Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File:                     w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier:          FXrChpKXk6BbQi9OgahixhSOee7PSGo7hhufuZFY1sQ=
Subject key identifier:   DF:99:2A:ED:8B:14:89:48:05:1F:19:04:FA:AF:B3:FF:3D:D0:80:1F
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer:       /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial:       019675D5777C88DC288A2AAB55294F3E44DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number:          150F
Signing time:             Sun 27 Apr 2025 06:00:46 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:46 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:46 +0000
Files and hashes:         1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
                          2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
                          3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: cfpWQxpG+mvMiTUTwUUec2mDde88loIbWtENxRI7eGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:77:7c:88:dc:28:8a:2a:ab:55:29:4f:3e:44:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
        Validity
            Not Before: Apr 27 06:00:46 2025 GMT
            Not After : Apr 28 06:00:46 2025 GMT
        Subject: CN=df992aed8b148948051f1904faafb3ff3dd0801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:66:1f:78:fd:8a:d3:2d:6e:75:c3:79:2c:
                    9b:30:ce:f6:e5:bf:a0:0e:bf:92:43:98:54:f8:d7:
                    20:df:be:e7:75:bf:fe:0c:4f:b8:92:db:88:ab:7f:
                    8d:f4:a6:0c:64:3a:9a:bc:ac:b8:2a:8a:b4:d1:a1:
                    c7:f3:62:58:eb:71:b7:0b:ff:85:01:73:1b:4f:2e:
                    48:50:fa:76:83:bb:77:43:8b:7d:0f:29:60:37:96:
                    97:b4:de:ba:7b:77:ae:8b:e4:ed:a1:19:25:7e:a5:
                    73:0d:43:7d:ee:6f:11:ad:99:1c:31:33:8c:21:72:
                    8d:db:8c:ad:a2:53:21:49:1f:85:f4:e2:cf:45:8e:
                    11:a2:6e:a5:3c:f0:60:58:6c:50:63:95:65:ea:a4:
                    79:69:f8:c3:2f:22:a9:80:2e:4f:7d:4c:79:36:7d:
                    df:54:d3:86:83:7c:62:a2:d7:a0:a4:64:1b:a4:d0:
                    b5:0f:c9:51:d9:fc:5a:39:5c:ef:b5:c4:ed:02:a8:
                    91:17:0c:2f:a0:78:7e:27:84:78:26:d8:d2:13:18:
                    cd:c8:2c:fc:d5:4d:53:a5:81:73:90:eb:81:bc:c2:
                    3f:0e:9d:fb:bc:dc:49:65:0d:8a:e6:be:4a:35:96:
                    73:35:cb:05:bb:7d:0e:3b:ef:c0:22:b9:1f:b5:c9:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:2A:ED:8B:14:89:48:05:1F:19:04:FA:AF:B3:FF:3D:D0:80:1F
            X509v3 Authority Key Identifier:
                keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:10:01:22:10:7e:c8:21:a9:39:da:ba:cd:16:fb:45:4c:6d:
         bf:ea:b4:10:86:7b:3e:bf:1a:62:c3:34:2c:68:d6:da:1d:e6:
         38:95:e2:61:b0:1f:3d:28:6b:37:09:d4:53:16:f1:d2:2b:f9:
         b3:40:ae:60:fb:a9:fa:9b:2f:8b:d7:d5:34:af:91:a1:b0:14:
         bd:ad:ae:18:05:0e:64:76:ba:5c:84:90:ae:3b:e2:e0:aa:39:
         85:65:81:d2:a4:0e:ac:81:0e:2d:00:c2:b5:8d:00:cb:bf:83:
         93:e1:16:da:63:e6:f0:6e:e0:67:fa:95:87:35:d3:37:0e:f2:
         9f:22:15:e0:c8:3a:7d:2e:89:28:47:92:cb:e1:cd:7b:c9:df:
         a2:dc:6f:a6:8f:a4:ea:b5:48:82:cc:27:3d:ae:ea:1d:60:35:
         29:5b:b4:80:f7:67:2e:a8:45:eb:5d:f3:75:7f:6d:14:d1:e8:
         3a:5f:52:3a:cc:dd:55:e5:20:8e:ec:3c:80:4b:44:78:23:dd:
         30:a3:d1:f0:ee:ab:f0:7d:55:86:30:f8:80:a3:9a:c0:7b:a2:
         6b:26:46:32:63:dd:e5:5e:f7:03:9f:b8:55:c4:01:4e:b7:9b:
         2a:01:df:1e:76:59:5b:45:a9:33:f7:80:cd:91:b7:bd:f5:8f:
         b3:5b:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:21:30 2025 by rpki-client