Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File:                     weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier:          mwBmITDW7EiTqJ4asRf60UKOmfY5CZlqC4KLPIjXgmQ=
Subject key identifier:   D0:84:B5:B1:98:09:CC:B1:1A:09:15:CB:22:36:07:60:A1:E3:FB:2F
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer:       /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial:       0196BA7F7CBE0D23EDE2F47404AA05DE6AFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number:          13AA
Signing time:             Sat 10 May 2025 14:00:39 +0000
Manifest this update:     Sat 10 May 2025 14:00:39 +0000
Manifest next update:     Sun 11 May 2025 14:00:39 +0000
Files and hashes:         1: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (hash: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=)
                          2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: pIcjSzcKlvNNMSe/7m2h50ten0f+PsQvoFwFDCw65d4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:7c:be:0d:23:ed:e2:f4:74:04:aa:05:de:6a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
        Validity
            Not Before: May 10 14:00:39 2025 GMT
            Not After : May 11 14:00:39 2025 GMT
        Subject: CN=d084b5b19809ccb11a0915cb22360760a1e3fb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:06:49:f4:f6:1e:55:d1:15:d6:f6:14:9f:
                    a5:ef:d8:b0:da:97:11:e0:5c:62:00:b6:29:8f:23:
                    c3:8a:a2:e9:2e:10:3e:38:b5:7d:b2:4b:d6:72:16:
                    0d:eb:a8:cb:b5:82:c9:10:4f:ee:77:f3:29:2a:94:
                    b1:f0:de:cc:73:40:66:45:f9:8b:ef:5e:c9:27:af:
                    5f:34:98:7a:e5:3d:54:de:93:4c:fb:e9:76:3c:41:
                    91:cf:2e:34:93:35:ac:7c:0e:7f:2a:db:de:99:2e:
                    7d:8b:f1:70:11:01:48:2b:59:d5:d7:de:dc:cf:8b:
                    32:71:63:de:94:e2:17:d5:26:a3:5f:8c:3a:70:89:
                    d6:69:a7:15:03:a0:67:28:a9:bf:54:a5:64:d6:03:
                    12:28:86:c0:a5:3c:6e:8b:48:54:83:d4:fa:ca:74:
                    73:b7:b0:24:91:4c:91:55:35:52:94:bd:71:af:d3:
                    27:45:d4:f2:78:6c:99:90:4c:09:8c:49:82:77:18:
                    0e:b5:37:6c:f8:ba:fe:65:7a:51:aa:50:e9:ea:df:
                    1e:de:4d:d3:0f:e3:ea:5a:5e:d0:3e:1f:c7:31:5f:
                    09:bc:f0:24:1f:ac:a8:98:03:a7:e3:5c:0a:59:f5:
                    58:d4:01:7d:42:a1:a2:0e:44:4f:6f:81:08:01:c6:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:B5:B1:98:09:CC:B1:1A:09:15:CB:22:36:07:60:A1:E3:FB:2F
            X509v3 Authority Key Identifier:
                keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:62:08:86:7e:e8:54:55:62:eb:a8:18:f3:2c:d5:f6:5a:ad:
         4e:62:43:3a:7e:aa:16:8d:a1:bd:4f:d4:6b:62:e2:c5:18:a6:
         56:4c:83:b4:4e:ca:07:8a:89:56:91:2c:41:96:82:bb:e1:60:
         a9:57:5e:d5:89:0e:c3:fc:4b:9e:94:f6:0b:34:02:35:ca:5e:
         3f:ef:0f:d4:58:5f:5c:e0:d6:8b:e9:f3:01:2d:bd:d1:08:b4:
         3c:3c:d6:b7:7c:d2:b5:ae:99:30:b8:07:63:81:c6:3b:88:d5:
         a8:00:6b:bc:4a:31:6b:92:ae:8c:48:9e:12:d0:ed:6b:96:bf:
         df:c4:9e:5c:b2:e3:79:7c:c8:00:6d:29:bb:7c:4c:f7:06:08:
         d8:0b:19:0b:b1:16:eb:6e:d2:80:cf:2e:2e:4f:fa:95:47:58:
         ad:1c:f8:56:90:aa:06:19:f8:a1:6c:ca:24:73:e8:e1:47:7d:
         44:41:19:6b:5f:72:b0:56:2c:95:f1:5c:d9:ca:75:8f:12:3c:
         9c:87:91:ea:12:8e:b0:ac:ba:61:ac:84:1a:c7:e8:42:c9:f4:
         df:6a:1d:23:4f:eb:ac:66:7e:18:9d:3a:0c:ab:c5:ef:ed:ae:
         07:b8:b6:25:cd:b2:c8:f3:33:33:99:57:65:5c:f4:33:e6:f8:
         db:b8:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:11:52 2025 by rpki-client