Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
File:                     5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft (raw, json)
Hash identifier:          KDdtlQTbolzrk3ciV53SvJWXMsqjtAvvpDg9s5aREMI=
Subject key identifier:   2A:8D:24:75:F8:AB:2F:9D:AB:10:3F:A4:EF:CB:A3:80:5C:7B:37:AC
Authority key identifier: E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85
Certificate issuer:       /CN=e566e0e51628554cd92634b711ab758f8467c485
Certificate serial:       0196778D088EF5D658F489C039A3161A5817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
Manifest number:          1510
Signing time:             Sun 27 Apr 2025 14:00:53 +0000
Manifest this update:     Sun 27 Apr 2025 14:00:53 +0000
Manifest next update:     Mon 28 Apr 2025 14:00:53 +0000
Files and hashes:         1: 5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl (hash: YdSSvgfWSq3VSO12yqO0xL1iLG7015qAAkBgKWu/CfA=)
                          2: wXYrr5S6sLNczud4QNKL5j-Xgqk.roa (hash: 4Keb/PY19EWO9qNRBP6d1iNJWH59G6NwS5aeFCqxnF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:8d:08:8e:f5:d6:58:f4:89:c0:39:a3:16:1a:58:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e566e0e51628554cd92634b711ab758f8467c485
        Validity
            Not Before: Apr 27 14:00:53 2025 GMT
            Not After : Apr 28 14:00:53 2025 GMT
        Subject: CN=2a8d2475f8ab2f9dab103fa4efcba3805c7b37ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:24:59:f4:97:93:ee:d8:26:e9:b2:ea:2d:
                    b1:29:eb:83:90:9d:ed:bb:8d:25:ae:6e:ee:4a:14:
                    2e:b9:df:63:dd:70:6c:c9:46:d7:51:1d:80:d8:54:
                    8a:b1:0c:0e:1c:f7:34:b7:df:ff:41:c4:42:a3:62:
                    d7:92:1a:28:77:9b:22:21:7f:85:8c:54:ef:a7:b4:
                    88:04:98:ae:75:2e:75:de:6b:fc:de:26:85:04:44:
                    4d:a1:51:72:ec:bf:0d:5b:54:87:95:0d:a2:32:80:
                    43:05:ea:d9:6f:f8:9c:c3:17:82:c0:83:84:77:90:
                    57:58:0a:c9:d8:42:a4:99:c6:5b:fb:f3:e0:f6:15:
                    d5:5e:fc:16:4a:0e:66:3c:85:a2:ea:60:0a:cf:70:
                    b6:9e:34:c7:8d:2e:61:28:30:66:15:30:75:72:3a:
                    0a:4a:ca:38:9f:3a:d0:9c:20:7f:28:95:f2:16:0b:
                    b8:d8:d4:b0:0a:47:ec:0f:08:eb:6c:50:31:75:76:
                    a3:73:c5:aa:a4:1e:59:f4:e6:8c:ae:35:00:24:80:
                    32:16:36:c3:49:47:d3:ea:f9:88:05:86:8b:7f:ea:
                    03:08:b0:8a:59:ac:07:7b:42:1a:f6:90:b6:c4:89:
                    cc:73:f8:4b:d4:cd:36:d9:51:15:df:a0:32:9e:22:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8D:24:75:F8:AB:2F:9D:AB:10:3F:A4:EF:CB:A3:80:5C:7B:37:AC
            X509v3 Authority Key Identifier:
                keyid:E5:66:E0:E5:16:28:55:4C:D9:26:34:B7:11:AB:75:8F:84:67:C4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d9e16d-7e8c-43ec-99f7-e296cfd97209/1/5Wbg5RYoVUzZJjS3Eat1j4RnxIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c8:ad:0d:98:47:f7:4b:c8:aa:7a:ee:2e:15:f6:8f:e1:14:
         59:ff:ba:1c:ea:62:8f:f6:11:a7:82:88:05:55:ad:7a:f9:dc:
         e8:6e:2c:d2:52:b8:c1:56:b0:cb:01:ac:49:f2:36:9c:13:1b:
         1e:fc:a8:93:ec:b5:b6:48:0e:d1:01:c2:a1:27:02:7a:a2:a6:
         aa:b1:5c:1d:38:85:97:09:9a:31:8a:4b:67:b9:96:fe:10:8e:
         59:b9:68:0b:8d:61:74:b9:ba:9b:c8:a5:38:7f:8e:a1:da:57:
         04:ab:d9:cc:08:04:44:f3:33:d8:b2:1a:2e:06:23:5a:05:30:
         e5:bc:d9:f1:ae:30:46:b4:0d:f2:ef:04:42:5d:ab:c3:aa:0b:
         1f:d5:27:74:50:0d:25:eb:24:d2:a2:0a:1f:c8:93:8a:ea:0f:
         47:04:7f:1a:55:ea:c5:b3:d5:0c:10:f9:64:87:6f:b9:d7:21:
         58:19:d4:d1:0e:89:23:b5:4b:51:26:96:e3:dc:d9:fc:6e:18:
         c0:82:5d:0a:91:ae:41:fc:07:d3:36:03:18:0c:a8:9f:12:96:
         72:b0:9a:ac:5d:be:bb:fa:79:6b:3f:49:02:46:63:69:3b:03:
         b5:6e:ec:f1:38:f9:42:dd:90:88:d7:44:3c:a9:c8:53:f0:b8:
         bf:6a:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:55:26 2025 by rpki-client