Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
File:                     WbWUsQer_jKkbE0dvge7tOa7Fjo.mft (raw, json)
Hash identifier:          4Z1TIqvRyy8j8JKNBlYQgNbOIbCING7xus8zebq1Qkg=
Subject key identifier:   32:2A:6B:7A:5D:5B:C9:68:EA:EF:2A:D2:F1:24:40:F1:67:74:53:B0
Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
Certificate issuer:       /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Certificate serial:       0196AF1FC511135ED51FAA49EF018DE9604D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
Manifest number:          09BF
Signing time:             Thu 08 May 2025 09:00:16 +0000
Manifest this update:     Thu 08 May 2025 09:00:16 +0000
Manifest next update:     Fri 09 May 2025 09:00:16 +0000
Files and hashes:         1: WbWUsQer_jKkbE0dvge7tOa7Fjo.crl (hash: 6dpoMi6FXpDOwCyTm8EKB6zJoBq0GXlhOnmPp+Wtbl0=)
                          2: iaYhX-wTSSW1QYw64E4AzhGwws8.roa (hash: wTQucH27CFyiNY63Xms6GuDAYhKr9yvb+MoiHvTWRCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:1f:c5:11:13:5e:d5:1f:aa:49:ef:01:8d:e9:60:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
        Validity
            Not Before: May  8 09:00:16 2025 GMT
            Not After : May  9 09:00:16 2025 GMT
        Subject: CN=322a6b7a5d5bc968eaef2ad2f12440f1677453b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:f4:85:0c:e3:b4:cc:c2:a0:d9:e4:a7:75:
                    03:66:83:59:1d:84:7f:0a:1f:ea:c5:b8:76:6c:f9:
                    29:e7:04:89:9f:48:f3:27:1c:90:3f:19:3c:d8:60:
                    83:1d:e5:e8:90:22:07:9b:d5:67:c3:62:d6:86:82:
                    3d:ab:5b:a0:8c:f3:13:40:f1:8f:44:4c:22:61:ec:
                    ce:15:d5:8d:a5:06:c8:ec:fb:0d:aa:9b:0e:44:8c:
                    98:89:6c:75:9c:46:42:03:c9:e8:8e:cf:c7:d6:7a:
                    fc:8d:1a:73:61:b5:68:63:65:53:4c:d9:3c:ee:69:
                    02:3a:c3:82:69:1d:f4:38:0d:ca:ae:7f:65:91:70:
                    16:c8:34:58:d7:2a:3d:09:5d:8b:71:b3:31:a5:89:
                    ac:d4:71:37:0a:6c:2c:7e:77:a7:fc:fc:35:0d:c0:
                    c4:09:08:67:5c:d6:19:b7:6f:bd:57:07:7f:75:09:
                    e7:79:f2:c3:b1:84:35:f6:99:fa:4b:83:00:e8:ed:
                    e3:1a:d1:75:6c:57:7f:c2:16:b8:e5:41:8c:09:6d:
                    ee:f1:45:f4:ab:24:ab:33:d4:3b:7e:af:d6:99:9c:
                    e2:93:21:b6:ec:39:41:f3:f5:f4:ba:08:2a:23:36:
                    ae:2c:16:03:47:10:46:f5:1a:9e:7e:f2:dc:a7:8e:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2A:6B:7A:5D:5B:C9:68:EA:EF:2A:D2:F1:24:40:F1:67:74:53:B0
            X509v3 Authority Key Identifier:
                keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:06:ce:7c:81:2f:4f:d8:c9:c7:17:7d:78:fa:54:e7:ef:
         74:47:cd:7d:8f:96:8f:b7:1f:64:b3:51:a3:68:fc:9c:ba:67:
         c3:15:27:74:66:f5:9f:80:f4:18:3b:be:32:85:c5:1c:56:cc:
         9e:3a:20:a6:b8:5b:41:9e:58:c6:35:cf:ba:f7:f0:c3:c1:b8:
         3b:13:de:9a:57:be:1c:0d:62:d5:ce:b3:9e:9f:34:9e:c3:ff:
         9b:36:87:43:d7:2b:1f:a9:a3:19:9f:5b:bc:03:d6:1f:30:5f:
         50:71:f9:6f:57:c6:bc:25:82:ce:cc:97:fc:ba:8e:41:36:86:
         e4:87:c2:3d:90:2a:5c:53:bb:60:9b:5f:bc:45:70:58:ed:17:
         8b:9a:c0:25:2d:c2:d6:de:60:bb:cb:bf:80:50:d6:7b:23:20:
         63:fe:b3:bd:fe:56:9f:d9:ab:a4:d4:81:dd:c9:22:98:27:e4:
         4e:33:0b:b8:b4:1a:30:95:4a:eb:ab:f5:19:f9:b4:48:ea:da:
         4c:41:84:f6:08:3b:12:cd:f2:da:de:a0:6a:ca:0c:22:7c:e6:
         ee:5d:ac:fa:17:09:d8:3f:b4:56:bb:fc:4f:73:b2:98:76:35:
         89:ac:7c:f8:f4:68:c9:c3:5e:c4:37:0f:ac:ef:eb:cb:e5:ff:
         6c:19:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:02:19 2025 by rpki-client