Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File:                     W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier:          b7qvmzThQ+yYxs3Jwi1zOO6bU+L+b2gHnyoc0oKIt0o=
Subject key identifier:   AC:AC:E7:25:A9:DB:15:CE:C1:4B:51:27:AD:05:74:59:89:F6:0F:09
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer:       /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial:       019682EC0BF12F9EB85D8E5D4CEADFF4356C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number:          035F
Signing time:             Tue 29 Apr 2025 19:00:29 +0000
Manifest this update:     Tue 29 Apr 2025 19:00:29 +0000
Manifest next update:     Wed 30 Apr 2025 19:00:29 +0000
Files and hashes:         1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: 7cW2J2+9YR+DPmYUgjQLvGXOqo5WO+WWwro2RFnH9tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:ec:0b:f1:2f:9e:b8:5d:8e:5d:4c:ea:df:f4:35:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
        Validity
            Not Before: Apr 29 19:00:29 2025 GMT
            Not After : Apr 30 19:00:29 2025 GMT
        Subject: CN=acace725a9db15cec14b5127ad05745989f60f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:68:e1:70:15:0c:0a:94:db:c4:d3:44:5d:
                    52:d3:cc:3a:02:53:d4:75:e6:d0:f7:3d:3e:d0:d5:
                    6b:eb:e5:00:6b:eb:43:65:53:f3:54:ad:ca:83:e9:
                    8c:94:16:ca:a9:a2:f2:d4:42:a1:b0:72:df:2d:2e:
                    5c:f7:75:31:c3:51:45:80:66:e1:f9:bf:6c:82:84:
                    f9:da:53:d0:b5:d4:32:66:ad:53:12:03:f1:52:af:
                    a0:29:1a:ff:18:be:e9:c3:76:02:ab:e0:e6:34:a5:
                    ee:6a:93:ca:87:b0:d0:d2:dc:11:4e:27:7b:fc:b8:
                    64:9a:4a:ce:55:5d:ce:f7:2e:4f:0b:de:2f:9c:2a:
                    88:ac:cc:07:90:e9:f0:70:2b:f3:63:08:9f:26:b3:
                    78:1a:9e:09:76:47:0b:cd:c3:99:27:bd:2f:98:8b:
                    29:82:2a:f6:51:f9:c6:9a:2a:c5:df:e7:3a:1c:94:
                    c8:67:ea:b5:60:d4:02:d6:9c:14:67:4b:fd:d7:8c:
                    e7:db:38:c3:2a:23:bb:4c:af:77:50:f7:61:60:e6:
                    69:29:47:20:d9:1c:10:90:e8:8c:5c:79:3f:10:fe:
                    2c:ae:76:8d:7c:00:79:c1:8c:8a:58:08:a4:b7:93:
                    31:e7:5f:de:45:21:8a:ff:15:9f:7d:84:8f:9d:d0:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AC:E7:25:A9:DB:15:CE:C1:4B:51:27:AD:05:74:59:89:F6:0F:09
            X509v3 Authority Key Identifier:
                keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:2d:30:71:a2:19:d8:64:5c:84:aa:ab:9b:e6:02:14:4b:
         78:cc:cb:ab:6c:f3:49:88:75:c8:ec:6c:dd:49:03:28:13:df:
         81:df:1f:2b:fd:0f:03:82:49:77:1e:ed:fc:ac:6a:9b:32:c4:
         27:a5:94:61:aa:21:36:5d:2c:55:7c:fd:7a:71:e5:69:c0:96:
         82:79:74:98:8a:06:3b:29:74:91:e6:28:56:3a:e7:9c:5a:53:
         02:60:67:9c:2c:59:ff:cc:d6:a7:1e:2e:2e:5c:e4:48:08:c6:
         21:24:2e:9a:3c:7e:6e:f2:de:69:ee:d6:47:8d:9b:92:61:bd:
         9b:c3:c4:79:94:8f:81:84:47:e8:0b:b5:dd:36:eb:f9:52:87:
         09:f5:1e:39:02:2b:3e:31:cd:87:e1:3b:16:c9:46:73:9b:b6:
         1d:98:ff:91:e0:c5:20:64:53:31:99:20:42:e0:ff:6f:27:6c:
         00:cd:c7:9a:3f:89:66:43:fe:26:02:2c:e6:bb:e8:6f:85:0b:
         3e:14:9b:b7:11:7b:d0:45:f6:43:b2:8b:ed:42:4b:d0:df:16:
         2d:d5:f1:65:64:6a:59:6b:48:4e:f2:42:f6:7f:e5:eb:86:6b:
         48:42:ef:27:64:c7:3d:93:64:fd:58:71:a6:c9:02:28:f1:fb:
         2a:0d:49:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:47:32 2025 by rpki-client