Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
File:                     KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft (raw, json)
Hash identifier:          lJka/1XQfuOMiGUwTAhK3olAmgTRPM3r48sHgPQUO0w=
Subject key identifier:   CB:EE:F0:D2:26:21:F3:A1:CC:4C:16:C1:71:47:26:2B:E1:F6:37:2B
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       01967CB2E5CFABB4B63352BD454F8A470728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
Manifest number:          02C9
Signing time:             Mon 28 Apr 2025 14:00:21 +0000
Manifest this update:     Mon 28 Apr 2025 14:00:21 +0000
Manifest next update:     Tue 29 Apr 2025 14:00:21 +0000
Files and hashes:         1: IoK2zTe-OC_dDY_734EVd48qQJ8.roa (hash: OV/EhbwqGxvFaPc6Pz7o/yEGyZxODTXrHQIagp84Afg=)
                          2: KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl (hash: DlGAvDYGENMP1QOxM765tB/JGNgCNbe76MLcYm3ZmWI=)
                          3: ZRdLYDl7hpyDg6YsYK-Wdw4baMc.roa (hash: 5DTIP8T8IUMMx2MqkILNMeW793Ol6SuU7VuRgBULAp4=)
                          4: r_GgOOrK8Ih9MzmtnCA_DxxC0BY.roa (hash: lJ1n4OTRsjhQ2vj+G2gNkyHqsFIRt5AG3VU9W6pXzHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:b2:e5:cf:ab:b4:b6:33:52:bd:45:4f:8a:47:07:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Apr 28 14:00:21 2025 GMT
            Not After : Apr 29 14:00:21 2025 GMT
        Subject: CN=cbeef0d22621f3a1cc4c16c17147262be1f6372b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:ec:43:07:d2:84:62:79:22:46:c6:0d:60:
                    9c:d6:ea:33:be:ab:3a:a6:16:5d:a9:a5:8a:de:10:
                    18:67:8c:fe:e4:53:68:63:dc:69:69:65:a6:cc:7d:
                    13:98:34:05:4a:df:4f:47:a0:d8:32:80:04:e4:e7:
                    8b:f0:d2:99:47:de:c2:48:ce:37:22:b9:a2:63:22:
                    e0:3d:51:ad:7c:e0:9b:65:62:be:8b:bc:05:a8:d2:
                    b2:3c:99:f4:6f:55:29:88:5c:8a:99:c8:2d:d4:df:
                    5d:27:c0:37:3b:fa:cb:16:e9:dd:b2:9e:5a:5c:f1:
                    e0:51:d4:cb:d7:01:e8:ad:96:a1:67:25:7d:ee:ca:
                    e1:28:1d:49:b8:15:e1:84:26:80:56:61:54:40:3f:
                    78:d9:86:97:c5:62:84:01:15:c2:f0:c7:91:9b:e7:
                    3a:19:2e:a8:8e:04:73:a6:99:dc:f7:ca:4a:7d:61:
                    d1:23:e5:ad:bc:a6:e4:24:9d:38:4b:06:eb:83:c7:
                    16:73:49:99:e6:05:66:46:d1:d6:d2:47:6f:b3:57:
                    c3:42:d8:b8:19:ca:af:17:81:f4:69:ac:69:ac:29:
                    ae:a7:d4:63:c0:73:75:99:7f:fc:4a:7c:0f:85:03:
                    67:68:6b:09:cf:1f:b8:18:16:52:d4:8b:de:66:eb:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:F0:D2:26:21:F3:A1:CC:4C:16:C1:71:47:26:2B:E1:F6:37:2B
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:05:e0:3f:86:fb:c7:cb:94:91:46:b1:d0:63:dd:75:28:ba:
         63:76:c5:67:2e:39:fe:e9:19:6f:f0:f1:f4:a4:4c:38:26:ed:
         78:f2:5d:76:dc:9d:08:ff:97:d9:54:12:c6:95:e6:0e:1c:48:
         05:02:25:df:93:bf:41:35:8f:c0:4b:bc:15:0a:d2:b8:30:91:
         96:53:11:6f:c8:51:45:5e:4f:a5:fc:8a:61:b2:81:8b:9e:2f:
         d6:3c:a5:18:a2:de:5c:88:86:ff:e4:30:4a:7a:97:93:b2:97:
         22:79:ea:8c:11:24:b2:79:bf:bd:68:30:11:64:4e:82:9e:99:
         c6:98:7f:47:ef:e3:0e:8c:51:f5:38:02:d7:19:df:d3:3d:f4:
         d3:d6:b7:12:3e:12:3c:58:ee:50:a1:5e:50:be:12:81:a3:67:
         95:6f:5f:4c:66:b0:8c:16:0a:fa:3f:9b:c2:9a:8e:68:f9:d6:
         b6:d2:49:b3:8f:30:ab:82:ba:53:1e:f6:01:fa:a8:66:46:94:
         40:d3:47:80:cd:58:71:6e:a3:a0:73:3d:20:77:59:75:10:fc:
         21:e6:34:4d:f7:29:29:9e:b1:0a:ae:32:62:fd:ca:7b:f8:ae:
         bc:25:6b:19:90:fc:59:8b:94:f8:54:c9:b7:3d:69:19:ca:49:
         42:65:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:35:50 2025 by rpki-client