Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          gBD7dxZ41fApBuSjw/QPNgJU8lpogTYETHUScva2BwI=
Subject key identifier:   F5:9F:B9:F9:54:D2:1C:04:15:C2:E9:78:0F:38:8C:12:C4:12:5C:B4
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       01965492C05CDD21FDFD570A9A0557640C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          11FF
Signing time:             Sun 20 Apr 2025 19:00:25 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:25 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:25 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: 8niIBqAK+uKVzAKVXFQmEKyhT2C9eSh0EKV+XrBRpYU=)
                          2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:c0:5c:dd:21:fd:fd:57:0a:9a:05:57:64:0c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: Apr 20 19:00:25 2025 GMT
            Not After : Apr 21 19:00:25 2025 GMT
        Subject: CN=f59fb9f954d21c0415c2e9780f388c12c4125cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:f5:13:38:20:7d:2c:b9:21:25:f2:ad:06:
                    d0:b1:f9:3d:00:52:be:ef:9f:3a:52:dd:06:b3:88:
                    61:59:0e:7b:63:ca:a8:6e:aa:e1:c8:a3:ee:72:8a:
                    22:71:b2:4e:16:8a:c0:3d:7e:17:62:bc:1d:30:79:
                    5d:48:cc:2b:f1:31:52:e7:8f:0a:a7:9f:08:3f:87:
                    55:ab:f5:5c:60:1d:c0:22:75:d3:c0:00:28:00:1f:
                    c3:9b:4f:d8:f7:b7:99:0f:9d:62:0b:97:06:e1:9e:
                    c2:0d:10:fc:37:89:91:0a:d4:d8:36:fe:00:25:c0:
                    00:68:71:ed:e3:45:36:e5:16:b4:52:b8:c6:ee:20:
                    bc:e3:47:b0:e8:d7:2c:1d:8d:7e:fd:45:b7:d5:ee:
                    75:a4:c3:ba:f4:04:b6:b6:50:15:c2:a1:ce:44:72:
                    be:f2:16:d4:6a:02:ca:45:a4:eb:ec:92:70:3a:4b:
                    e1:16:52:82:be:73:54:14:c4:17:fc:45:ab:dc:23:
                    b2:49:e6:c8:4b:3a:1a:d0:2d:91:f5:16:52:9e:ba:
                    82:4d:d9:cc:2f:77:27:77:63:83:93:03:94:d1:9d:
                    42:ee:d7:4b:fb:44:89:d7:5b:39:55:9e:57:79:95:
                    4c:83:74:27:bd:e8:22:f8:0a:9e:80:52:25:7e:c6:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9F:B9:F9:54:D2:1C:04:15:C2:E9:78:0F:38:8C:12:C4:12:5C:B4
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:89:d5:f2:83:b3:2d:f6:7b:6b:ea:b7:fe:f4:23:c4:1f:55:
         da:e1:aa:e9:da:74:ee:ae:4e:35:cd:25:8b:af:2b:6e:4c:cb:
         07:bb:29:e0:8b:90:0b:2b:65:71:01:16:08:9b:f3:19:79:23:
         68:57:b0:26:6c:bf:97:61:3a:09:de:82:a6:bc:28:5a:9a:47:
         2f:50:2c:b9:7a:c5:f5:12:89:77:8c:c2:56:69:ba:98:70:4f:
         72:cd:c5:12:37:7a:7f:0f:f4:75:9b:e1:3f:80:ec:53:f2:de:
         bd:ca:66:f1:f4:34:79:98:2e:60:cb:cc:07:09:91:ec:37:d4:
         50:e5:2e:a5:fa:2d:fc:9b:10:df:51:7a:90:f0:d3:7c:3e:74:
         36:3c:2b:0f:74:55:28:da:4c:6f:84:ad:3f:c0:9a:99:83:af:
         11:85:ff:9b:44:3a:98:eb:3f:55:76:4f:ad:56:e4:b3:be:a2:
         88:8f:77:30:06:7a:66:9e:6d:b1:ff:10:01:0c:36:ce:5d:87:
         8f:95:30:a1:3e:f1:d3:ba:c8:98:2f:28:00:59:84:11:b8:ad:
         43:c9:93:39:9f:e3:88:9a:33:29:a7:1d:90:75:b7:80:70:b7:
         20:94:cf:ee:67:ce:6a:e2:ee:03:63:e7:03:ab:66:9e:c8:27:
         6e:3e:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:30:34 2025 by rpki-client