Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File:                     WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier:          wQkCOG2dNptxsM/aCLgeoN1Ln7beZd8Avy9WWzgXB1g=
Subject key identifier:   47:13:74:0A:36:E1:AD:2F:82:EA:EB:0E:DC:E3:40:64:C8:E5:45:F3
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer:       /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial:       01958C6003B5825301D5B74D5A3A21498C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number:          1210
Signing time:             Wed 12 Mar 2025 22:00:57 +0000
Manifest this update:     Wed 12 Mar 2025 22:00:57 +0000
Manifest next update:     Thu 13 Mar 2025 22:00:57 +0000
Files and hashes:         1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
                          2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: LwkvIG06cJCJvXJHGv/7MAHlqENhDYTHN+FJUE0GAeU=)
                          3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:60:03:b5:82:53:01:d5:b7:4d:5a:3a:21:49:8c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
        Validity
            Not Before: Mar 12 22:00:57 2025 GMT
            Not After : Mar 13 22:00:57 2025 GMT
        Subject: CN=4713740a36e1ad2f82eaeb0edce34064c8e545f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:4d:5c:3a:25:ec:8d:07:26:52:2e:c4:1f:
                    89:51:85:6a:3f:6a:02:51:be:2f:20:f6:93:a4:9b:
                    2e:66:ac:40:6d:88:ed:3b:0b:b2:e7:ef:10:b0:e3:
                    43:ab:aa:38:19:07:97:21:d8:79:47:c6:95:d5:be:
                    c1:95:f0:fb:2c:a1:e3:a2:29:e4:df:62:24:cc:a3:
                    70:24:81:7b:de:37:73:de:f0:40:4c:fa:ee:90:a9:
                    b7:20:ec:b1:3e:bf:4a:d3:e7:6f:ef:01:48:c4:e0:
                    27:10:7f:cb:9e:e7:f2:8a:4b:0f:8c:04:73:5a:03:
                    4b:43:91:10:03:8e:70:7b:f0:29:8d:c3:91:b8:12:
                    6f:25:25:cf:da:fb:4c:0f:7e:0d:85:7f:0a:3e:02:
                    a9:62:1b:3a:57:ab:4b:1d:e2:c1:56:8f:30:d8:87:
                    fa:5b:7b:86:1f:16:b4:9f:42:10:97:de:5b:f1:6b:
                    00:47:87:0c:62:6b:8e:4e:57:e3:54:63:59:77:7b:
                    0c:cb:34:00:de:ea:88:b2:0d:6e:80:31:af:92:24:
                    0e:28:49:37:ee:fa:83:1a:1f:6f:6a:c8:3b:5c:cb:
                    14:24:ca:7d:f3:9e:22:40:9b:97:36:3e:08:36:56:
                    6f:6e:ce:f9:65:bd:60:c4:37:ba:ac:7a:de:93:9f:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:13:74:0A:36:E1:AD:2F:82:EA:EB:0E:DC:E3:40:64:C8:E5:45:F3
            X509v3 Authority Key Identifier:
                keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:35:7e:af:54:08:e0:ec:bf:66:3e:96:3f:68:09:3a:a2:e3:
         fc:d9:d8:21:f1:12:40:77:a1:98:4f:43:5b:d0:d3:0a:6a:c2:
         a6:c1:81:77:aa:32:1f:f5:5d:a1:2c:6f:eb:a0:e6:75:1a:f8:
         44:00:34:c5:5b:39:0b:11:09:00:73:09:d6:b0:ae:7e:36:1a:
         a2:4c:76:10:15:5e:65:48:52:75:3f:8d:e5:b0:77:b1:7e:ed:
         26:c9:c7:74:d1:a8:da:28:84:d6:3a:2d:44:bc:54:b3:5f:2d:
         4b:11:aa:94:8d:fc:70:9a:ef:ef:c0:38:18:1d:ed:f9:9e:99:
         34:35:f8:6b:2a:10:ec:42:d5:52:83:03:cb:93:0e:62:9a:d3:
         c5:9d:55:69:76:43:cd:5a:00:e0:e5:d1:de:5e:8f:a4:89:59:
         06:1a:71:98:9f:f6:eb:d7:c2:03:03:67:73:13:8f:1a:3c:3b:
         20:d2:a0:db:fb:01:11:35:f1:26:95:5f:c1:75:fe:89:98:f9:
         4b:93:d9:d4:82:6a:48:10:4b:64:10:ac:31:be:53:5c:85:1d:
         d9:89:ae:c6:09:09:8f:7a:5a:3c:fd:80:78:64:4f:40:23:79:
         3c:17:f5:cb:cd:88:9f:80:98:fc:96:bc:11:0e:c9:0f:fb:85:
         65:5c:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:32 2025 by rpki-client