Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
File:                     WqZ_80-Urvw6VNVIfAtItN-6DII.mft (raw, json)
Hash identifier:          JWkbPTX3IuqGDHDn9AsndpL8Sy49W2OOBZLVQ7m4yl4=
Subject key identifier:   26:05:65:BE:A5:11:25:B9:50:A2:91:96:9B:FD:96:F0:D4:C0:F3:E7
Authority key identifier: 5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82
Certificate issuer:       /CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
Certificate serial:       0197B63289E9459DC540EE77D37B5639C8C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
Manifest number:          0F61
Signing time:             Sat 28 Jun 2025 11:00:54 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:54 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:54 +0000
Files and hashes:         1: WqZ_80-Urvw6VNVIfAtItN-6DII.crl (hash: +GN+0fHcYesGPNZLLTrvpN/V+pTMzWzJH35cWsPLcRU=)
                          2: depCEchOEDSTxB-t7sFwEnJVYFU.roa (hash: 4VUgeeM9jgJLmxqt9ZkedCI0PpL/veNIwfgv+hW4muY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:89:e9:45:9d:c5:40:ee:77:d3:7b:56:39:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa67ff34f94aefc3a54d5487c0b48b4dfba0c82
        Validity
            Not Before: Jun 28 11:00:54 2025 GMT
            Not After : Jun 29 11:00:54 2025 GMT
        Subject: CN=260565bea51125b950a291969bfd96f0d4c0f3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:e5:36:e3:d9:7e:f4:df:cc:ed:2c:96:bb:
                    d7:74:af:b4:e1:a8:7d:96:25:67:a8:a1:7d:8c:df:
                    58:a6:06:23:c3:a1:bd:95:ae:1d:79:1d:dc:f4:c9:
                    9b:b6:c1:5a:3e:4f:d2:bf:bb:0a:6c:37:ad:db:b7:
                    cb:d7:4b:21:46:d7:cd:75:ba:00:2b:76:22:d0:5e:
                    d6:b3:c0:ab:c7:51:73:45:4c:82:23:01:10:f2:a3:
                    b7:f9:d4:de:56:6b:ab:4c:eb:4e:e7:94:66:4b:81:
                    1a:0e:72:eb:13:c0:fd:82:a5:d6:f0:86:0d:84:f8:
                    66:28:be:33:66:a6:9b:09:ed:6e:cb:e1:a2:82:38:
                    20:3e:3d:8e:64:46:c8:db:2d:73:05:5a:96:d7:1a:
                    a6:4d:ba:f3:3a:98:be:94:71:6c:51:31:c9:52:e4:
                    25:94:63:98:77:94:2a:a1:c1:66:e7:f0:69:e2:46:
                    58:2e:1d:c5:10:05:81:ed:fd:63:29:f0:3b:8b:35:
                    38:8b:3d:7f:eb:b6:54:30:dc:22:b0:d8:d1:22:0f:
                    15:ba:d0:59:85:f4:7b:92:ef:2e:8f:b0:34:1c:03:
                    4f:0e:da:b8:64:7c:6b:a8:49:00:60:d6:41:70:af:
                    b8:52:51:15:b8:06:65:ae:61:de:30:8d:af:1d:c2:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:05:65:BE:A5:11:25:B9:50:A2:91:96:9B:FD:96:F0:D4:C0:F3:E7
            X509v3 Authority Key Identifier:
