Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          7OG0tuAAGMJsyhu6l8IUuuL76KQEpSrVB6trmMxOgKs=
Subject key identifier:   71:CA:7A:2E:74:DC:FC:C0:55:57:05:37:2C:D1:ED:25:33:BF:F3:88
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       0196CA97507A8733776E540E2D0FF45CEE2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          0681
Signing time:             Tue 13 May 2025 17:00:36 +0000
Manifest this update:     Tue 13 May 2025 17:00:36 +0000
Manifest next update:     Wed 14 May 2025 17:00:36 +0000
Files and hashes:         1: H6hSTGzUXYO8wuCS7_uXx0OkwsQ.roa (hash: C3R1uTE0vZQdguq3OxSn35ovF8rEDK/1GfpIlJlHImc=)
                          2: j6m8JD754OZd2zfkrzPKc7t_k4U.roa (hash: hUQqPswFb44tCsj8bdeOO4xSCpedzp6XZaAwqO/TYtU=)
                          3: oPzqlVtclIS1SF4yLt-sGEys0Rc.roa (hash: e1YYcOS89IG2X1r/k2fMS0Qlsda+NH4z6UJ1+i2AY+4=)
                          4: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: AmUjbWCePyOUI8/AnjuPEVKOF27ZIsyVzzL7KcHC4aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:97:50:7a:87:33:77:6e:54:0e:2d:0f:f4:5c:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: May 13 17:00:36 2025 GMT
            Not After : May 14 17:00:36 2025 GMT
        Subject: CN=71ca7a2e74dcfcc0555705372cd1ed2533bff388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:90:2a:89:c2:26:e8:2d:82:ce:e2:cb:2b:
                    5e:08:05:c9:c4:ea:39:4a:0c:3f:40:5a:d7:e8:c9:
                    14:bf:71:6e:ba:a8:b6:45:78:d7:cc:66:f4:5c:db:
                    2d:83:cd:f8:6b:5d:74:16:91:2b:3b:de:d7:7b:45:
                    40:59:51:f1:5d:bc:26:03:88:bf:40:30:5c:7c:07:
                    0b:36:46:f0:9e:13:62:d7:55:98:28:8f:71:85:2c:
                    cb:80:1b:67:a1:0c:2c:03:52:15:3b:95:63:a7:20:
                    ed:90:c3:50:44:6b:cc:ea:59:97:81:b3:d1:a6:5b:
                    8f:82:cf:8d:47:3e:74:71:8f:1c:95:7a:1e:83:3a:
                    be:7a:2d:a7:e7:22:fd:44:4f:f8:b2:7d:72:d5:1c:
                    0a:f4:f5:fe:a3:1b:41:ca:9e:1a:d0:7b:c1:f3:40:
                    11:1e:ca:99:1a:0e:e9:d0:19:3e:34:63:0c:61:f6:
                    29:fa:9c:7f:09:12:30:54:84:53:3f:93:55:16:03:
                    9e:95:19:f7:bd:b1:82:c4:26:17:af:ad:29:86:2c:
                    89:fd:df:67:39:1d:ad:9d:0f:9c:18:74:ee:fb:87:
                    c3:ac:f6:7c:42:d3:9a:90:4b:9b:c4:63:a5:4b:e2:
                    3e:d0:11:d8:cb:f3:f9:0f:db:1e:5d:f4:99:70:57:
                    94:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CA:7A:2E:74:DC:FC:C0:55:57:05:37:2C:D1:ED:25:33:BF:F3:88
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:7d:d2:6c:bc:93:76:95:02:95:80:40:b3:24:c4:99:d8:
         c2:7c:a4:eb:3b:31:f0:ed:1b:b0:43:db:f5:d8:7c:e2:2c:66:
         eb:43:6a:e0:b0:9c:93:86:b0:02:ce:9a:1e:39:83:ba:a8:63:
         36:89:30:51:c9:ed:e1:41:ba:41:2e:ae:f2:9c:66:91:8d:21:
         ca:f5:0f:4d:51:59:28:70:84:99:15:e7:68:ae:dc:bd:48:5b:
         48:ce:61:56:eb:74:b3:cb:b2:57:83:f3:ec:f2:37:d2:35:d3:
         59:81:69:4c:30:e9:5a:f8:11:5a:63:15:b9:72:81:e8:18:16:
         ec:45:8a:88:00:aa:51:11:a2:1c:8d:ff:6a:3e:21:12:70:8b:
         96:d6:e7:29:f9:73:42:e5:ec:fb:c0:00:b6:cc:3b:17:a0:5c:
         e4:0e:8c:8c:9b:b3:06:4b:32:49:3f:8b:bf:bd:52:1b:f7:67:
         f5:e3:e9:85:44:2f:f7:16:38:3b:e7:13:6b:b6:b6:54:e7:a6:
         d1:63:92:c7:cd:dc:05:08:8e:c5:85:07:2c:5c:1a:85:fd:9a:
         c4:87:b5:87:a4:7d:31:4e:ce:10:6b:42:20:5d:03:aa:51:40:
         0e:c7:ff:4f:cb:78:74:e7:23:32:38:96:71:14:cc:00:89:15:
         bd:50:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:50:13 2025 by rpki-client