Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File:                     RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier:          ZRQWms+4MCF9PtsbOVw9S1qbsnKI6lxcBHePn+7iEtg=
Subject key identifier:   14:61:42:EE:48:15:02:14:A8:2E:20:A0:07:C0:06:6E:DD:27:6F:83
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer:       /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial:       01964A46CD7B90F8FA182C24DA09D40D6884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number:          14FC
Signing time:             Fri 18 Apr 2025 19:01:15 +0000
Manifest this update:     Fri 18 Apr 2025 19:01:15 +0000
Manifest next update:     Sat 19 Apr 2025 19:01:15 +0000
Files and hashes:         1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
                          2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: YAqHZU0a3iT3/CGKMzRy3VTO+7GnaRNE1K8bLISy7xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:46:cd:7b:90:f8:fa:18:2c:24:da:09:d4:0d:68:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
        Validity
            Not Before: Apr 18 19:01:15 2025 GMT
            Not After : Apr 19 19:01:15 2025 GMT
        Subject: CN=146142ee48150214a82e20a007c0066edd276f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:16:56:cd:71:4a:e3:0e:b1:8f:13:43:ba:
                    40:7a:6a:42:f8:7a:9d:97:e5:d4:5a:84:11:6a:18:
                    e1:3e:1c:2b:fa:09:fd:2c:bb:db:69:97:58:3d:39:
                    d4:c0:56:eb:51:5e:f2:3d:ef:30:a1:e1:d6:28:84:
                    c4:d8:89:5f:15:ef:6e:24:ee:92:1b:8f:d4:2b:26:
                    34:1a:16:b2:99:5f:1a:bc:75:c4:15:3c:22:94:1f:
                    11:2b:ac:0d:e1:8f:f2:49:75:e7:59:3d:39:cd:7c:
                    59:17:af:0e:3d:ec:23:20:bc:3c:2b:74:d0:92:20:
                    47:26:38:43:cd:e9:c3:07:c7:3f:f9:f1:03:63:75:
                    38:f7:dd:0b:9e:1c:1b:bf:c9:2d:1f:56:a1:0e:bc:
                    4d:63:85:ef:e7:af:36:a7:db:98:06:76:38:16:dd:
                    43:91:51:e2:37:4a:0b:4a:f9:9f:f4:ce:2f:e8:6d:
                    00:3e:ea:00:fb:28:bc:e2:9a:c9:d6:4c:5c:eb:93:
                    4a:f1:0d:12:cf:49:49:6c:64:0a:5b:91:bc:76:ba:
                    30:83:3b:fc:0c:b0:63:05:00:3a:ae:9e:e7:39:a1:
                    a6:cb:dc:2e:36:59:9d:22:5d:50:dc:6f:41:ec:79:
                    64:69:6f:33:c7:cb:a7:b1:04:55:a6:bd:77:dc:8e:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:61:42:EE:48:15:02:14:A8:2E:20:A0:07:C0:06:6E:DD:27:6F:83
            X509v3 Authority Key Identifier:
                keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a6:ed:11:07:14:b6:8a:24:7d:10:59:1b:44:1e:64:cd:c3:
         84:20:44:d7:0a:b2:10:2b:c7:58:92:87:ca:03:60:f1:cc:e9:
         dc:4f:bd:2f:84:12:d0:ab:fc:86:e2:6c:5c:a7:be:6e:be:60:
         97:46:fe:6f:8a:29:bd:20:fc:35:ad:67:37:ea:38:e5:a1:09:
         8d:cb:42:a6:a5:cd:3b:f9:3f:45:6c:16:fd:27:37:ce:45:d9:
         f1:6d:70:ca:a3:c7:d7:d8:71:d1:8a:71:21:58:a3:11:42:74:
         b3:80:b6:c0:be:4d:21:f0:af:4c:b1:9e:3d:cb:6d:85:82:ff:
         c8:f8:e8:d5:a3:33:5b:29:5e:bc:cc:b0:24:c2:cb:87:9e:e7:
         ee:71:4d:90:e3:2e:1d:cf:f6:70:72:04:46:ea:af:e3:2c:1b:
         a6:6c:44:18:c5:be:e6:15:cf:19:7a:fe:b9:b2:0e:bf:3f:75:
         8b:40:cf:93:62:3f:04:66:40:b7:d2:f9:80:91:72:ce:0d:27:
         fa:e7:99:ba:5d:99:1e:d5:94:7a:86:b7:03:cb:cb:2e:da:3c:
         69:9e:85:ba:bb:1c:05:80:22:69:f3:43:92:96:d5:eb:3a:2f:
         29:ad:08:c6:17:94:b7:1c:ee:51:e3:1f:50:7c:ce:ea:b6:7a:
         55:92:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:50:53 2025 by rpki-client