                keyid:5A:A6:7F:F3:4F:94:AE:FC:3A:54:D5:48:7C:0B:48:B4:DF:BA:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqZ_80-Urvw6VNVIfAtItN-6DII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fabba9-eeaa-42e3-8776-851a1f8bf180/1/WqZ_80-Urvw6VNVIfAtItN-6DII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f6:55:d1:1f:56:6a:85:df:f6:8a:67:99:46:dd:67:ba:fa:
         a0:a8:9f:75:2e:37:9d:0f:67:59:11:d6:b3:0d:a7:fe:17:48:
         e3:e5:85:69:c4:84:e8:af:6d:6a:22:e4:a6:cd:c4:ab:04:ae:
         5f:b0:88:3b:a0:bd:58:e4:c1:a1:26:14:bd:a9:c9:f1:67:53:
         53:42:6a:fd:10:6f:f3:d3:f3:d8:53:bd:86:40:9b:ec:1b:04:
         1e:70:b6:a3:e9:8d:f4:03:31:fc:b9:17:5e:23:38:55:1d:27:
         63:47:61:77:e9:80:3c:61:81:21:fa:ae:f2:b2:4a:6c:35:aa:
         a5:25:27:11:4e:8a:33:f0:d2:8c:0a:86:e1:70:8e:0e:b6:2c:
         04:26:a6:73:26:91:bb:a7:61:91:bd:ab:42:d5:8a:d7:7b:f9:
         ff:4e:46:76:b4:2c:67:d4:31:e8:d1:70:7b:f6:10:94:5e:26:
         d5:b8:96:8c:3b:fd:6e:5c:e1:87:38:11:ca:f1:bb:7f:23:31:
         b1:87:56:87:1b:0b:0c:b7:dc:de:b2:bb:56:bf:e1:97:e8:5c:
         d4:f7:0b:25:6c:0d:8d:a8:24:20:5b:c3:96:fd:f1:f6:b8:d4:
         47:ad:43:af:30:24:df:95:e1:13:d2:f4:28:39:77:6b:85:b6:
         cf:20:9c:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MonpRZ3FQO5303tWOcjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYTY3ZmYzNGY5NGFlZmMzYTU0ZDU0ODdjMGI0OGI0ZGZi
YTBjODIwHhcNMjUwNjI4MTEwMDU0WhcNMjUwNjI5MTEwMDU0WjAzMTEwLwYDVQQD
EygyNjA1NjViZWE1MTEyNWI5NTBhMjkxOTY5YmZkOTZmMGQ0YzBmM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+3lNuPZfvTfzO0slrvXdK+04ah9
liVnqKF9jN9YpgYjw6G9la4deR3c9MmbtsFaPk/Sv7sKbDet27fL10shRtfNdboA
K3Yi0F7Ws8Crx1FzRUyCIwEQ8qO3+dTeVmurTOtO55RmS4EaDnLrE8D9gqXW8IYN
hPhmKL4zZqabCe1uy+GigjggPj2OZEbI2y1zBVqW1xqmTbrzOpi+lHFsUTHJUuQl
lGOYd5QqocFm5/Bp4kZYLh3FEAWB7f1jKfA7izU4iz1/67ZUMNwisNjRIg8VutBZ
hfR7ku8uj7A0HANPDtq4ZHxrqEkAYNZBcK+4UlEVuAZlrmHeMI2vHcJ21wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYFZb6lESW5UKKRlpv9lvDUwPPnMB8GA1UdIwQY
MBaAFFqmf/NPlK78OlTVSHwLSLTfugyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3FaXzgwLVVydnc2Vk5WSWZBdEl0Ti02RElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mYWJiYTktZWVhYS00MmUzLTg3NzYt
ODUxYTFmOGJmMTgwLzEvV3FaXzgwLVVydnc2Vk5WSWZBdEl0Ti02RElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mYWJiYTktZWVhYS00MmUzLTg3NzYtODUxYTFmOGJmMTgw
LzEvV3FaXzgwLVVydnc2Vk5WSWZBdEl0Ti02RElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfZV0R9W
aoXf9opnmUbdZ7r6oKifdS43nQ9nWRHWsw2n/hdI4+WFacSE6K9taiLkps3EqwSu
X7CIO6C9WOTBoSYUvanJ8WdTU0Jq/RBv89Pz2FO9hkCb7BsEHnC2o+mN9AMx/LkX
XiM4VR0nY0dhd+mAPGGBIfqu8rJKbDWqpSUnEU6KM/DSjAqG4XCODrYsBCamcyaR
u6dhkb2rQtWK13v5/05GdrQsZ9Qx6NFwe/YQlF4m1biWjDv9blzhhzgRyvG7fyMx
sYdWhxsLDLfc3rK7Vr/hl+hc1PcLJWwNjagkIFvDlv3x9rjUR61DrzAk35XhE9L0
KDl3a4W2zyCcvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:51 2025 by rpki-client