Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
File:                     _DWHfMA4v_25e7PW6iFqtSs6BYI.mft (raw, json)
Hash identifier:          iUOa2I9rnirUUbYfqDcBmWaqCf2YaZtPd4ezoS7kFJk=
Subject key identifier:   A3:2F:28:35:34:4E:E5:E0:84:85:5A:91:B5:A7:6A:19:43:90:59:94
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Certificate issuer:       /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial:       01963F8BB2434CC6124822140C3DCF0BECAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
Manifest number:          1339
Signing time:             Wed 16 Apr 2025 17:00:41 +0000
Manifest this update:     Wed 16 Apr 2025 17:00:41 +0000
Manifest next update:     Thu 17 Apr 2025 17:00:41 +0000
Files and hashes:         1: D477qKV-aPF2n8oBjSmgcuod2kE.roa (hash: pyW25bQPJKBFO/7F+t0bHE29cloxJ5T2+KSGVCTHaws=)
                          2: _DWHfMA4v_25e7PW6iFqtSs6BYI.crl (hash: NULImqju6HfIummzLyRzzyWwH8y95wvLXUFuN9isEU4=)
                          3: f81q0GaGTCIHgaFVlHTHYXL7SEQ.roa (hash: Gw3xzXZPKuGmrAR2PrIl2quzqApN9VDz3sjokAQjW1Y=)
                          4: xKY8IzQ2skdO2j6b-9Nje_P42ZM.roa (hash: FO50+0Bv0UTkxnFBKac0wF3ON0aLSEXsEeZdHRUd87w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:8b:b2:43:4c:c6:12:48:22:14:0c:3d:cf:0b:ec:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
        Validity
            Not Before: Apr 16 17:00:41 2025 GMT
            Not After : Apr 17 17:00:41 2025 GMT
        Subject: CN=a32f2835344ee5e084855a91b5a76a1943905994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:e3:f9:9a:4d:29:54:2f:f6:4a:db:b5:6c:
                    9e:df:1b:98:86:92:a3:1d:c1:40:3d:d6:19:ac:ad:
                    19:81:5d:21:af:ec:de:44:34:58:05:3a:6d:3f:d3:
                    02:22:0b:83:98:14:57:c3:cc:f4:c2:bf:00:48:40:
                    52:c9:54:4e:fd:36:56:7d:2e:39:63:ac:1a:31:f8:
                    2a:2d:41:38:8e:58:78:5e:b0:07:90:f5:23:f9:da:
                    90:fe:f4:d0:0d:c5:b0:47:93:1f:5a:cc:91:a6:70:
                    8b:24:60:53:e9:a1:a7:58:c9:75:59:63:61:3e:30:
                    cb:87:a1:28:38:b6:46:a0:ef:41:b8:83:4c:e0:4f:
                    ab:47:be:fe:a6:56:72:38:c4:83:41:1b:81:0f:f4:
                    38:b9:ca:eb:de:cc:bd:86:09:82:b2:0f:d2:39:1a:
                    fb:92:b9:d6:d3:c9:87:ff:bd:69:d4:9e:3b:8d:2e:
                    0b:c3:4d:f8:17:80:95:66:67:29:f6:c7:1c:2f:59:
                    13:2f:5c:df:b6:64:2d:0d:f6:3d:60:66:4c:22:36:
                    5c:43:6e:f1:d5:40:8c:10:0c:0f:cc:2a:27:2e:18:
                    16:59:f0:57:58:2c:37:b3:56:4b:f0:d6:0c:47:d8:
                    64:74:84:5f:4b:4a:8f:74:62:dd:bd:81:c0:94:3f:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2F:28:35:34:4E:E5:E0:84:85:5A:91:B5:A7:6A:19:43:90:59:94
            X509v3 Authority Key Identifier:
                keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:49:fd:a6:51:3f:4e:e8:24:c9:6a:59:6e:6d:99:68:b6:4c:
         1c:ee:14:69:f5:ba:25:f7:5c:84:d8:63:37:1c:36:13:d4:db:
         82:ab:43:f8:d4:b6:37:4a:32:86:b0:39:11:b1:53:66:b5:89:
         86:db:ec:43:54:d0:a9:05:64:ed:bb:1a:ff:c8:52:fa:1b:da:
         69:bf:ac:d1:f3:07:b0:fa:77:a7:60:fa:70:e2:fb:96:af:97:
         f7:72:1d:44:8e:c1:51:73:e0:67:d7:51:c9:83:b3:bf:1a:a5:
         3c:43:e3:a4:c6:f9:47:69:eb:3f:a3:36:e8:ca:cf:84:b1:47:
         64:fb:53:10:d6:f1:7b:34:bc:92:a1:7c:4e:6f:9f:dc:c3:f1:
         65:65:2b:5c:67:fb:3a:f0:43:e5:04:f2:f6:85:3e:eb:68:7e:
         a4:c9:e5:52:07:b3:8d:8f:cc:7f:c1:fc:4a:16:1d:0d:74:a6:
         4b:d0:be:86:98:1f:77:71:04:6a:06:84:83:50:71:ae:bf:a0:
         39:16:9c:45:10:73:72:ed:fe:0b:6c:0e:e8:8c:9f:76:08:06:
         0b:51:4c:51:1d:06:24:4a:86:48:f1:32:d1:02:11:9d:76:bd:
         2e:66:bc:47:2e:bb:36:0e:47:97:4b:ac:30:38:e5:0f:4a:40:
         d9:af:4f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:37:27 2025 by rpki-client