Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
File:                     wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json)
Hash identifier:          v2LWjhXprhGDcOwdanzpUvkT894EhVSH7z9zI+4dWeU=
Subject key identifier:   D2:70:9B:A9:7F:4A:AA:31:82:84:A3:75:02:67:B2:2B:1C:82:B3:C0
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Certificate issuer:       /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial:       0196C683479D2BC81EFFEF5C4526DF01ADE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
Manifest number:          0A42
Signing time:             Mon 12 May 2025 22:00:14 +0000
Manifest this update:     Mon 12 May 2025 22:00:14 +0000
Manifest next update:     Tue 13 May 2025 22:00:14 +0000
Files and hashes:         1: X7sxw7uNpouw4ILJQaZasQ1FOVw.roa (hash: 7K5qnvzu1jh/3cj6mY1PwjKcxXcNjjVrkTNjEwE3NGw=)
                          2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: e7szEFNlKa31U6WJP9WAhLYXpNeM+iSVbPPc/ToCaSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:47:9d:2b:c8:1e:ff:ef:5c:45:26:df:01:ad:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
        Validity
            Not Before: May 12 22:00:14 2025 GMT
            Not After : May 13 22:00:14 2025 GMT
        Subject: CN=d2709ba97f4aaa318284a3750267b22b1c82b3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:f1:41:33:be:f0:2d:29:e4:98:8a:19:4d:
                    95:0c:c6:ac:ac:c9:36:f7:2b:79:7b:13:5a:a7:e7:
                    28:8e:5e:72:19:78:0e:2f:5c:31:60:d6:c2:f9:a1:
                    ae:9c:18:0b:0c:98:99:45:aa:cc:38:c8:61:b5:ff:
                    39:6e:23:c5:09:e8:6a:24:8d:f1:fb:03:ed:15:15:
                    dd:8e:fd:f6:dd:ba:be:2e:35:0a:6b:76:dd:2b:fc:
                    59:c3:9f:c5:74:c7:79:7f:b6:af:20:7d:81:08:cf:
                    07:46:96:95:b4:08:31:7a:da:20:25:87:4f:fe:03:
                    b7:e1:11:2b:36:e0:f9:5d:90:4f:b4:47:b1:9b:8a:
                    fb:c2:26:6b:c8:aa:64:68:83:50:ae:ab:21:85:97:
                    fe:94:fa:85:da:4b:aa:b3:5d:20:15:81:6f:55:e4:
                    fb:89:31:88:9b:84:b5:e4:b5:c7:03:88:2a:6f:fe:
                    71:e1:bd:7d:9e:78:39:40:e5:f9:3b:46:ca:32:43:
                    45:79:c3:72:e7:c4:1d:84:d8:d9:be:87:2f:cb:aa:
                    99:7c:eb:ef:1c:cc:bf:ad:9d:db:d5:da:d6:de:d6:
                    d4:b3:15:ef:cf:d9:90:d9:57:92:3a:a0:6e:37:fc:
                    67:c6:c6:ee:01:95:75:3e:0e:ae:ae:57:70:a8:98:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:70:9B:A9:7F:4A:AA:31:82:84:A3:75:02:67:B2:2B:1C:82:B3:C0
            X509v3 Authority Key Identifier:
                keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:10:28:13:23:0c:b5:f2:0d:64:7c:87:44:4a:af:08:1d:56:
         cd:47:8e:fe:36:36:c1:ed:0d:69:63:62:99:0e:89:bd:b8:0a:
         a0:d4:c5:d7:2c:3f:98:63:c1:29:72:44:d6:5c:f3:58:e1:4e:
         20:c4:52:bb:0c:3f:5b:db:90:1f:6a:9d:eb:8b:1e:a5:2a:d8:
         18:ee:4d:4b:44:fd:57:f6:fc:30:8f:90:16:b8:f2:87:87:42:
         11:03:37:ef:41:f3:e8:8e:af:7e:3d:1d:c6:43:2f:66:3b:4c:
         30:7d:8e:96:12:6f:74:e7:65:8b:02:5b:1b:db:51:5d:18:44:
         88:b0:64:83:bb:db:2c:68:83:24:69:3d:c3:a3:9e:d7:15:c0:
         ba:2d:f8:ce:b0:c7:07:83:32:f9:16:dc:1f:4c:58:35:74:5a:
         9d:23:e1:34:52:8e:c6:5b:e9:3d:29:e8:c8:63:4e:8f:09:d7:
         8c:60:06:49:02:33:d0:df:e9:46:df:ab:86:2a:48:7c:a7:7f:
         5e:c5:f1:70:2c:b3:18:be:75:92:dd:eb:72:aa:d3:a9:0a:4b:
         46:4e:f9:36:e8:93:56:62:1a:6f:dd:a9:89:ef:d6:80:3e:2b:
         f6:55:2b:3a:5b:13:f6:49:64:a4:21:66:e9:77:e2:d4:ff:13:
         59:fc:c3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:07:12 2025 by rpki-client