Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File:                     wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier:          aEkTs0BNHt3rEbK5RNQ2t5CVMrqpeFsuUlyMN7lLms0=
Subject key identifier:   51:9A:2F:8F:A3:15:1B:16:0B:85:9E:AC:2C:5F:AE:94:C6:C3:3A:D5
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer:       /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial:       01965424B99BCC253538D96B6D3C551426F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number:          14FD
Signing time:             Sun 20 Apr 2025 17:00:14 +0000
Manifest this update:     Sun 20 Apr 2025 17:00:14 +0000
Manifest next update:     Mon 21 Apr 2025 17:00:14 +0000
Files and hashes:         1: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (hash: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=)
                          2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: VRVvPvXQoRlle5S+j7ByzWBOEyEfzPirxl1J9BmezR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:24:b9:9b:cc:25:35:38:d9:6b:6d:3c:55:14:26:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
        Validity
            Not Before: Apr 20 17:00:14 2025 GMT
            Not After : Apr 21 17:00:14 2025 GMT
        Subject: CN=519a2f8fa3151b160b859eac2c5fae94c6c33ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:68:5d:ff:6f:e5:1c:99:f8:21:1f:37:45:
                    d2:00:4b:bd:20:23:c5:0d:d7:bd:9a:8a:0b:3b:36:
                    54:2b:ac:75:c4:b1:69:cd:29:47:d1:88:78:a8:27:
                    a1:1e:61:ca:ca:df:29:5e:36:f4:9c:20:db:61:c8:
                    96:bf:5d:84:96:fc:18:d4:72:e1:94:60:11:41:2c:
                    5d:aa:16:07:52:aa:8f:35:8e:ec:33:09:28:65:eb:
                    5c:88:cc:f8:56:79:4d:86:1e:c3:b1:ba:d2:37:e7:
                    13:a6:a0:29:82:58:1d:04:8f:af:53:b8:ac:de:3e:
                    20:62:b1:40:3a:5b:a7:80:a4:33:86:79:00:53:d9:
                    8a:49:7d:f1:ee:22:51:5b:32:a0:c6:a2:9d:b3:e6:
                    62:6a:fc:bb:41:f9:61:3a:83:6e:6d:57:53:b9:00:
                    28:17:53:f5:3f:08:d1:17:d0:3b:61:23:cd:69:16:
                    c1:97:0b:7e:f3:fa:67:44:45:f0:c4:48:e7:a1:5f:
                    3a:92:40:0d:df:a2:89:53:55:a5:39:3d:cf:ea:54:
                    43:01:78:58:63:4b:1b:a9:07:81:9a:1f:f4:ee:f7:
                    37:63:ec:dc:1b:c7:d7:04:fc:4a:a1:1f:b8:7b:ad:
                    ef:c4:49:7c:7e:27:95:c9:6a:3c:6e:32:aa:3e:b9:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9A:2F:8F:A3:15:1B:16:0B:85:9E:AC:2C:5F:AE:94:C6:C3:3A:D5
            X509v3 Authority Key Identifier:
                keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:df:6f:ec:d7:b6:47:88:c0:ea:82:c4:e6:3d:c8:05:b1:8f:
         73:eb:6d:29:7a:f4:b1:a1:66:c8:cc:4c:0a:ac:a3:7a:df:45:
         d3:0e:66:f3:9a:0f:68:5e:d3:19:b1:df:8b:ec:96:20:1b:42:
         60:2e:5a:ec:62:60:c7:19:f9:8b:08:93:c5:48:e5:ff:cf:a4:
         14:64:a5:e2:d2:38:dc:00:01:e5:ff:db:76:a3:40:ce:1d:a0:
         51:1d:9a:38:40:50:dd:e3:85:d6:07:53:5f:bc:fd:c2:2c:8c:
         e8:ba:91:02:9c:ff:48:14:af:57:7c:c7:df:d6:2c:6a:1e:87:
         e0:0f:c6:22:ec:99:ff:f3:8f:51:e1:49:52:02:28:72:50:be:
         4d:50:88:37:e4:12:5c:a4:87:b6:73:f9:ab:da:cd:fc:6c:36:
         88:a6:c5:2a:60:b7:60:9c:a5:9a:75:40:d4:ee:78:67:9f:e9:
         c2:99:38:5d:5c:45:78:80:6e:ff:e0:d6:86:e6:3f:9a:69:30:
         53:45:cf:28:17:7f:45:f7:d9:1d:e8:46:19:77:ee:cf:85:ec:
         a5:a6:66:19:de:01:a2:0e:b2:2e:d3:eb:fd:40:4b:09:01:27:
         e6:0f:99:15:a8:fc:d8:2a:9d:ac:b7:ab:f7:87:9a:2e:46:5f:
         ef:55:8f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:59 2025 by rpki-client