Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
File:                     W4M_gwOig5k2kGEKkYWlybaCv_s.mft (raw, json)
Hash identifier:          WIl0PhBGuQI75LlLB1627+kV/7zh9VT/caMIXJ2RFtQ=
Subject key identifier:   77:E6:57:6C:A0:BE:F4:4D:0A:35:37:6C:E1:59:32:EC:73:19:F9:B5
Authority key identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB
Certificate issuer:       /CN=5b833f8303a283993690610a9185a5c9b682bffb
Certificate serial:       0196B3D8D1D9D81F2024179489B27FA3B11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
Manifest number:          152B
Signing time:             Fri 09 May 2025 07:00:53 +0000
Manifest this update:     Fri 09 May 2025 07:00:53 +0000
Manifest next update:     Sat 10 May 2025 07:00:53 +0000
Files and hashes:         1: W4M_gwOig5k2kGEKkYWlybaCv_s.crl (hash: pgDYlH4Rhv6tMvEE0ixhNVfaW7W4e8aMF8FRR2MNW3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d8:d1:d9:d8:1f:20:24:17:94:89:b2:7f:a3:b1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b833f8303a283993690610a9185a5c9b682bffb
        Validity
            Not Before: May  9 07:00:53 2025 GMT
            Not After : May 10 07:00:53 2025 GMT
        Subject: CN=77e6576ca0bef44d0a35376ce15932ec7319f9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:7a:9e:03:a3:43:b1:7a:ee:06:de:fc:9f:
                    51:00:59:6a:bd:b1:28:2d:18:e5:26:21:ab:b8:e8:
                    9e:78:d2:74:63:5b:11:e7:ea:34:95:51:34:70:0e:
                    1b:cd:65:59:ba:5d:e6:c6:38:4e:3e:1c:dd:8b:08:
                    88:d1:71:0d:1c:f3:a9:76:d1:5c:54:05:83:72:77:
                    f2:30:ff:44:2d:6d:0a:f4:6c:ff:d3:b2:25:31:f6:
                    98:30:f0:e1:4c:09:2b:4f:a8:74:22:b8:8d:70:61:
                    03:15:18:21:c8:69:d6:f8:18:c5:fb:24:0b:b5:17:
                    78:b5:87:89:af:8e:94:0c:de:a7:f7:27:be:3f:c5:
                    88:6b:fe:db:48:5e:b6:d5:a2:6c:a3:89:fd:53:b5:
                    b8:fe:e1:b6:5c:08:6b:6b:bb:4d:2c:eb:71:54:cb:
                    a9:4e:f9:fc:65:08:7b:4f:73:15:d6:bf:11:eb:ce:
                    5a:2f:af:bb:32:6c:f1:42:99:7c:c9:b8:68:1e:5b:
                    3e:8a:5c:24:2f:1c:3d:95:ea:93:03:05:76:e1:a2:
                    a1:a4:7a:6a:5f:b8:5d:c6:6e:b9:37:5c:6f:d4:44:
                    17:e6:a4:c7:ac:4b:84:0d:33:7e:68:05:bc:45:ac:
                    84:2e:35:95:48:4f:96:d1:ab:16:ec:c0:1d:78:c2:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E6:57:6C:A0:BE:F4:4D:0A:35:37:6C:E1:59:32:EC:73:19:F9:B5
            X509v3 Authority Key Identifier:
