Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File:                     wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier:          j6qFAxWjMc4X7H/vhVziikiKkY0rTf88rN++cZz/QLs=
Subject key identifier:   06:B2:71:70:7C:59:29:60:0A:C7:FE:90:17:10:A9:66:76:7E:C6:E6
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer:       /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial:       019677FAC0320427ACCA19D6152F5E8013A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number:          0FB9
Signing time:             Sun 27 Apr 2025 16:00:43 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:43 +0000
Manifest next update:     Mon 28 Apr 2025 16:00:43 +0000
Files and hashes:         1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: ppHQlen9zTmsT2WVg9UHTYQiF7zCxZy0C2WIpymzWHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fa:c0:32:04:27:ac:ca:19:d6:15:2f:5e:80:13:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
        Validity
            Not Before: Apr 27 16:00:43 2025 GMT
            Not After : Apr 28 16:00:43 2025 GMT
        Subject: CN=06b271707c5929600ac7fe901710a966767ec6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ae:ec:91:6a:cf:8a:ac:5f:ec:94:04:b0:f0:
                    83:a5:6d:19:e9:f0:1c:26:33:a8:14:ed:97:72:d4:
                    d3:79:7f:a6:50:4f:58:0c:90:e7:79:cf:b2:45:5e:
                    bd:be:b8:73:ff:fc:cd:2b:17:20:fd:82:78:a5:07:
                    36:46:9c:b4:83:82:66:6d:66:4e:7c:d2:55:36:51:
                    d5:fa:63:5d:b6:3e:5a:9f:57:52:57:b5:e2:c7:eb:
                    17:1d:89:90:8e:37:5c:d2:0f:f0:b1:42:d7:fa:4b:
                    15:50:28:db:da:ed:05:e7:ee:59:a5:fa:db:74:b6:
                    c5:a1:6e:dc:21:77:83:a1:73:2d:7b:e4:d2:4f:73:
                    f5:33:fc:36:76:98:28:47:ac:4b:d3:d0:19:b5:4f:
                    2b:33:99:68:e8:8f:3f:25:78:d4:43:1e:8a:c7:6b:
                    39:0c:d9:da:3d:9f:75:37:c5:15:35:89:f1:d7:7b:
                    bc:24:77:05:df:44:c9:ee:8e:f1:96:b0:1a:45:97:
                    15:cc:d4:c3:74:83:f6:ae:07:b7:12:8d:94:48:2f:
                    71:c4:93:09:7c:6c:a0:9c:22:fc:cb:20:bf:70:9c:
                    7d:14:90:d8:87:1c:8d:5b:ed:a3:9b:e3:b3:c3:d9:
                    41:f1:09:72:18:af:34:6c:84:22:71:91:d8:a5:21:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B2:71:70:7C:59:29:60:0A:C7:FE:90:17:10:A9:66:76:7E:C6:E6
            X509v3 Authority Key Identifier:
                keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8e:de:f2:cf:19:a5:00:89:57:b0:d7:84:32:a2:04:0d:bc:
         88:cc:8a:b8:1b:67:fd:ea:53:ac:7b:ee:7d:59:d1:44:8a:3b:
         ae:6f:25:0f:20:b4:0d:68:14:01:96:e4:69:93:70:bb:04:12:
         27:0c:fe:5c:df:e1:16:89:a6:c9:26:87:9c:3d:d9:b9:c7:b1:
         02:25:cd:f1:6c:07:e3:3c:e7:57:1d:19:87:41:31:83:9f:85:
         e2:6b:47:e3:e8:57:c1:e1:f0:f6:77:ea:80:06:02:df:ba:6a:
         d0:72:3c:0c:2e:79:ae:8a:bb:7e:6d:f7:90:d7:11:34:e7:77:
         46:7f:5c:02:0e:bb:ea:e6:8c:8a:e6:67:ed:9e:a2:3a:05:aa:
         b7:bc:a5:93:5f:bb:2e:4a:72:89:99:68:f6:9c:13:66:6f:90:
         0d:0e:a4:ef:0b:ee:b4:22:d1:49:9f:79:50:e5:55:fe:e3:ec:
         da:30:d2:78:2d:b3:11:e3:d2:43:96:04:23:d6:53:dc:52:28:
         df:15:f5:3e:8a:18:f2:80:2d:cc:f1:28:e5:84:d3:73:2f:f4:
         86:6b:59:93:f7:1b:94:21:09:e5:0a:7a:de:9a:2c:58:8e:e6:
         3f:1e:74:00:89:5e:ae:ef:7f:be:f2:41:c1:2b:91:a6:e0:36:
         25:9e:bd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:30:29 2025 by rpki-client