Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
File:                     WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft (raw, json)
Hash identifier:          sIrYepn3ewI8c+bz551v9aHoAW0+13IL/mwBNws0o/s=
Subject key identifier:   F8:88:33:06:46:0B:46:9E:78:F0:00:BD:32:87:9A:C9:2E:DB:31:3E
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Certificate issuer:       /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial:       0196790D4605300344FFF59315B03E742BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
Manifest number:          70
Signing time:             Sun 27 Apr 2025 21:00:35 +0000
Manifest this update:     Sun 27 Apr 2025 21:00:35 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:35 +0000
Files and hashes:         1: O49MqYveFwFxlkpzE3acuCCtZr0.roa (hash: YUu3sNGPmNlXjpfrsmo0LHZail+U9EXlZogDbonTJRY=)
                          2: WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl (hash: xipV0jyNXd4iumemEJNoMGLQ8wLT1yvuEMj4Nq/kHog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:0d:46:05:30:03:44:ff:f5:93:15:b0:3e:74:2b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
        Validity
            Not Before: Apr 27 21:00:35 2025 GMT
            Not After : Apr 28 21:00:35 2025 GMT
        Subject: CN=f8883306460b469e78f000bd32879ac92edb313e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1a:43:96:36:3f:16:fc:0c:e4:76:f3:9d:3e:
                    88:d8:9a:33:87:2f:4e:d5:81:8b:ad:e1:cc:ee:fd:
                    d9:f0:8c:08:15:07:1e:d7:6d:d7:22:a5:39:90:ee:
                    f4:a1:dd:0a:dd:a5:8e:5a:e8:78:5c:35:2a:c2:74:
                    6d:7c:57:8a:37:5a:3d:22:a3:91:06:65:7f:fa:b8:
                    d0:17:7b:8d:b2:33:b8:12:80:41:28:58:25:ea:65:
                    d6:87:70:3e:8c:65:b6:7c:a6:6e:fa:0b:bb:4c:87:
                    90:1a:af:c1:a2:80:c8:fd:91:47:0a:9a:3f:ea:45:
                    97:02:e6:45:84:fd:9e:0b:f8:a4:fe:f9:21:a3:82:
                    db:4d:a9:ee:05:a3:8c:8b:a1:78:39:83:f9:f0:c9:
                    63:1f:f6:f2:3f:33:dd:df:ce:b2:37:ab:49:79:1d:
                    01:b0:45:d3:ee:0a:8f:5c:37:38:e6:7b:40:1e:fb:
                    d4:28:ec:da:58:79:e0:62:5e:a5:11:c4:70:3b:90:
                    c9:f7:2a:ba:71:56:9a:f2:22:5e:f7:0f:20:56:f1:
                    60:11:c3:49:f9:b5:6a:12:59:59:55:ac:d4:48:f4:
                    dc:ac:45:5f:24:58:67:02:d2:84:b0:d2:88:1f:35:
                    87:3d:51:0b:8a:13:ec:bb:44:d9:e9:3d:13:57:83:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:88:33:06:46:0B:46:9E:78:F0:00:BD:32:87:9A:C9:2E:DB:31:3E
            X509v3 Authority Key Identifier:
                keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1c:70:67:ab:1b:75:10:fc:56:79:3e:ca:1c:51:53:88:f2:
         14:32:53:d2:8d:15:39:c3:9b:8b:d6:81:4c:7c:bc:58:e2:50:
         75:8b:72:0e:65:8b:67:20:0b:89:2f:77:f9:15:a1:03:d6:9c:
         94:e3:6f:6b:88:7c:4d:30:66:9c:44:c2:60:a2:fb:eb:21:a0:
         ee:25:a7:cc:3c:48:4f:84:01:2b:77:55:16:df:62:08:a2:32:
         b6:1c:3d:f4:4a:ba:2d:d4:55:6c:84:eb:93:43:67:40:c5:0f:
         4f:51:49:89:f4:87:69:27:53:9a:7f:e6:16:d6:27:48:fc:b3:
         24:39:87:a8:40:15:b7:3d:b8:e3:9e:be:b3:fe:0e:14:ea:9b:
         a0:39:5f:6f:07:87:69:90:a4:49:e2:23:57:77:3d:9d:6a:88:
         78:77:8c:f8:d1:65:41:ed:e1:89:4f:16:e2:f9:e9:9f:e5:38:
         d1:21:88:4a:b9:76:4f:57:d2:0a:cf:df:83:3a:b8:dd:a8:4a:
         8f:fc:0f:c2:11:b8:ef:72:19:a4:7a:d8:d6:69:39:83:32:c2:
         ca:b3:b2:db:5e:8d:14:0e:ae:25:35:ca:98:0f:98:70:7e:d8:
         b9:fc:99:0e:20:b3:22:56:cd:c8:f0:80:93:e9:88:03:ff:5f:
         4e:d5:75:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:34:04 2025 by rpki-client