Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          VEFOK4gN7/dIK7gOd+OPUZkpd923o5mq2hI7iAVv0Mo=
Subject key identifier:   F6:F1:CA:CC:D2:30:5A:FA:47:04:C6:3F:A0:6D:A7:5E:5A:0B:85:06
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       01963F1DEED7F5B645FA6B70D7C216C94B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          0E65
Signing time:             Wed 16 Apr 2025 15:00:48 +0000
Manifest this update:     Wed 16 Apr 2025 15:00:48 +0000
Manifest next update:     Thu 17 Apr 2025 15:00:48 +0000
Files and hashes:         1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=)
                          2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=)
                          3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=)
                          4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=)
                          5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=)
                          6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=)
                          7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=)
                          8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=)
                          9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=)
                          10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=)
                          11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=)
                          12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=)
                          13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=)
                          14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=)
                          15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=)
                          16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: yHXN9hqWilnic27gtS0bwU/qJ1bzsNdIlYf+K49v1NU=)
                          17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=)
                          18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:1d:ee:d7:f5:b6:45:fa:6b:70:d7:c2:16:c9:4b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Apr 16 15:00:48 2025 GMT
            Not After : Apr 17 15:00:48 2025 GMT
        Subject: CN=f6f1caccd2305afa4704c63fa06da75e5a0b8506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:5b:f0:e5:73:1b:75:3f:b1:e7:bd:43:c4:
                    f0:4c:0c:36:7a:fd:c3:02:ce:d2:aa:7a:31:c6:4c:
                    40:77:15:8f:43:ef:ee:65:db:e6:65:eb:41:52:17:
                    3a:19:84:b2:c8:26:54:57:f4:c4:74:39:55:de:45:
                    4c:c9:6a:88:6a:a1:68:4e:3a:55:bf:9e:31:47:4e:
                    84:4a:8e:d6:52:cf:ec:8a:99:d4:27:87:12:17:21:
                    37:1f:6e:7c:b8:00:5f:51:e7:9b:80:68:2b:85:9f:
                    45:bf:1a:72:ab:dc:59:9a:33:d6:0f:51:69:d8:dc:
                    08:d2:8b:7f:51:91:16:02:cf:01:10:9f:f3:b5:3a:
                    95:c4:52:a3:79:33:0d:64:19:1d:0b:ad:56:9b:02:
                    6a:fc:57:08:70:64:e5:aa:cf:d5:74:1d:3d:d8:1e:
                    7d:f4:6a:60:08:22:c5:3d:8f:23:1d:28:e6:cd:e7:
                    49:fb:39:31:e2:01:38:95:70:ba:06:f4:86:e5:2e:
                    f8:da:f9:ff:8d:ab:94:de:f2:89:b7:b9:29:8c:ec:
                    05:ee:13:2e:f1:61:67:f3:f6:5f:de:18:6e:c8:9a:
                    c0:a7:3a:fb:a6:39:24:51:c4:d6:d5:dc:bf:f0:0a:
                    40:bb:e2:dc:c3:60:95:73:1c:97:d8:76:9d:75:a5:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F1:CA:CC:D2:30:5A:FA:47:04:C6:3F:A0:6D:A7:5E:5A:0B:85:06
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:43:b0:e0:eb:76:d4:76:01:3d:55:1d:9e:71:9a:1a:a5:7c:
         a5:64:37:ae:55:7e:b4:72:93:fa:57:2a:54:33:b4:45:da:8f:
         9a:2e:ba:53:e9:83:15:2d:ed:0b:81:3c:ee:37:00:3b:c0:48:
         97:5a:ea:87:b0:36:7e:60:3f:41:47:59:ca:e2:27:23:4a:33:
         87:12:61:41:32:b4:73:0a:d8:dc:0c:d0:c4:84:3f:35:bd:2c:
         74:b5:32:2b:c7:6e:12:59:5d:05:f8:1b:30:aa:8d:39:03:d6:
         1b:af:88:6c:36:ca:a0:ab:a4:65:da:46:e9:b8:dd:98:fb:a8:
         a5:bc:59:a1:dd:3b:47:e8:8c:cf:f2:b5:57:1e:9a:6a:63:71:
         3d:1f:52:53:d0:90:96:bb:b3:da:1b:f2:7c:2e:1b:29:9d:21:
         49:6c:1a:23:1b:99:73:df:7b:27:35:38:b8:63:3d:e4:43:ae:
         45:b0:89:97:34:97:56:ef:c1:98:7e:47:c0:b0:3c:ce:c1:98:
         12:e4:40:e6:28:c9:aa:1a:53:9a:2c:f9:d0:50:c5:39:cb:ca:
         c7:73:5a:14:da:8c:39:1b:09:e1:5d:2a:6b:cf:07:bd:a9:05:
         c1:6c:ef:7f:93:a8:33:48:68:87:16:b1:f2:6f:de:94:1e:e1:
         55:0c:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:27:50 2025 by rpki-client