Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File:                     DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier:          v0uWLcfnj3fzY1QpLEQCfRIuW/YkeECnC14nzWtyBcQ=
Subject key identifier:   01:AF:E7:3E:FD:24:8B:11:C7:8A:38:8C:56:33:4C:17:BA:FF:E7:C1
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer:       /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial:       019653802F23312878AA4432BCD334EE2896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number:          0AE7
Signing time:             Sun 20 Apr 2025 14:00:31 +0000
Manifest this update:     Sun 20 Apr 2025 14:00:31 +0000
Manifest next update:     Mon 21 Apr 2025 14:00:31 +0000
Files and hashes:         1: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: yAgbxa51ERI/JPEBwN7fHbbNY+cotj2VX0EyWt+/Paw=)
                          2: OH-wToKKpcLXZiKSEV9kWfR3r9E.roa (hash: +uO0A8wLAnAMRWqRTo4QJmUxBjNPBXZGwGTwpjPRQZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:80:2f:23:31:28:78:aa:44:32:bc:d3:34:ee:28:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
        Validity
            Not Before: Apr 20 14:00:31 2025 GMT
            Not After : Apr 21 14:00:31 2025 GMT
        Subject: CN=01afe73efd248b11c78a388c56334c17baffe7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:0a:1a:51:5d:ab:1c:72:30:ba:0a:1e:13:
                    39:a0:21:10:2f:60:32:46:db:2e:8c:19:d7:6f:48:
                    81:39:90:f9:ee:df:9a:29:e4:1c:1b:30:0a:c8:60:
                    8c:40:89:19:d9:95:09:52:33:6d:63:85:54:0e:bc:
                    f9:c5:1c:87:71:af:e5:ad:9e:97:4e:58:4a:f0:0c:
                    e6:ba:9f:ac:f8:f3:b5:9f:cd:f0:4a:82:95:77:83:
                    ae:df:fe:a9:99:b3:9a:8f:78:c5:d0:f2:04:d5:c6:
                    69:2b:70:8e:b7:a1:97:4e:97:1a:59:34:be:a5:8f:
                    98:f9:a2:9a:a8:64:2e:8f:c7:a7:ca:f1:a9:93:63:
                    20:97:e0:3c:b2:f4:d6:2c:42:86:bd:67:f6:04:9c:
                    90:32:f1:92:89:8b:ba:dd:55:a6:99:ac:ad:01:bc:
                    34:c7:85:70:03:06:37:fe:cb:88:85:f3:d1:4d:82:
                    02:22:1b:b9:d6:fe:6d:b2:67:45:5b:61:16:5a:f4:
                    75:f9:01:cd:3a:53:4f:71:ed:64:e9:e5:09:14:6a:
                    2c:74:af:3c:11:d5:7c:9c:f5:dc:6f:57:d6:a1:d4:
                    cc:f7:a6:5a:b6:bf:4c:17:08:6d:77:ac:68:56:6b:
                    5a:71:5c:04:f4:91:01:75:60:dc:58:6f:7c:59:9b:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AF:E7:3E:FD:24:8B:11:C7:8A:38:8C:56:33:4C:17:BA:FF:E7:C1
            X509v3 Authority Key Identifier:
                keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:04:f8:a5:0c:d0:f4:b0:6b:e7:82:15:a8:7b:a1:a4:57:
         5a:16:b0:89:32:71:b1:9a:14:25:ba:85:fc:a2:a9:92:82:09:
         db:a3:71:f2:a9:2d:9d:99:76:c6:7b:3c:f7:ea:03:9b:74:c4:
         f5:30:1a:0a:7f:b7:6d:cd:07:a4:f2:3f:41:5e:45:f8:77:10:
         e4:e5:7e:ff:6e:13:75:63:aa:21:73:6b:ef:17:2f:eb:f7:d9:
         6c:5a:e7:fc:63:32:6b:69:b5:8f:ff:56:42:87:6d:69:7b:f9:
         bd:ea:34:5b:1f:09:64:a0:cf:bf:b2:16:3a:2c:f4:d2:76:9f:
         3e:80:fd:c3:0b:4d:cb:8d:93:30:77:57:56:2b:93:30:f6:36:
         47:24:33:16:f2:e4:83:3e:5b:b5:df:02:6f:6c:a2:86:2a:70:
         6e:e8:69:63:ad:6f:bc:84:ac:08:8a:e2:bf:4e:d1:f6:a9:df:
         f5:b5:65:5a:fc:d4:81:18:bf:2e:3f:9b:22:8c:29:7e:22:78:
         44:fb:34:67:71:f2:cc:07:c7:bb:60:48:e4:53:cf:e1:8f:01:
         1c:fe:de:14:54:61:50:f0:71:b8:45:ec:09:b5:2e:f3:16:54:
         4b:f8:13:c2:0c:89:f7:20:80:87:6d:d1:ff:a6:c4:16:5e:02:
         31:69:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:36 2025 by rpki-client