Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File:                     wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier:          Yo1PD3IQiaSDXhQv5qCQGcPtQpcuyVLua5V/FyJKGLQ=
Subject key identifier:   56:C3:F7:D1:84:73:45:03:F3:27:FE:CE:B0:86:CC:2D:0B:5A:9A:9F
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer:       /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial:       01969F764111EC3E6C82D0FCB5CC39A881D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number:          12E0
Signing time:             Mon 05 May 2025 08:00:49 +0000
Manifest this update:     Mon 05 May 2025 08:00:49 +0000
Manifest next update:     Tue 06 May 2025 08:00:49 +0000
Files and hashes:         1: IIaW89ZzFdGKWt-qkretRuZFhUw.roa (hash: +wV4CyXS7FosexYu6VMQZY2Kh9jsLDP8nTTtEBowsxI=)
                          2: hKI1gIRkFSpeDRxr6Gy5U-0E8bg.roa (hash: wtwNxYOC1NaLQTBIVmgD52Go7NqEorx1g4IWXnECaeA=)
                          3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: bQSTkl476sek/qYcMQutohlFvTXm2H0q+w5w+X2ylz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:76:41:11:ec:3e:6c:82:d0:fc:b5:cc:39:a8:81:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
        Validity
            Not Before: May  5 08:00:49 2025 GMT
            Not After : May  6 08:00:49 2025 GMT
        Subject: CN=56c3f7d184734503f327feceb086cc2d0b5a9a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:2d:fa:1b:30:4a:a1:fb:66:fe:5e:7e:e5:
                    8d:11:b2:06:94:33:cf:07:1b:79:d0:92:38:40:9c:
                    02:34:f6:b0:77:37:70:c4:e3:87:7a:ce:bb:79:67:
                    17:b4:07:f8:05:11:0e:a2:a2:3c:7b:43:b1:ee:42:
                    53:16:2a:87:6f:69:18:98:54:c7:87:3d:4d:2a:b6:
                    8e:0e:1b:46:ce:4c:6d:ab:f8:6f:95:a3:73:f4:81:
                    50:7b:af:7b:be:4a:5d:98:87:fb:f1:fa:b3:8a:cc:
                    02:47:4b:90:ed:7a:9d:e8:e7:7c:57:99:89:22:0e:
                    bf:e9:30:86:63:d2:a4:c8:f4:d3:69:6b:e0:06:d8:
                    5e:56:7e:51:65:e1:b5:89:3a:ba:f2:71:10:a9:0e:
                    46:cb:27:08:72:d8:f4:0e:cc:8f:9a:e4:f6:f9:29:
                    06:61:86:7a:c4:5a:a6:4b:2e:52:39:b1:81:3d:83:
                    1e:97:26:7e:71:a4:f5:75:3d:ac:db:54:71:95:92:
                    4a:8b:9c:26:4f:14:37:8c:ca:3a:dd:47:60:ac:17:
                    30:ac:aa:6e:fd:ce:08:2e:6e:9c:a7:01:f2:78:55:
                    5a:37:6f:53:4a:5b:75:5e:f6:d6:c8:ca:91:b9:3b:
                    c4:cb:06:62:c6:8b:6a:27:f3:70:4b:98:42:d7:ab:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:F7:D1:84:73:45:03:F3:27:FE:CE:B0:86:CC:2D:0B:5A:9A:9F
            X509v3 Authority Key Identifier:
                keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:22:cc:2a:95:d2:e2:0a:7e:29:64:8b:ca:b0:e4:70:12:fa:
         41:fe:10:8c:ee:7b:d9:a1:92:b4:a8:28:06:be:51:de:ca:47:
         c6:03:d3:87:a4:34:4a:5c:69:2f:ee:97:03:47:02:45:6f:97:
         99:2a:4b:e2:3c:bb:25:6f:19:c2:29:ca:0c:a2:d9:05:09:e3:
         e5:0b:8e:57:b8:96:61:41:58:f7:3b:5f:26:ef:6d:15:ad:77:
         fd:2e:5a:38:b6:6b:95:2b:46:a7:ed:ce:84:b2:a2:34:8a:4c:
         bf:b3:d3:21:bf:1f:d0:4b:5b:6b:9a:ea:ea:21:8e:ca:1c:7e:
         2f:6c:cd:b6:ed:68:07:8f:28:a4:ac:7a:29:a5:7e:2f:bf:7f:
         82:17:1e:b5:77:47:7c:8f:9c:fa:30:a8:d0:d1:7e:7f:e4:b3:
         3d:b0:d4:42:5c:5e:2d:71:f7:13:cd:ac:8d:d6:c0:8b:ae:91:
         55:e2:83:20:67:11:6f:cb:b4:ff:41:25:23:b9:0f:bc:4d:f3:
         7e:f7:68:18:a0:27:03:79:f1:c7:b8:47:b9:b9:66:3d:91:12:
         4b:7f:48:27:33:08:85:32:ee:30:ce:39:f5:6e:49:dd:23:cd:
         d3:d9:98:c9:66:3f:c7:c4:6a:70:cf:89:3e:04:c4:3f:b4:1d:
         dd:62:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:48:50 2025 by rpki-client