Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
File:                     wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json)
Hash identifier:          xIRv8U5BqaPy7JgN7Y/WioIyYCqWFLy8WA4y/BRwsAw=
Subject key identifier:   40:DF:A7:17:E6:B2:4E:87:5A:9A:81:12:4C:95:C0:71:0D:51:43:9C
Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11
Certificate issuer:       /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
Certificate serial:       0196C202065A4E167DEEFAE39487C78A37A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
Manifest number:          FD
Signing time:             Mon 12 May 2025 01:00:34 +0000
Manifest this update:     Mon 12 May 2025 01:00:34 +0000
Manifest next update:     Tue 13 May 2025 01:00:34 +0000
Files and hashes:         1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=)
                          2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: 51WLXFVc38g2NFHddERL6+hW9ooIxTVJZ88SLrEr8K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:06:5a:4e:16:7d:ee:fa:e3:94:87:c7:8a:37:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611
        Validity
            Not Before: May 12 01:00:34 2025 GMT
            Not After : May 13 01:00:34 2025 GMT
        Subject: CN=40dfa717e6b24e875a9a81124c95c0710d51439c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:fc:c2:81:e9:c0:4e:a7:ee:b0:02:a3:d2:
                    fa:15:c9:7b:6a:8a:97:3f:3e:05:e4:33:90:37:6c:
                    c1:67:e3:90:5f:a8:f6:fe:79:f3:b9:89:8c:e0:23:
                    9b:f0:ab:37:53:21:d3:57:06:b2:0d:c4:47:e7:cd:
                    80:c9:87:6c:27:57:b6:64:e6:d5:18:b1:26:5d:2e:
                    20:56:d2:de:40:7d:3c:4c:40:5a:a3:41:be:62:ae:
                    2b:f8:4a:39:4d:d5:0a:4e:2f:41:c9:fa:7b:bb:c3:
                    c4:e8:e5:85:48:29:ce:8c:37:9d:b9:6a:44:69:ff:
                    d8:56:a8:30:b0:e7:e5:93:1d:7f:11:9c:7c:13:73:
                    e8:6d:35:e1:2d:49:7b:c1:5d:6f:78:5d:d6:6e:f9:
                    7f:37:8c:d6:69:60:e1:7b:4b:bd:f8:e5:73:89:32:
                    40:ca:8c:22:a2:bf:64:cf:aa:b2:0f:d1:45:4a:c2:
                    9f:f6:99:39:41:07:f5:72:8f:b9:05:47:94:c7:d1:
                    d8:0f:6f:3c:bf:77:cb:f6:d3:10:dd:19:df:1c:ce:
                    ad:a5:fd:d1:dd:0f:85:d5:84:73:f6:f2:78:21:4d:
                    5c:64:86:bc:74:f9:f4:0f:2b:44:04:40:11:02:24:
                    c6:ba:72:de:cc:1f:1e:9c:16:9d:e8:16:78:d3:06:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DF:A7:17:E6:B2:4E:87:5A:9A:81:12:4C:95:C0:71:0D:51:43:9C
            X509v3 Authority Key Identifier:
                keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ee:03:e4:61:22:28:5a:3b:d6:08:34:5b:a3:ef:94:a4:bd:
         ff:67:e1:96:12:da:85:29:4f:21:be:31:75:c1:39:9a:15:47:
         4e:55:ee:9d:ad:0b:bd:7b:0e:a5:7f:00:37:73:de:90:00:a9:
         cb:b6:95:e6:4f:cb:d0:47:23:5f:f6:9f:f5:2b:c4:93:73:e9:
         15:5e:de:27:3a:39:03:27:a5:5b:60:c1:3c:92:90:57:0a:44:
         b1:d9:d6:f2:c0:45:53:18:16:74:4c:28:4e:28:8b:3e:23:2d:
         32:c0:e3:cb:e5:a2:e6:8c:d0:03:70:bf:70:5b:f1:c4:f0:f3:
         2a:e3:d4:d0:68:73:d2:b0:cf:46:42:16:2d:35:6f:ad:fa:b6:
         3d:36:1e:0a:66:78:28:f1:9e:26:07:85:92:40:68:c9:74:c4:
         5c:b6:23:9a:7a:7f:46:2b:93:86:5a:dc:59:b5:41:6e:a5:ea:
         b7:b1:7b:1a:81:82:a9:13:10:37:35:ea:95:41:b8:46:3f:86:
         79:6c:8b:c4:e8:c8:3d:22:ba:74:f9:98:24:7c:26:fb:15:e7:
         df:e6:80:7d:b0:c6:28:a1:9a:18:45:f6:1f:ad:96:73:b6:9c:
         7b:14:c3:1d:18:22:40:76:6a:f4:81:b4:15:da:eb:c0:4d:8b:
         97:87:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:39:13 2025 by rpki-client