Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          huHeijhZXRcvMW3DEeOu0eeJbpbctvZYmrEN+Za2dDQ=
Subject key identifier:   20:62:B5:27:66:20:6B:73:36:0A:77:80:28:55:30:55:B0:DA:AC:CE
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       019684DA808895E0420E1F16B475B1233E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0C72
Signing time:             Wed 30 Apr 2025 04:00:34 +0000
Manifest this update:     Wed 30 Apr 2025 04:00:34 +0000
Manifest next update:     Thu 01 May 2025 04:00:34 +0000
Files and hashes:         1: Fuwpc4A-TRfgVPSV8ewciJSWczY.roa (hash: Y0uk9yq3kYnde4ofaqo2ePCwnF8vYGybwjzGM4J+Glo=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: g+MghxuSk1egzzqv7iDKUJqva9Vr+1hl01ShBMPaN5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:da:80:88:95:e0:42:0e:1f:16:b4:75:b1:23:3e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Apr 30 04:00:34 2025 GMT
            Not After : May  1 04:00:34 2025 GMT
        Subject: CN=2062b52766206b73360a778028553055b0daacce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:dc:e1:3d:dd:0e:a5:3c:27:a0:ed:1c:44:
                    71:b3:f8:6b:34:48:c6:ad:ff:5b:ce:b3:46:f7:cc:
                    66:90:59:f5:a6:50:b0:8a:bd:61:d8:74:72:d9:ef:
                    84:e0:0c:3b:2e:b6:a6:f5:75:70:ef:19:e7:dd:f8:
                    27:8c:83:5d:23:3a:8e:6c:ab:6c:ca:d3:3d:08:a6:
                    32:4f:19:14:a9:f4:7f:a2:89:09:a7:44:f2:9e:a7:
                    f1:bc:45:40:0e:14:b7:3a:95:f5:1f:30:29:6d:05:
                    66:a2:f6:31:1e:62:b1:95:ee:3e:b8:83:f1:a3:87:
                    55:e4:e2:15:40:4d:ad:1d:d1:e6:43:72:1b:ee:f4:
                    e0:8e:8e:fa:e2:df:2f:7c:d4:fc:ac:37:f5:20:d0:
                    72:cd:e5:99:d0:1c:88:b5:21:80:82:0c:8b:a6:cb:
                    1c:99:6f:67:72:3a:80:b1:04:f7:d3:00:05:e1:95:
                    cb:06:44:4f:b1:13:7d:d2:2c:b2:82:4f:b4:a8:a4:
                    94:3b:cb:51:a1:2e:df:b9:86:9e:53:26:c2:fd:83:
                    50:2f:39:51:be:80:30:ee:c5:35:9d:1a:6d:96:be:
                    b3:99:b9:a0:97:06:d4:86:6d:72:cc:3e:95:12:9c:
                    49:9e:95:0d:0c:a5:00:db:4c:95:3f:15:da:74:f0:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:62:B5:27:66:20:6B:73:36:0A:77:80:28:55:30:55:B0:DA:AC:CE
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:14:a2:e1:3c:fe:1f:1c:7d:d9:a3:a1:f4:fc:7b:92:af:
         61:2f:ed:91:93:4f:ce:c5:91:23:27:a1:b8:b5:80:e5:8c:9a:
         be:36:19:bd:68:6c:5d:55:f9:bd:42:be:ce:b2:2f:65:28:9f:
         08:33:1e:45:17:d8:1d:54:97:37:e1:8f:22:a5:1d:dc:c6:c4:
         52:64:04:18:5d:f1:fe:de:16:93:4a:99:eb:86:9c:4c:c9:a0:
         00:35:27:6a:54:b5:4f:61:40:1b:0a:af:9a:ca:c6:3e:34:85:
         93:99:ac:db:56:14:d6:97:c7:27:06:16:f3:71:a6:fc:24:b5:
         9e:f5:43:a4:4c:98:9e:35:2e:7f:b8:b5:56:73:cb:96:9e:24:
         5b:43:1c:a3:4a:99:70:26:4a:68:8f:d4:68:27:29:67:d4:85:
         1c:e1:dd:e4:3d:69:ca:a1:64:4d:24:9a:b9:dd:a8:aa:85:4a:
         40:b3:df:09:fa:54:fe:bf:29:3f:3e:1c:44:90:44:09:00:4b:
         e7:1e:b5:07:74:84:cb:92:16:6f:da:36:7b:65:36:42:f0:0d:
         3a:52:16:8f:7c:b7:e8:d2:11:71:15:ae:db:8c:3b:d2:c0:ef:
         69:4d:3a:dd:eb:de:bf:78:de:a1:0c:25:72:fd:4f:ab:57:67:
         a9:e4:3f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:35:22 2025 by rpki-client