Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File:                     w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier:          cO2RPdaP/fFu4xbbj+Qm2ExO4Sf2y3+645v+yc7qE48=
Subject key identifier:   2B:95:45:58:46:45:0E:0C:18:0A:70:CA:B2:3E:33:16:A3:7C:62:D1
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer:       /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial:       01964067632A28D1E946596F674D5E4C07F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number:          9B
Signing time:             Wed 16 Apr 2025 21:00:39 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:39 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:39 +0000
Files and hashes:         1: qel6ufOI0K0P6RzF02UdBRZmZOs.roa (hash: 0w6Fd2wQlTNYoLFBh1jxH0G1R4nWQ+6pOgjLnjgYDIc=)
                          2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: B43D9T8fuPdy5m2L56lr70kqLoJvCgXAoTBJjQ+wWLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:63:2a:28:d1:e9:46:59:6f:67:4d:5e:4c:07:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
        Validity
            Not Before: Apr 16 21:00:39 2025 GMT
            Not After : Apr 17 21:00:39 2025 GMT
        Subject: CN=2b95455846450e0c180a70cab23e3316a37c62d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:32:49:ec:98:ba:45:91:73:0e:45:89:c0:
                    2c:3b:8a:bc:2b:01:ef:45:9c:6b:53:b6:18:08:5c:
                    51:dc:f4:ce:0f:bb:f9:18:16:b5:77:be:ba:a2:4f:
                    60:da:06:23:3a:57:3b:d7:b8:fc:ed:ac:cb:17:73:
                    a9:8f:f4:7b:de:22:27:36:a0:54:72:66:b0:48:b0:
                    8e:e9:d1:52:2a:c9:9c:ad:17:83:e7:f7:9c:53:14:
                    77:5e:6e:ed:37:e0:4c:2a:97:e0:6e:a3:58:3e:cc:
                    da:12:88:45:61:74:08:f3:4d:b8:84:65:aa:6c:78:
                    21:9a:1b:44:fe:75:02:47:68:83:74:9c:99:05:92:
                    e8:22:72:2a:49:16:e1:bd:38:fe:0c:2f:4d:28:b6:
                    38:f1:aa:af:e3:37:b4:ac:0d:0c:57:7c:28:d3:5f:
                    5a:0c:13:43:bb:98:60:e9:89:63:81:1c:19:5c:55:
                    84:de:c4:01:a0:cb:02:e1:b3:aa:f2:d1:e2:af:94:
                    cd:2d:52:b0:15:88:46:d0:41:eb:12:d9:06:a6:b8:
                    44:d8:8f:5d:94:f1:b1:e0:a2:81:08:50:e4:60:a9:
                    e0:3f:15:84:01:fd:4f:64:74:97:26:0c:c4:eb:86:
                    fe:58:fa:c7:e0:c7:a4:ec:94:a2:85:82:a7:9a:54:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:95:45:58:46:45:0E:0C:18:0A:70:CA:B2:3E:33:16:A3:7C:62:D1
            X509v3 Authority Key Identifier:
                keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:64:7e:a5:3b:72:98:36:be:a3:74:19:8e:2d:80:1b:63:06:
         28:20:f9:e3:b3:35:ab:10:83:bc:65:ea:b5:a6:2b:5c:26:18:
         10:55:dc:82:e7:d2:56:65:90:46:22:9a:38:c0:68:39:65:73:
         cb:ed:00:7e:70:4e:4c:c8:33:4d:be:33:75:de:c4:0b:c5:71:
         63:c7:5c:47:89:20:c8:25:9b:c7:cf:d0:07:d8:83:72:5b:6c:
         f6:51:8b:32:45:47:bf:c1:97:44:fa:d4:0d:da:cd:d2:e9:db:
         c8:97:34:b1:3d:04:af:d7:d8:b2:25:51:e5:5c:f6:f6:73:2c:
         5e:72:76:57:f4:ab:a9:47:b5:44:8d:d5:24:c3:4c:84:06:ea:
         59:7f:c5:2b:40:04:79:44:cc:a2:58:39:87:8f:0e:c5:a1:3d:
         d2:2d:ea:b6:32:ed:ba:82:56:19:e6:a3:bc:96:38:67:83:0e:
         db:2a:2d:f7:86:34:d9:8a:09:91:3d:d0:42:9b:01:25:c5:80:
         4d:3c:b0:44:c9:7e:d5:fe:ac:e7:a8:0d:83:86:d7:ca:c5:95:
         a4:e6:3e:ef:fe:11:ea:a9:aa:f6:d2:4d:97:11:d5:6b:0d:54:
         74:38:4c:da:4b:e3:b2:59:fa:39:e0:62:9e:60:cf:fe:19:49:
         55:01:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:13:27 2025 by rpki-client