Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
File:                     9dkBIB_wsbl-89GnLaQeGPAUV2I.mft (raw, json)
Hash identifier:          rdnDO3XdMl3dLwiS/zjVhB4grdy0zJDgXfhpcn1x6ws=
Subject key identifier:   5F:E6:6A:21:75:C1:6D:86:62:78:6D:32:92:85:41:D6:5D:35:89:A1
Authority key identifier: F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62
Certificate issuer:       /CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
Certificate serial:       0196A7D4B5186D9FE3D90F11863EDA881A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
Manifest number:          0E94
Signing time:             Tue 06 May 2025 23:00:57 +0000
Manifest this update:     Tue 06 May 2025 23:00:57 +0000
Manifest next update:     Wed 07 May 2025 23:00:57 +0000
Files and hashes:         1: 9GHYyQxjIAaL8idlitP2zYbsDjA.roa (hash: RL9eBc6j8CiAvBwDEIUMqLZtPOvwgVV2Phu4g1DvLkU=)
                          2: 9dkBIB_wsbl-89GnLaQeGPAUV2I.crl (hash: jdsTQlIEgmVc6B2+P7gbpb8cB7IKU2e5RahCb7FPiJs=)
                          3: AbT3htyDEl5yF3u5Q8YiHkq-VPo.roa (hash: I+WRaSD6/q0A0IB1xrlT+ST9KI1uezSwJcEv8edCWJ8=)
                          4: Bwqq8Z5AZL_2lUde5qk7oColHZI.roa (hash: bFEzn3Yzi/n+R1SI5psM35DL7T0gcBGjte1Ppv7HbOc=)
                          5: Rp8fxcLKkkldzr9NKHoycDdZmcY.roa (hash: pwYOFujYISzC4oGuTnK76LZ1N3L4Kc4WvVqV0Z88I2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:d4:b5:18:6d:9f:e3:d9:0f:11:86:3e:da:88:1a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d901201ff0b1b97ef3d1a72da41e18f0145762
        Validity
            Not Before: May  6 23:00:57 2025 GMT
            Not After : May  7 23:00:57 2025 GMT
        Subject: CN=5fe66a2175c16d8662786d32928541d65d3589a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:dd:56:dc:3c:fd:fa:c5:cf:1c:91:fd:52:
                    78:5b:c3:54:16:79:98:fb:99:14:3d:9f:2e:24:c1:
                    2d:7e:b7:ba:ed:1a:6e:96:57:e7:a0:8f:96:85:2b:
                    74:b2:81:d1:a5:77:90:94:77:53:8c:fa:bd:40:17:
                    72:1f:35:81:ad:e3:dd:b7:58:5d:8d:51:71:32:1a:
                    cd:40:ca:c0:4b:0f:d5:c6:2a:a5:87:0d:45:ea:7c:
                    bd:fa:53:98:50:1f:79:88:6b:35:6b:2e:5d:63:c7:
                    49:90:99:1d:f7:f0:30:10:82:5d:8f:a2:2e:b2:10:
                    31:86:25:e1:68:cc:2a:05:c2:12:19:39:79:a2:42:
                    ad:1e:0f:ee:a8:4e:d7:7c:ed:b7:53:a6:d7:ae:3d:
                    fb:89:76:e5:23:f3:16:7b:4e:c2:95:a5:c9:1a:44:
                    f3:27:80:fb:11:84:c2:8e:d3:2a:73:7b:4f:c0:e6:
                    a8:b1:c1:04:65:00:f9:1f:ce:7f:16:61:10:73:3f:
                    5b:82:67:6b:5f:75:a8:98:51:38:16:00:ed:dc:d0:
                    85:2a:28:39:ff:03:cd:41:bd:08:fb:25:53:b8:4c:
                    7d:19:14:c5:37:46:f2:6c:a0:08:2a:83:50:86:f0:
                    b2:c5:fe:c7:84:b5:a2:a1:9f:69:0f:a2:f7:f1:aa:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E6:6A:21:75:C1:6D:86:62:78:6D:32:92:85:41:D6:5D:35:89:A1
            X509v3 Authority Key Identifier:
                keyid:F5:D9:01:20:1F:F0:B1:B9:7E:F3:D1:A7:2D:A4:1E:18:F0:14:57:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dkBIB_wsbl-89GnLaQeGPAUV2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad5545-f8af-4278-90a5-a3bbc87a77cc/1/9dkBIB_wsbl-89GnLaQeGPAUV2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:49:12:a9:a4:42:5f:07:30:d5:d0:4f:be:3b:39:a2:60:8a:
         33:14:a2:13:8e:b0:ed:3c:6e:6e:41:87:89:9b:88:6a:06:4c:
         67:42:cb:4b:32:74:14:9d:a3:22:5d:66:17:02:13:0f:fb:79:
         84:5c:60:00:91:a1:c6:cd:6f:40:44:ba:b9:05:89:ec:19:74:
         50:26:a8:bd:21:d0:50:32:b1:dd:60:b2:e7:0c:a9:c5:fa:4a:
         59:e2:2d:c6:d0:05:b8:37:83:c1:b6:a9:39:be:16:67:d2:13:
         db:45:1a:ae:25:5c:7b:83:37:2c:f4:bf:e6:67:34:a1:7d:71:
         3f:1b:19:6d:55:e2:c1:65:c2:11:f6:3c:27:f8:50:43:ce:0f:
         b1:4b:c3:de:00:a0:89:84:a7:81:de:71:64:36:ef:7c:c2:6d:
         d9:ee:5a:08:7d:13:4a:21:47:40:b2:94:7f:1b:d3:59:bb:8e:
         5e:11:00:43:40:9d:15:41:20:48:e7:4e:c7:48:11:13:fd:6c:
         2e:b2:7e:4d:28:3f:92:e9:92:61:24:1c:49:1c:91:03:2b:bd:
         83:a4:af:9c:d0:cc:4f:41:ae:79:31:fd:00:a3:97:9f:17:d4:
         84:85:9e:2f:cb:f8:d7:36:e6:a1:c8:1a:1c:3c:30:70:cb:c6:
         7e:e5:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:05:59 2025 by rpki-client