Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File:                     weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier:          Jo99NY1RyhpouR2DlRumKNz33RhsPjshSDKP6KJwNFQ=
Subject key identifier:   DF:06:49:89:8C:3D:A3:31:8A:6B:7D:D3:9B:5F:4D:6C:01:80:D0:8D
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer:       /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial:       0196482103FD17B68FA7D3A9D8A2907B4964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number:          14F7
Signing time:             Fri 18 Apr 2025 09:00:45 +0000
Manifest this update:     Fri 18 Apr 2025 09:00:45 +0000
Manifest next update:     Sat 19 Apr 2025 09:00:45 +0000
Files and hashes:         1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
                          2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: bcShZHDizTHLlt5eOScxlw7x1oDZq1/6iKMQ8oZ1NU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:21:03:fd:17:b6:8f:a7:d3:a9:d8:a2:90:7b:49:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
        Validity
            Not Before: Apr 18 09:00:45 2025 GMT
            Not After : Apr 19 09:00:45 2025 GMT
        Subject: CN=df0649898c3da3318a6b7dd39b5f4d6c0180d08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:66:d5:5e:69:77:69:52:02:dc:4a:b4:cc:
                    ff:11:f3:14:6a:a6:82:0a:9f:3e:1c:62:71:b9:10:
                    8d:a6:dd:9e:39:c0:82:19:28:08:d5:43:3f:57:13:
                    e4:69:56:27:0f:3b:11:cc:e4:a7:07:11:e7:83:5f:
                    b0:68:c1:3d:5b:cf:db:3a:6c:db:85:b9:96:e4:c6:
                    5f:83:d5:60:af:9a:22:e8:41:59:a8:3c:51:2c:ef:
                    04:a8:bc:22:3e:56:14:fd:f2:10:06:1d:9d:49:68:
                    0d:62:4f:16:25:69:ff:0e:3c:ac:7b:4e:ab:1e:f9:
                    f0:06:62:48:48:d1:0d:6c:bf:64:9a:80:04:24:77:
                    06:6b:37:ef:d2:9f:32:4e:a6:2d:46:0e:0e:1b:28:
                    18:ab:24:fc:eb:c9:b7:db:9a:c7:d4:39:d4:b9:f3:
                    1e:29:58:3a:5a:6e:0c:3c:9b:dd:da:3e:5d:d4:b1:
                    dc:90:68:39:19:f4:d1:8c:b5:d6:ed:51:1a:e0:1a:
                    6f:21:cf:a3:ae:a0:00:08:ce:fa:a6:48:e0:57:34:
                    f1:fc:f8:e5:54:41:5c:fb:85:68:74:27:88:73:73:
                    24:81:20:cf:77:ba:8d:9b:5b:1b:1f:ed:a3:6c:c7:
                    ce:80:bc:a4:cd:8d:27:84:1e:2e:d8:5a:02:a1:d2:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:49:89:8C:3D:A3:31:8A:6B:7D:D3:9B:5F:4D:6C:01:80:D0:8D
            X509v3 Authority Key Identifier:
                keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:9e:11:28:a2:12:5a:b9:d7:75:3b:cb:ef:3e:5f:2b:eb:
         5c:1d:61:8d:c0:55:24:b8:42:73:b3:56:d8:c6:12:76:41:8d:
         2c:7a:10:65:61:f0:22:06:ce:83:49:41:2b:2e:bf:51:1e:3a:
         28:e6:a3:ee:f6:3f:85:0a:55:1d:67:22:47:c6:7c:66:47:76:
         b0:73:bd:f1:50:40:66:6e:6e:3e:f5:cb:d7:2d:72:7e:e2:e9:
         54:83:5c:53:b6:90:1d:7b:88:9a:db:04:09:97:fe:ee:df:e2:
         e9:a2:5c:50:5c:c3:25:dc:bf:64:da:65:4c:03:eb:33:9b:79:
         1d:19:da:ff:d6:55:07:27:04:66:eb:1b:1f:d0:36:a8:35:c7:
         66:39:00:99:7b:92:8b:c9:8e:2f:0a:ec:26:29:34:83:a7:fd:
         49:0d:5b:ed:2a:18:74:06:1f:22:2e:ef:57:05:fc:3c:6d:e1:
         54:4f:24:3d:fe:e9:1d:78:dd:9d:13:c6:05:91:16:53:24:af:
         13:d7:60:de:ce:73:36:1c:d4:30:02:24:77:33:df:25:45:29:
         2a:c1:e1:a1:de:74:82:28:6f:47:de:bf:3d:c6:3f:0c:41:71:
         85:6e:ed:9c:6c:89:64:6c:c1:f8:8f:75:8e:8f:56:a9:58:44:
         da:d7:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:14:43 2025 by rpki-client