Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File:                     _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier:          8veFGiwbos8WS0Iv9EmoS+shRqNvNoYPUfCLvL0imww=
Subject key identifier:   39:57:31:56:C3:C7:04:8C:39:AC:03:32:E3:CE:12:62:20:F5:14:A7
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer:       /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial:       01965011CB90DD004AE719FD5D7E042DBD43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number:          11F0
Signing time:             Sat 19 Apr 2025 22:01:05 +0000
Manifest this update:     Sat 19 Apr 2025 22:01:05 +0000
Manifest next update:     Sun 20 Apr 2025 22:01:05 +0000
Files and hashes:         1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
                          2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: bNA12qIIz7trjI5iQzNRR7VHjvChtJE8ylBeTXxqfYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:cb:90:dd:00:4a:e7:19:fd:5d:7e:04:2d:bd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
        Validity
            Not Before: Apr 19 22:01:05 2025 GMT
            Not After : Apr 20 22:01:05 2025 GMT
        Subject: CN=39573156c3c7048c39ac0332e3ce126220f514a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:80:84:27:37:dd:b8:14:78:6c:d7:8a:98:
                    dc:ef:54:49:05:82:69:1b:55:24:13:27:07:c4:f0:
                    0a:a5:1f:16:a4:3e:76:d2:92:d0:06:2e:fc:67:a1:
                    0f:37:d7:0a:8b:ea:82:73:f9:0c:0d:b3:40:68:f6:
                    b7:67:43:ac:c0:9e:9e:83:fc:35:fd:09:cb:7b:d7:
                    96:92:4d:3e:92:34:97:69:b3:01:03:3d:e1:54:d9:
                    c0:9e:fa:d0:02:18:a1:18:98:f0:e0:9c:68:eb:18:
                    d7:04:82:e2:d1:07:c5:58:1e:9d:f0:ff:a8:d7:18:
                    2c:b3:18:e2:e6:22:be:62:e1:de:da:b9:5c:19:13:
                    35:1f:6d:22:16:55:b1:7b:3f:6b:51:06:cb:88:be:
                    02:fa:fe:ae:99:93:4c:d8:f3:fc:49:75:f1:07:bc:
                    e0:fd:52:f0:af:45:6c:b4:4a:81:12:a6:8e:fb:41:
                    74:d4:15:10:ab:68:b8:c1:42:e3:54:4d:ff:29:8d:
                    72:7f:42:bc:d7:28:77:aa:fc:05:1d:9b:78:7d:0c:
                    ce:4d:04:66:e9:e8:33:30:b6:06:60:9d:6f:4b:da:
                    2f:ca:35:09:04:2d:30:a9:d8:cc:c6:ea:04:82:a8:
                    7a:48:8c:fd:52:d3:fe:29:91:c6:e0:23:86:cc:f6:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:31:56:C3:C7:04:8C:39:AC:03:32:E3:CE:12:62:20:F5:14:A7
            X509v3 Authority Key Identifier:
                keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:23:e4:fa:3d:86:90:57:8c:26:2c:11:33:69:51:38:5a:
         52:44:dc:1a:88:25:0a:5c:10:f6:57:11:5b:2c:bd:2b:9e:43:
         a2:f0:39:dd:f9:80:18:50:a7:e8:1b:f8:70:31:7c:5b:00:ec:
         df:fd:03:69:2f:49:b2:99:b8:0b:76:21:b3:7c:45:e2:94:5b:
         a4:26:08:7a:8f:2d:c0:26:69:51:10:fd:29:d2:55:cd:9a:40:
         5b:b2:98:4f:28:df:a6:2b:08:5f:87:36:5a:26:a6:90:64:cf:
         47:85:d9:4d:b2:6d:15:1e:c1:d0:ee:a0:8e:ba:20:7e:1c:0a:
         ec:1a:23:8b:ad:d7:7a:d5:0f:48:ab:3a:d1:7c:05:08:fa:cf:
         51:3c:d4:12:68:4e:fa:75:cd:95:d2:ee:af:da:80:48:76:8a:
         c9:b9:c1:58:77:b1:2e:f5:e1:c9:e1:b2:37:3e:db:1e:59:4c:
         bb:c0:f7:0e:63:31:bb:76:6e:21:64:06:d8:79:39:2f:e5:5e:
         6e:c0:5b:93:8a:79:42:09:6f:20:22:0b:cc:76:69:0e:76:62:
         ce:61:8f:d9:fc:c7:1b:ec:72:52:3d:8a:c0:82:d9:aa:87:af:
         6e:13:fa:96:8c:b7:36:5b:4e:78:78:53:13:16:5d:8c:fc:e4:
         86:fd:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:38 2025 by rpki-client