Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
File:                     wHgEdmsjU5hblxgIi1xnngw-pn8.mft (raw, json)
Hash identifier:          03j1lPOW6BlTrYg7pfhtL1PQWuz0EZWVvBFwlahKgZU=
Subject key identifier:   C8:F6:9C:BF:B7:86:C7:2C:24:90:48:1F:93:C3:22:7D:01:09:3E:8A
Authority key identifier: C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F
Certificate issuer:       /CN=c07804766b2353985b9718088b5c679e0c3ea67f
Certificate serial:       0196BAED2399131B782501BF015DA9257EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 16:00:25 +0000
Manifest this update:     Sat 10 May 2025 16:00:25 +0000
Manifest next update:     Sun 11 May 2025 16:00:25 +0000
Files and hashes:         1: JQloxPoQ9afiJp-IoXzHvRWMpm4.roa (hash: J8Wxq2Z9UXMMHjhsUvukCz7EJtE55wrWEedjgrBy+C4=)
                          2: wHgEdmsjU5hblxgIi1xnngw-pn8.crl (hash: 98LlvLwgVOBQtbHN+KHXt0EKQb1w97S8/HWsf3OLApo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:ed:23:99:13:1b:78:25:01:bf:01:5d:a9:25:7e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07804766b2353985b9718088b5c679e0c3ea67f
        Validity
            Not Before: May 10 16:00:25 2025 GMT
            Not After : May 11 16:00:25 2025 GMT
        Subject: CN=c8f69cbfb786c72c2490481f93c3227d01093e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:72:14:eb:5f:e7:83:2e:29:20:e3:fa:0c:
                    7e:28:b6:cf:9a:62:9f:35:8c:e8:70:31:27:e8:4d:
                    cc:7c:82:fe:2c:5f:5f:62:38:f8:26:da:d7:2c:90:
                    1b:c0:44:f6:54:6b:d0:fa:09:7c:f8:a3:7d:18:a0:
                    dd:4a:31:b2:36:a0:c1:cb:14:15:e1:c4:7d:41:47:
                    12:5f:5c:18:b1:34:ce:39:0e:72:b2:17:c7:48:8d:
                    c7:6e:6e:22:d7:fb:85:79:db:47:6e:30:40:b4:6b:
                    85:29:16:2c:2d:d2:30:76:ae:e7:97:d7:a9:da:36:
                    cc:d6:3e:c1:af:76:03:00:be:73:3a:08:ec:dd:93:
                    8e:46:f1:43:70:f8:56:d0:83:e2:b3:cc:10:59:eb:
                    e9:af:45:89:5e:7b:dd:df:e9:30:47:15:8a:2d:0f:
                    21:93:19:96:52:c6:f4:f3:b6:8c:71:02:85:cb:4e:
                    34:9a:f2:c0:7d:a8:5f:e5:1c:f1:1d:c7:8d:a9:49:
                    72:82:7d:a3:d6:04:8b:da:86:e5:fa:ff:28:d4:47:
                    62:9a:db:44:c2:b1:dc:82:03:7c:f4:9f:e6:39:02:
                    8c:ed:3f:80:56:71:2c:ee:96:46:13:a9:ea:b1:7a:
                    42:5b:75:d1:88:c1:aa:62:33:d9:b2:4e:d7:f5:33:
                    c6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F6:9C:BF:B7:86:C7:2C:24:90:48:1F:93:C3:22:7D:01:09:3E:8A
            X509v3 Authority Key Identifier:
                keyid:C0:78:04:76:6B:23:53:98:5B:97:18:08:8B:5C:67:9E:0C:3E:A6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHgEdmsjU5hblxgIi1xnngw-pn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2560f-1c4c-4ca3-a63b-304fa18898bf/1/wHgEdmsjU5hblxgIi1xnngw-pn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:61:fe:c1:39:0f:f2:3f:6f:0d:7d:f0:0f:2e:58:bc:16:
         3d:db:98:ce:0a:21:ac:b5:25:56:f4:0c:49:6e:a1:fd:32:3a:
         b4:82:26:da:70:36:da:16:55:e9:61:fb:33:da:a7:53:03:38:
         30:cd:74:29:1f:cd:a3:fd:8b:92:43:6a:da:bd:a0:7c:6b:92:
         d3:a4:eb:cd:89:d5:cb:b4:e9:10:7e:7d:93:1b:c5:ae:6d:57:
         e1:19:48:63:f2:5f:0b:05:2b:a8:fb:2b:33:02:f1:af:15:ce:
         95:d2:05:bf:4a:67:cc:e8:ce:11:c4:17:b5:0b:bd:36:ce:de:
         06:8e:08:14:18:c1:38:40:1b:e7:e8:86:cc:b7:f5:6b:74:24:
         55:93:0f:0a:59:f5:7e:8a:fe:a3:4f:33:22:23:07:7d:0a:b3:
         69:7e:cd:d5:af:48:9d:85:c9:5e:0a:b5:44:65:dd:be:4d:7e:
         5d:3e:bb:da:78:f6:f0:f9:e8:4f:5b:00:ad:18:bd:d0:bf:7e:
         b0:32:8e:71:ee:da:91:4a:29:c1:73:d3:5e:fb:2c:46:12:29:
         1a:d5:e1:89:b9:61:fa:46:fe:e9:8f:a4:7e:cc:b3:59:ee:31:
         9e:7b:4e:96:66:5a:2a:9c:cb:a1:e7:e4:fe:93:9f:65:31:eb:
         d3:66:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:41:58 2025 by rpki-client