Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File:                     sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier:          iGIemJdwuNS0HwA6BXeCojI8WLOHyix1pkuTWUnnWZQ=
Subject key identifier:   CB:AB:C5:23:D3:6D:34:E1:CB:C9:34:4C:31:6B:A9:08:22:94:2C:FE
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer:       /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial:       0196BAB66C9C5D58FC8BF70F83F7A4C36CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number:          040E
Signing time:             Sat 10 May 2025 15:00:39 +0000
Manifest this update:     Sat 10 May 2025 15:00:39 +0000
Manifest next update:     Sun 11 May 2025 15:00:39 +0000
Files and hashes:         1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
                          2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: oPkgVb+t6QqCC4X9g8auW4YA51LRQNMzJ9MnLoOlVvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:b6:6c:9c:5d:58:fc:8b:f7:0f:83:f7:a4:c3:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b085804db153eb724c58557c79359c4408205550
        Validity
            Not Before: May 10 15:00:39 2025 GMT
            Not After : May 11 15:00:39 2025 GMT
        Subject: CN=cbabc523d36d34e1cbc9344c316ba90822942cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:7e:f0:d2:6d:4a:13:7f:ae:e6:15:b2:76:
                    2e:75:cd:81:ec:91:64:e5:7e:0c:ca:19:03:0b:9f:
                    79:d2:c4:89:71:ff:ff:29:57:17:2e:41:51:14:12:
                    03:50:86:e2:47:79:f5:57:97:75:ed:60:7a:91:f4:
                    88:70:12:d2:bd:2d:5c:69:cd:22:23:c9:42:4a:5b:
                    14:34:33:c0:d4:07:42:4a:e7:27:07:c3:7c:20:c2:
                    d5:74:9d:ee:c4:27:1d:b6:11:a5:88:0f:26:1d:04:
                    b4:f9:50:ee:5e:63:8d:99:a2:6a:31:ce:76:16:92:
                    b3:68:38:96:f3:3e:0a:f0:e3:51:f4:db:f7:03:3d:
                    d4:e3:e4:da:5c:c8:90:3e:01:22:ef:b0:8c:a4:47:
                    ab:6d:b8:2a:b9:48:bf:4d:a7:b5:f3:8b:49:e3:f3:
                    bf:af:7a:e1:94:bc:bd:07:6e:66:b3:79:fb:a3:66:
                    41:2f:39:69:05:e6:7a:2f:d3:ef:f7:c1:93:df:17:
                    f1:ad:96:b3:46:d5:3e:aa:20:2b:11:b4:e5:e9:94:
                    11:50:60:30:c0:bc:73:b9:da:a5:6d:da:c7:db:d6:
                    1d:f0:10:0d:1b:b8:95:7d:90:f8:e6:04:b7:00:ab:
                    74:af:7b:18:6f:69:7b:dd:ea:15:62:77:73:41:67:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AB:C5:23:D3:6D:34:E1:CB:C9:34:4C:31:6B:A9:08:22:94:2C:FE
            X509v3 Authority Key Identifier:
                keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:08:9c:40:18:2f:16:8d:b0:1b:ec:42:02:07:c5:d5:a0:76:
         17:19:da:70:79:16:e6:f6:9a:ae:81:e1:8d:6f:7a:a8:9e:52:
         bf:00:22:30:2d:8d:81:99:67:32:c8:18:e3:a1:bb:ce:4a:a6:
         e6:1e:57:72:9d:01:b0:27:31:f6:76:37:f1:ac:9a:52:f5:15:
         34:dd:90:ad:15:a8:88:17:f6:f2:88:8c:55:97:06:62:09:91:
         e0:1d:b2:9d:32:ea:23:07:41:4c:4c:24:d4:9e:79:c9:64:c7:
         9b:46:4d:3f:ce:f8:81:78:88:65:37:c0:18:67:d8:f2:ca:95:
         60:07:02:30:55:7d:f2:ec:de:d7:e8:4a:e3:a3:b6:46:e7:6c:
         6e:1f:d7:05:78:93:76:27:43:19:8d:3a:35:64:61:63:b8:e8:
         22:7b:8f:fd:37:44:af:dc:0d:8a:71:30:19:30:f6:f5:96:ea:
         c0:96:24:6f:9b:72:20:c7:9a:b0:a9:77:f6:7a:b2:63:e6:91:
         05:fc:d9:24:69:c5:35:4c:e8:8a:7a:2e:b7:bc:07:bf:2c:de:
         4c:38:7c:af:7c:a2:66:a1:b6:04:2e:b2:4e:49:2c:0a:ab:bc:
         3a:32:84:1a:73:c7:90:83:38:a1:79:9b:34:88:4b:45:7f:ed:
         05:61:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:19:38 2025 by rpki-client