Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File:                     wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier:          +p02D55fn9jocFBJIejNHKrYJveYCPI2LisRYk0kio0=
Subject key identifier:   7E:EF:A7:F3:FE:08:E0:15:00:8D:C2:CA:D9:B9:4D:EC:E4:2D:5D:C5
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer:       /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial:       0196C3823C648E08EAC155F17CE808B2622A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number:          153A
Signing time:             Mon 12 May 2025 08:00:14 +0000
Manifest this update:     Mon 12 May 2025 08:00:14 +0000
Manifest next update:     Tue 13 May 2025 08:00:14 +0000
Files and hashes:         1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=)
                          2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: Jvuie9ptdylCaobmsU5SJKmnN1/SG/D5sE+GbLrJx+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:82:3c:64:8e:08:ea:c1:55:f1:7c:e8:08:b2:62:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
        Validity
            Not Before: May 12 08:00:14 2025 GMT
            Not After : May 13 08:00:14 2025 GMT
        Subject: CN=7eefa7f3fe08e015008dc2cad9b94dece42d5dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:d8:df:ff:c0:e7:91:f2:cb:e2:82:71:c5:
                    93:03:7d:05:ae:79:f5:bc:29:5b:d9:22:07:0e:7a:
                    cf:f5:b3:ae:1f:78:18:fd:e5:8e:f1:76:99:4f:5f:
                    fc:45:8d:fa:6c:ec:60:22:cb:1a:14:a8:0f:a3:da:
                    4e:49:ef:cf:b4:e4:2e:e8:f6:8e:55:50:58:e2:95:
                    d4:da:fb:fc:bd:30:30:4a:0c:99:4c:1b:73:92:f6:
                    1b:15:4a:28:d9:cd:74:83:de:a9:dc:b6:e0:00:3b:
                    9f:1c:f7:82:5a:df:31:ca:0d:bb:f0:9b:1a:62:e7:
                    dd:88:7c:15:a1:3d:f7:de:87:be:00:6f:3c:9a:9c:
                    1f:fb:a4:49:90:bb:a2:c6:d6:69:7c:92:54:c0:38:
                    e0:97:dc:91:3a:98:ea:e7:62:6b:74:9b:95:10:78:
                    82:24:21:ef:f3:04:eb:db:dc:7e:0c:69:92:7b:ce:
                    7e:ee:29:b5:2d:b7:13:b2:fa:57:39:39:6c:70:6d:
                    ff:2a:57:e4:85:5d:af:f4:32:bd:48:c1:c2:a5:52:
                    d1:87:f4:83:53:19:83:b0:cb:24:13:2b:14:a7:d8:
                    ba:a4:4c:51:58:05:8b:11:7a:a1:d9:06:95:52:f4:
                    3f:c0:d9:35:ed:5b:40:41:39:85:b1:ad:fc:70:4b:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EF:A7:F3:FE:08:E0:15:00:8D:C2:CA:D9:B9:4D:EC:E4:2D:5D:C5
            X509v3 Authority Key Identifier:
                keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:03:44:e3:33:55:cb:a1:d7:51:01:16:9f:85:a7:3d:ce:4a:
         24:f3:27:07:21:57:8c:90:90:e2:67:29:ec:6f:ac:2a:a3:1c:
         40:df:90:b4:6f:f6:b8:4e:aa:4b:19:43:53:ac:26:ca:6e:ea:
         08:52:bb:52:89:38:3b:5a:6d:9e:89:30:ff:1b:f2:7c:ea:32:
         b6:a7:07:df:4a:d7:a1:39:c8:ea:21:a2:da:4d:2d:54:57:52:
         e9:c0:d4:d0:f8:34:17:52:38:00:fc:70:49:c4:64:95:6a:0d:
         d8:6f:9b:a6:c1:e5:6c:ac:76:65:ea:31:a8:06:d3:dc:64:45:
         fe:bf:61:d8:c8:d7:4b:ec:df:5c:01:48:5a:09:7d:94:c8:36:
         16:77:50:1d:6b:8a:9d:d3:42:2c:e6:d7:23:28:b0:f2:b0:7b:
         7e:d5:ff:78:dc:f3:f7:cc:c7:bc:8a:bd:7b:a7:b6:a1:34:1a:
         bd:e1:a7:5e:b8:d6:ac:a1:a2:b2:85:e1:30:18:e3:9e:a5:dd:
         ec:58:c0:1a:3b:b5:e5:67:bf:79:80:7f:00:a0:63:dd:c3:06:
         1b:e4:8b:26:39:bd:14:41:3b:3a:cf:7c:e9:0e:b6:d7:20:0c:
         49:c3:6f:3e:c3:e5:3d:c6:c9:83:c9:8a:07:54:01:0c:67:fa:
         0f:f5:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:28 2025 by rpki-client