                keyid:5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:85:3b:73:ea:64:d1:73:63:66:de:1f:8b:d8:de:4e:06:
         c0:f8:30:26:73:52:6a:b5:55:7e:eb:44:93:2f:1e:ca:f8:a7:
         08:0b:cb:64:34:1e:c6:f5:0f:7f:33:29:bd:8b:7c:da:27:e6:
         63:82:76:84:8e:be:76:37:18:46:f2:f7:b4:89:6b:e4:b8:bc:
         e5:fa:13:e7:e0:00:e0:cc:83:54:8d:24:b8:52:e8:5d:d5:33:
         52:cb:9e:2a:9b:ad:64:00:40:98:72:9a:27:68:4d:d3:47:8b:
         2a:75:7b:a0:73:a5:58:ce:de:87:ea:13:b4:67:e2:d4:c1:b6:
         02:34:51:16:eb:20:7a:9d:71:0d:0c:97:91:77:4d:e1:34:80:
         40:97:34:4f:a1:e3:66:d7:66:98:4b:39:44:54:71:ec:be:86:
         aa:84:b3:22:eb:00:92:bd:84:ac:d7:0b:2f:04:df:74:0c:c1:
         ae:97:0c:2f:1c:52:08:64:f1:f5:09:03:ca:93:4d:e7:d3:16:
         08:1b:b4:29:ae:a4:1b:ae:6a:c2:1f:67:3a:d0:15:92:91:30:
         d1:fe:91:c7:ee:76:66:40:a1:00:0f:93:94:39:62:51:e8:4f:
         11:2d:ba:81:b3:14:59:19:3c:5c:49:b5:d4:bf:fd:78:19:6c:
         4d:16:62:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2NHZ2B8gJBeUibJ/o7EdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODMzZjgzMDNhMjgzOTkzNjkwNjEwYTkxODVhNWM5YjY4
MmJmZmIwHhcNMjUwNTA5MDcwMDUzWhcNMjUwNTEwMDcwMDUzWjAzMTEwLwYDVQQD
Eyg3N2U2NTc2Y2EwYmVmNDRkMGEzNTM3NmNlMTU5MzJlYzczMTlmOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRp6ngOjQ7F67gbe/J9RAFlqvbEo
LRjlJiGruOieeNJ0Y1sR5+o0lVE0cA4bzWVZul3mxjhOPhzdiwiI0XENHPOpdtFc
VAWDcnfyMP9ELW0K9Gz/07IlMfaYMPDhTAkrT6h0IriNcGEDFRghyGnW+BjF+yQL
tRd4tYeJr46UDN6n9ye+P8WIa/7bSF621aJso4n9U7W4/uG2XAhra7tNLOtxVMup
Tvn8ZQh7T3MV1r8R685aL6+7MmzxQpl8ybhoHls+ilwkLxw9leqTAwV24aKhpHpq
X7hdxm65N1xv1EQX5qTHrEuEDTN+aAW8RayELjWVSE+W0asW7MAdeMJAOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfmV2ygvvRNCjU3bOFZMuxzGfm1MB8GA1UdIwQY
MBaAFFuDP4MDooOZNpBhCpGFpcm2gr/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZjIxNWItMzVlNy00Y2NjLWFhOGMt
YzEyOGYyN2NjYzc4LzEvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kZjIxNWItMzVlNy00Y2NjLWFhOGMtYzEyOGYyN2NjYzc4
LzEvVzRNX2d3T2lnNWsya0dFS2tZV2x5YmFDdl9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5CFO3Pq
ZNFzY2beH4vY3k4GwPgwJnNSarVVfutEky8eyvinCAvLZDQexvUPfzMpvYt82ifm
Y4J2hI6+djcYRvL3tIlr5Li85foT5+AA4MyDVI0kuFLoXdUzUsueKputZABAmHKa
J2hN00eLKnV7oHOlWM7eh+oTtGfi1MG2AjRRFusgep1xDQyXkXdN4TSAQJc0T6Hj
ZtdmmEs5RFRx7L6GqoSzIusAkr2ErNcLLwTfdAzBrpcMLxxSCGTx9QkDypNN59MW
CBu0Ka6kG65qwh9nOtAVkpEw0f6Rx+52ZkChAA+TlDliUehPES26gbMUWRk8XEm1
1L/9eBlsTRZinQ==
-----END CERTIFICATE-----
Generated at Fri May 9 11:20:13 2025 by rpki-client