7:d5:c1:2a:84:67:1f:80:2f:e1:ba:c6:7e:d1:
                    2b:30:45:dd:1d:67:1d:68:53:15:20:b7:25:18:9c:
                    cb:04:0a:45:63:aa:a3:90:8f:84:e8:ad:23:2b:8e:
                    d4:71:4c:7b:0b:d4:43:5c:0c:66:4f:d8:c8:02:ef:
                    89:5a:34:f4:08:8d:45:b2:9c:78:d3:72:0b:5a:50:
                    c5:41:74:e1:85:8f:f6:05:9f:50:c4:70:46:dc:7a:
                    83:ba:1f:33:40:f5:9b:c9:cc:61:93:cc:6b:6f:8c:
                    16:1f:fb:39:dd:4c:1f:e3:28:cc:44:cc:a3:39:a0:
                    e9:a8:7d:57:4c:42:cb:f7:5c:a3:4c:d1:91:20:15:
                    16:7e:46:78:5d:2c:f6:0c:a6:6e:7e:fe:ce:65:3c:
                    c6:91:5f:c1:8f:ef:c8:20:47:5f:92:15:8d:78:e0:
                    c0:9a:c3:8f:6f:da:43:44:c0:3d:16:ee:fb:ca:88:
                    61:6b:f9:02:28:3d:cd:04:79:01:f6:b5:54:d3:5f:
                    ac:a0:7e:2e:62:41:96:ea:e4:c9:38:aa:d2:6a:a7:
                    23:4c:2e:ab:1f:ea:03:af:5f:b4:7a:2e:e7:86:70:
                    6f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F4:E8:B2:03:5C:14:29:E2:E9:36:1E:88:69:7B:A0:35:C4:43:60
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:14:5a:eb:e3:dc:a2:3f:5f:33:f8:56:6a:c0:ed:f0:35:8a:
         8d:9b:36:eb:17:30:71:0f:7b:db:0c:a8:4c:41:fb:a4:60:fd:
         4a:87:54:25:9a:43:1d:ea:43:da:d6:bf:c2:2e:8c:cd:53:9e:
         43:04:07:60:34:59:0c:25:59:a1:f0:3a:e1:43:19:19:d7:1b:
         70:ee:e5:be:8c:54:46:ff:70:c3:c5:46:4b:b3:cc:1d:45:9d:
         81:7a:25:f4:82:09:68:49:5a:1e:19:bb:34:2e:fd:91:fb:e9:
         dd:58:b2:e8:c8:f5:da:66:e0:ef:e7:c8:bd:fc:b3:3b:1b:fc:
         52:24:97:f7:ff:1c:1d:d1:26:35:ec:69:02:64:b7:db:a6:0f:
         4c:59:7f:f1:a3:3c:8f:80:98:39:99:67:1d:bb:99:c6:21:9a:
         a2:20:76:c9:e3:92:25:e8:00:c3:59:a8:79:89:68:20:e4:dc:
         97:24:49:9d:68:09:2d:c9:ee:38:79:b7:d5:58:30:b5:0b:57:
         ef:aa:f7:d7:1c:98:8a:9e:d6:46:a9:71:d6:bc:bb:30:c2:92:
         0e:d4:67:57:d9:48:ac:e2:07:27:f6:5e:08:19:0a:16:ad:fb:
         9f:9c:ac:3b:e1:38:7c:72:b6:ab:80:68:a8:32:96:67:cf:3f:
         92:7d:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:44:34 2025 by rpki-client