Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File:                     WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier:          OkpAFLjABOn40qewnmonEVlCnnsVQp+KSM6N6o81lgg=
Subject key identifier:   45:47:2A:E4:22:85:9B:6C:07:00:18:CB:5C:AB:B4:85:22:5F:71:EF
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer:       /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial:       0196B558CE7D96A33F40C7E493C8B8DD4874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number:          89
Signing time:             Fri 09 May 2025 14:00:18 +0000
Manifest this update:     Fri 09 May 2025 14:00:18 +0000
Manifest next update:     Sat 10 May 2025 14:00:18 +0000
Files and hashes:         1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: GNl2p+jCnRGkwHVNEcTsIthMgEIy3jnFtBqAi9Uzjf0=)
                          2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
                          3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
                          4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:58:ce:7d:96:a3:3f:40:c7:e4:93:c8:b8:dd:48:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
        Validity
            Not Before: May  9 14:00:18 2025 GMT
            Not After : May 10 14:00:18 2025 GMT
        Subject: CN=45472ae422859b6c070018cb5cabb485225f71ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a9:c8:2c:08:5f:bf:ef:cf:af:ce:c8:47:a0:
                    e2:7d:d9:6a:27:35:e8:57:34:c1:6d:7e:bd:9f:62:
                    0e:7a:a0:81:98:b4:b0:60:91:a9:02:4f:29:62:7e:
                    91:84:06:6c:a8:7c:20:06:6d:4d:7d:15:38:cc:d6:
                    d8:14:96:9e:fa:fa:8e:b9:0f:55:9d:3c:4e:05:d6:
                    af:8f:0f:21:e0:cb:64:00:1a:ee:b6:23:f1:00:f2:
                    86:04:97:88:fc:5d:34:4b:fd:be:ee:07:ba:67:67:
                    29:ab:8d:d7:20:ca:4c:2d:d2:d1:74:37:54:f8:1d:
                    d5:26:fe:00:26:9d:ec:84:26:de:e8:90:16:8b:61:
                    18:13:b3:8c:79:ac:b8:e3:45:b8:7b:86:19:1f:b4:
                    e0:d2:ef:86:d0:89:4d:ee:0e:e3:ea:1a:db:f9:1c:
                    5c:a6:06:a9:26:72:70:16:4a:be:e4:c1:cd:00:87:
                    3e:44:fa:37:52:e8:23:7f:47:a8:54:2c:14:6a:a1:
                    eb:0a:dd:f5:1b:31:e1:94:da:a6:0d:f4:ad:89:2a:
                    45:cf:fc:35:23:a5:07:b3:24:62:0c:de:55:83:aa:
                    9e:ee:ef:49:61:ef:f1:ed:05:a4:2b:45:83:a4:42:
                    9c:b9:9a:89:c6:50:3b:ea:ca:b7:28:07:a4:7c:6b:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:47:2A:E4:22:85:9B:6C:07:00:18:CB:5C:AB:B4:85:22:5F:71:EF
            X509v3 Authority Key Identifier:
                keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:13:b6:29:a5:ab:04:67:a5:12:a4:23:2f:49:6b:be:22:c2:
         b8:c0:f3:f4:ef:5b:ff:c4:f7:56:e6:a3:20:3e:03:ed:dc:d5:
         11:22:58:98:3e:11:04:cf:46:6b:8c:0d:c9:13:25:48:bd:27:
         40:22:a4:87:e1:85:1a:d8:f9:22:8d:21:ce:3e:4c:02:84:04:
         17:ff:17:5d:80:d5:8e:3a:ff:7b:05:c3:b8:44:9e:cb:3f:03:
         1a:08:f4:3f:e4:7c:17:22:3e:0e:22:1c:85:b7:22:d9:92:92:
         8c:22:d3:6e:7e:87:07:7f:a4:41:7d:63:e6:cc:5c:27:b3:d8:
         bf:11:a8:d0:ad:ed:68:92:11:e3:3a:fd:5c:64:67:cf:4c:9f:
         23:23:14:bc:92:99:1a:90:54:99:48:41:b4:20:b8:e7:55:00:
         33:18:02:2b:79:98:ee:86:bb:df:37:eb:36:5d:04:be:82:80:
         b6:c9:10:5a:22:1c:6e:35:46:f8:22:cf:70:a1:79:90:ea:3b:
         b3:9e:81:66:4b:7b:e5:d3:8e:bf:ce:c4:b4:34:60:f2:75:41:
         ed:e0:9e:e4:c0:f2:21:73:7b:27:97:e8:6f:1c:fe:51:57:fa:
         d5:a6:33:cf:55:83:5b:3e:33:98:b7:d4:05:a0:31:c6:0b:46:
         7c:8b:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:56:51 2025 by rpki-client