Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
File:                     WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft (raw, json)
Hash identifier:          lA9b6WXdwWs4fSo949Xok58dxLmJjzgbKP3Z6n00nkg=
Subject key identifier:   43:0A:0C:FA:EC:90:47:E0:E4:F7:87:97:39:5B:79:08:81:E1:11:CC
Authority key identifier: 59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5
Certificate issuer:       /CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
Certificate serial:       0196DDB0135AD60B14ACF94A94CCA76CAF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
Manifest number:          1283
Signing time:             Sat 17 May 2025 10:00:26 +0000
Manifest this update:     Sat 17 May 2025 10:00:26 +0000
Manifest next update:     Sun 18 May 2025 10:00:26 +0000
Files and hashes:         1: WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl (hash: Tu6Fk4TDUCLsYzMo+AebIXFn6PXMm5zbINmNyqmzzhQ=)
                          2: Xihi8aGiKGmm1wm5o0bdg-SFO4M.roa (hash: UB6flWnnaqdKwm5uBg0CvnmFwbf9VSTpt0Wz6M2wzJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dd:b0:13:5a:d6:0b:14:ac:f9:4a:94:cc:a7:6c:af:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
        Validity
            Not Before: May 17 10:00:26 2025 GMT
            Not After : May 18 10:00:26 2025 GMT
        Subject: CN=430a0cfaec9047e0e4f78797395b790881e111cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:28:9c:3f:85:f2:3c:9f:cb:64:47:0b:0f:8a:
                    ea:8d:60:8e:dd:8c:24:4f:f8:1b:49:0d:e9:12:95:
                    ad:8f:6a:e5:58:ae:c4:7b:c0:b8:cf:ee:f8:aa:39:
                    0f:07:87:b1:d4:9c:9f:fe:8c:8e:b4:55:67:6d:58:
                    3b:bc:ae:d2:38:22:4d:fc:1b:9d:72:4c:4f:1d:ca:
                    aa:fa:47:f6:e1:b3:28:ea:4d:b2:f2:d8:2a:d0:24:
                    60:47:f4:79:3f:c6:53:55:cb:2b:6e:af:dd:45:8f:
                    6d:7b:ca:de:d7:f0:4f:92:e0:bf:d2:d5:7e:cd:f7:
                    39:fc:38:d3:72:3b:cd:99:d5:c7:bf:5f:39:f9:63:
                    8a:7e:f8:29:60:60:0d:30:c7:51:c3:2c:4e:a7:4e:
                    2f:c4:4e:b0:d7:95:59:e7:3e:64:e3:94:f0:5a:1e:
                    bf:89:ef:59:e4:b7:7d:00:50:3d:e4:56:4b:0a:36:
                    5e:85:7f:8e:1d:55:5e:95:b4:cc:57:de:73:22:51:
                    f4:cb:52:7f:06:99:b6:1d:17:e5:57:9a:54:db:b2:
                    87:90:f1:a4:10:80:a0:aa:e2:8d:0f:70:fd:9b:f2:
                    1f:a1:a0:26:e6:fc:ed:1a:9a:7d:fc:f6:7f:79:c5:
                    d6:7c:b4:70:d9:15:4d:f3:ba:a8:78:c9:f8:b5:22:
                    13:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:0C:FA:EC:90:47:E0:E4:F7:87:97:39:5B:79:08:81:E1:11:CC
            X509v3 Authority Key Identifier:
                keyid:59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:ae:4e:48:fc:09:6d:df:b8:a2:78:5c:86:3e:bb:60:41:
         51:61:3c:59:79:32:1d:71:d6:ba:81:bc:d8:3b:c6:05:05:3e:
         77:be:74:67:c5:30:b8:98:00:b3:f3:47:84:5a:63:d3:ba:63:
         f3:12:35:c3:4c:ef:2e:7c:44:2f:05:ef:3b:49:19:35:46:90:
         80:7e:89:cb:50:e8:ab:13:90:d4:b7:ee:1c:1d:73:77:93:be:
         6c:76:1b:38:09:d8:0f:e2:84:8c:f1:e5:9c:06:02:00:0a:6e:
         52:19:90:46:f8:e9:e3:63:5d:3b:1e:ad:fa:d7:30:ab:9a:9f:
         b9:66:10:56:4e:c0:53:ee:40:f8:58:fe:bc:c5:ad:a9:0d:5c:
         64:79:4e:0f:1c:18:f8:ba:04:18:4b:62:9a:1b:23:dd:fb:16:
         b2:13:16:9f:6b:cf:c4:dd:77:2a:cf:18:4b:01:c6:a0:04:4f:
         fa:26:eb:42:86:57:f4:88:7b:d0:48:67:95:98:07:f1:2e:b8:
         b3:43:f2:a5:22:5f:81:c8:3c:c6:a6:09:32:3a:8f:fd:e0:19:
         78:b4:3b:db:63:fc:71:17:8b:33:3b:e9:25:e6:0f:8d:8f:69:
         1a:71:1f:8e:c7:1a:f1:0a:e5:66:4b:24:e0:04:c0:f7:e4:ec:
         03:b1:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:45:14 2025 by rpki-client