Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File:                     WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier:          HKCIL+F+Vmv174sHLJnRQEqQlxvnzNKpv5vCVQ0o8O4=
Subject key identifier:   64:64:23:AE:F1:A8:13:CB:58:AC:2E:90:07:94:64:C0:6E:01:DA:9A
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer:       /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial:       0196A6F8D4168B5B3230B270FCE0989EF0F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number:          0935
Signing time:             Tue 06 May 2025 19:00:47 +0000
Manifest this update:     Tue 06 May 2025 19:00:47 +0000
Manifest next update:     Wed 07 May 2025 19:00:47 +0000
Files and hashes:         1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: Pizqycs/ZA/X9powRObKJEtcKqrt5YfFknanWfoba/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:f8:d4:16:8b:5b:32:30:b2:70:fc:e0:98:9e:f0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
        Validity
            Not Before: May  6 19:00:47 2025 GMT
            Not After : May  7 19:00:47 2025 GMT
        Subject: CN=646423aef1a813cb58ac2e90079464c06e01da9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:ba:89:49:e3:8f:bb:fb:40:40:7c:21:91:
                    ce:37:f2:9f:c4:92:bc:3b:e3:b9:8a:30:a8:d2:48:
                    1a:af:92:36:bc:7b:63:72:13:a6:d3:a8:8a:dc:f8:
                    14:4d:47:c0:0c:9b:e2:36:3b:7d:ab:65:b4:c3:be:
                    3d:ae:ba:c2:c9:54:6e:95:28:c8:24:d9:4a:a9:ce:
                    fc:f8:ea:fe:c0:ec:84:67:23:cf:25:02:45:a6:30:
                    7a:61:b4:5b:2b:78:12:5e:7a:9a:9d:ae:4d:a3:f2:
                    da:8d:fc:e3:de:8b:90:2f:41:c7:df:c7:5b:09:1f:
                    84:07:fa:85:8f:1e:51:99:47:bd:d8:b8:f6:f7:58:
                    c9:5b:c9:16:2f:37:6c:1d:ef:24:2a:0a:bd:2d:ce:
                    64:75:8d:45:c3:e3:11:2d:43:d6:ce:a8:ca:81:91:
                    40:7a:95:50:72:57:1f:be:e2:45:0e:fd:d5:8f:22:
                    09:77:d7:df:9b:90:57:7e:91:f4:df:03:8f:7f:3e:
                    cf:f4:ca:fd:f3:be:17:8c:a0:9d:3a:c1:5d:df:75:
                    c3:a7:ca:b1:75:01:05:73:33:e2:b2:09:87:cf:93:
                    be:0b:15:bc:8d:9b:82:75:44:5b:a5:cc:91:be:84:
                    1c:83:7d:e2:e5:e7:a3:f1:2a:1c:ae:74:d8:0f:d9:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:23:AE:F1:A8:13:CB:58:AC:2E:90:07:94:64:C0:6E:01:DA:9A
            X509v3 Authority Key Identifier:
                keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:46:07:5c:ce:42:9d:13:5d:11:2f:9c:4a:db:e6:a2:9d:6d:
         cf:1e:09:07:60:0e:c0:43:37:db:67:de:db:0f:bb:90:6a:31:
         9d:97:1f:10:b2:1f:25:d2:35:2b:d9:f5:20:c9:dc:fe:66:4f:
         94:68:79:c1:97:13:3d:da:4f:46:22:79:87:97:b8:f9:5e:90:
         30:f0:6c:13:1f:8b:49:70:a9:47:bf:a9:24:9f:da:04:b9:f2:
         6f:42:40:b9:2d:45:cb:39:84:59:cc:ea:ec:7e:68:2b:5c:ed:
         9e:d1:37:a7:35:86:58:ed:f0:62:cf:74:00:be:20:23:52:52:
         8f:00:67:07:3b:aa:d7:78:ab:cc:38:19:32:61:e5:60:8d:70:
         aa:ef:65:c7:bd:f2:f8:14:4b:5b:93:e3:4d:83:f6:74:b8:02:
         6f:95:54:88:d8:fa:d6:29:49:de:f5:5d:b6:ee:e8:fe:ed:97:
         fb:1e:f1:b2:29:4b:fa:f5:e8:89:5d:cd:a1:f0:d8:81:a3:b1:
         3f:43:3f:f9:c3:80:cf:62:5b:1f:49:46:21:c3:1a:d7:10:eb:
         74:cc:22:07:b4:76:28:4c:9c:ae:25:c7:49:e8:c8:a9:9c:f5:
         9e:87:93:d0:60:4d:1a:19:78:3c:e2:db:c0:61:9b:fc:a4:b5:
         c8:99:8f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:55:00 2025 by rpki-client