Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
File:                     WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft (raw, json)
Hash identifier:          ed52FwCAJJuTyVnPIf5fIAWtkWL3r0q4mYewZHmcu44=
Subject key identifier:   0F:B1:03:6E:03:23:28:A9:6F:98:1C:D5:8F:E3:16:FC:21:68:F1:D0
Authority key identifier: 58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B
Certificate issuer:       /CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
Certificate serial:       0196A31C28C8EBC6E3FD8A371FB1C4F5C7DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
Manifest number:          023F
Signing time:             Tue 06 May 2025 01:00:53 +0000
Manifest this update:     Tue 06 May 2025 01:00:53 +0000
Manifest next update:     Wed 07 May 2025 01:00:53 +0000
Files and hashes:         1: WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl (hash: cw4i6+hL78wQgiTuqOWU3TQj7HVLpCEtO6ELS04YsrM=)
                          2: Z2JDU3PNXto61tujLWtOdksDxYw.roa (hash: XDiLVtUbcUm1U7CtOsqMZFEyrN50eh3zLLtFQ3J984U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:1c:28:c8:eb:c6:e3:fd:8a:37:1f:b1:c4:f5:c7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
        Validity
            Not Before: May  6 01:00:53 2025 GMT
            Not After : May  7 01:00:53 2025 GMT
        Subject: CN=0fb1036e032328a96f981cd58fe316fc2168f1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:03:a6:e6:43:12:4d:ba:e3:15:d4:15:fd:58:
                    30:50:82:0f:76:8e:ed:8c:59:60:9e:8f:e8:0a:b9:
                    9e:41:04:37:c5:98:ae:7c:d7:2a:8a:30:a7:63:16:
                    7f:ac:17:c8:84:64:3a:bd:24:5b:0a:7f:06:00:73:
                    70:bb:77:d2:54:c8:b0:4f:d3:af:00:01:8a:20:c8:
                    0f:13:c3:09:d0:9a:20:74:5a:38:15:f2:3f:82:55:
                    70:19:99:64:f0:50:ef:83:ae:4d:72:23:16:5f:09:
                    ab:e8:0f:c4:c1:41:4d:a8:89:df:b5:89:6d:a4:23:
                    c9:27:2c:21:e9:b4:35:56:69:37:d3:6f:71:64:fb:
                    e2:a2:2f:5c:22:c2:55:eb:ef:8b:26:ad:43:6a:b3:
                    c0:c5:cd:b0:5d:2f:4d:4e:54:de:12:87:81:7b:87:
                    b1:a8:3b:68:e5:c7:4d:55:de:14:04:9d:f6:c4:49:
                    8c:4a:8f:92:d1:f5:d7:4c:72:db:43:96:64:35:43:
                    09:5e:f5:65:71:47:51:bd:de:0c:fc:65:31:93:29:
                    6e:83:d6:d0:d2:b8:2b:89:f8:a9:74:85:24:74:39:
                    ed:32:00:c7:28:c7:1d:08:83:45:12:64:7d:6a:32:
                    cf:a8:f4:8a:d9:40:fe:8b:a5:b6:0c:9a:19:fe:cc:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B1:03:6E:03:23:28:A9:6F:98:1C:D5:8F:E3:16:FC:21:68:F1:D0
            X509v3 Authority Key Identifier:
                keyid:58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:66:75:2d:53:53:37:7f:37:6a:0b:70:9f:f3:a3:30:90:
         27:1d:dd:77:bc:74:52:a2:e7:21:b8:b9:2b:cb:73:f6:c2:d6:
         8f:77:b1:76:86:96:c8:3a:63:4b:cd:b2:b3:d5:0d:46:74:1d:
         87:bd:70:42:e9:01:36:9c:fd:83:87:6e:0c:6c:34:85:fa:05:
         f2:70:2f:47:49:f3:17:03:09:f9:08:6c:9a:32:da:e2:0e:56:
         46:36:a8:a5:f7:39:a3:71:cc:10:7e:cb:91:9c:85:2f:13:4a:
         81:cb:b7:ce:d8:1b:bd:22:48:ad:0a:b1:f5:fe:76:40:64:4a:
         f9:e7:bf:e4:73:29:da:12:0b:b0:86:d9:42:c3:f6:f6:c3:bb:
         01:82:2b:0a:fa:8a:95:29:6c:9c:4c:76:2f:c3:9e:37:cf:02:
         4e:dd:78:62:80:08:0f:44:b3:e6:6a:0e:d6:67:bd:21:4f:6e:
         ca:4e:01:26:2b:f5:cc:c7:17:ea:eb:23:91:46:b7:8d:e1:30:
         c3:89:a3:63:14:60:8d:12:c1:78:da:98:f6:0e:13:44:c0:a0:
         84:30:a3:e3:fd:30:33:f9:2b:2f:d0:de:32:3d:47:32:80:6b:
         a1:83:19:83:2e:c0:b9:46:56:0d:9f:86:87:23:cf:68:dc:f0:
         bc:27:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:59:23 2025 by rpki-client