Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File:                     W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier:          ZwTIIrgoKp/50AeJd2mMhEEn/ucESiQ9TpIvNPotl38=
Subject key identifier:   4D:35:68:1D:10:F0:C4:97:6C:6A:E7:73:E9:6B:AD:A6:A5:32:C9:8A
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer:       /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial:       019674C25C5F819469F2323CA591BF3D5BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number:          0948
Signing time:             Sun 27 Apr 2025 01:00:16 +0000
Manifest this update:     Sun 27 Apr 2025 01:00:16 +0000
Manifest next update:     Mon 28 Apr 2025 01:00:16 +0000
Files and hashes:         1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: M41VJacIIes8LTZy1O5VADKPVnrr0lZ/euD0vPbOris=)
                          2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:c2:5c:5f:81:94:69:f2:32:3c:a5:91:bf:3d:5b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
        Validity
            Not Before: Apr 27 01:00:16 2025 GMT
            Not After : Apr 28 01:00:16 2025 GMT
        Subject: CN=4d35681d10f0c4976c6ae773e96bada6a532c98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ab:f7:b7:82:d7:79:9b:39:41:04:36:82:40:
                    e8:62:02:39:2c:9e:14:d6:bc:88:25:a4:21:26:ca:
                    5d:16:2c:5f:c8:65:7c:67:28:44:c6:46:71:36:5e:
                    aa:a3:d1:47:06:3b:79:df:44:37:ad:74:f3:14:05:
                    cd:52:12:01:e2:c3:13:75:68:0b:aa:0b:4d:4c:64:
                    d0:d6:74:7d:05:85:66:57:67:8d:fd:b0:11:42:b6:
                    ad:63:4a:e6:b2:dd:31:f7:ba:02:c5:24:d2:1d:6b:
                    dc:91:6c:63:44:1e:9b:81:d8:b3:68:ed:fd:d4:a3:
                    93:75:4e:dd:f5:f8:4a:a7:1b:d8:67:b6:ad:3f:b2:
                    9e:8d:a9:54:51:be:86:0c:13:e6:56:e5:79:a0:f8:
                    26:f6:a4:43:7c:fb:5b:d0:5f:de:34:04:d3:10:0c:
                    36:5c:0c:33:ce:c3:a5:02:ac:e5:70:12:64:64:7d:
                    c0:a1:2d:77:0b:5f:17:cb:b3:b6:69:18:de:73:d8:
                    42:91:64:47:ab:f3:b0:d8:3f:8c:45:03:60:87:5c:
                    08:d7:63:45:a2:67:56:90:ac:d0:df:a0:b7:6c:d1:
                    61:43:a4:70:56:bd:30:cd:ba:30:27:33:d4:1f:f9:
                    be:eb:92:5d:6d:ed:07:19:3b:f0:86:99:b4:cc:6c:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:35:68:1D:10:F0:C4:97:6C:6A:E7:73:E9:6B:AD:A6:A5:32:C9:8A
            X509v3 Authority Key Identifier:
                keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:bb:2b:e4:2e:fe:df:a7:db:d1:91:62:f7:f5:4d:bb:94:
         e0:a6:dd:93:59:13:f8:7d:98:98:d3:04:5f:b7:d4:48:5c:5a:
         a9:21:4d:48:cc:bc:ba:df:a8:9e:3c:56:28:d2:e3:23:6c:46:
         f4:a3:1a:7d:57:15:5f:79:fb:10:fb:18:dc:03:c2:ec:05:ef:
         57:c0:6f:24:8e:b1:ac:95:f2:51:aa:dd:1b:92:03:b1:b0:29:
         f2:33:7d:2f:86:5a:e7:9f:c0:3c:3d:29:08:68:aa:23:85:72:
         6c:c7:fa:45:1c:dc:ec:e4:91:5f:e6:6f:07:11:24:b6:16:f9:
         c9:82:a2:9f:64:84:99:8b:e2:2c:39:7f:51:1f:85:ed:84:07:
         3f:21:b0:63:c8:aa:1d:8a:90:20:6c:96:bb:f1:df:de:2a:b8:
         e5:e8:01:7a:d7:13:dd:7c:b0:a2:cc:54:af:e3:46:e4:49:99:
         e4:e8:ee:5a:06:44:fb:9e:08:19:da:4c:41:03:cb:e1:4b:d8:
         1a:c5:62:d3:4b:05:d0:de:96:97:76:2e:92:27:03:2e:15:94:
         90:79:53:c8:87:49:b9:51:75:36:3b:ab:8c:ca:d1:d1:65:a3:
         33:1f:50:07:ea:93:f6:2e:cd:0b:77:e1:94:07:ef:c1:6c:b1:
         0c:11:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:31 2025 by rpki-client