Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
File:                     WRoP7x77ru2z0o1Dnz1cz639iHM.mft (raw, json)
Hash identifier:          3KtJJ3zGAJYQsuPkce+ai1N5WJ9+03H2S3nsH9eexew=
Subject key identifier:   A8:07:83:16:13:26:79:4E:25:9F:60:C2:D4:A1:0E:38:52:E8:BF:4D
Authority key identifier: 59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73
Certificate issuer:       /CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
Certificate serial:       0196BB5AE7830A5032D6CE33CBFDAE316931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
Manifest number:          1534
Signing time:             Sat 10 May 2025 18:00:18 +0000
Manifest this update:     Sat 10 May 2025 18:00:18 +0000
Manifest next update:     Sun 11 May 2025 18:00:18 +0000
Files and hashes:         1: LUyjz5khkwF0up_SKtv4Oh6tO7Q.roa (hash: rBnLOroG+8zcnjSq90aHGH7YJtrPhERWyt49grALMsE=)
                          2: WRoP7x77ru2z0o1Dnz1cz639iHM.crl (hash: O/Zcx9E0KIZk32oHpqLnasBCjBIo2xkF0mBap2B2v+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5a:e7:83:0a:50:32:d6:ce:33:cb:fd:ae:31:69:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873
        Validity
            Not Before: May 10 18:00:18 2025 GMT
            Not After : May 11 18:00:18 2025 GMT
        Subject: CN=a80783161326794e259f60c2d4a10e3852e8bf4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:51:9e:70:f0:b8:70:f9:cd:e8:fa:05:91:42:
                    c6:aa:42:46:dc:70:a2:b0:46:b7:63:07:d3:04:4d:
                    81:51:6a:cb:39:b3:33:c0:bf:4b:fd:e2:1a:13:32:
                    86:5f:68:2a:92:6e:47:ae:c6:93:5b:b4:8e:79:62:
                    33:82:95:de:b7:9a:de:60:9e:ef:cc:ed:7f:96:68:
                    f8:c1:f2:ba:c5:e3:5d:48:27:fc:6f:d2:1e:db:13:
                    09:44:a6:7f:0e:c7:9b:84:df:77:66:2f:7b:d6:c3:
                    a9:6c:c5:45:41:21:c5:2b:ed:35:7f:c0:46:2e:85:
                    64:da:52:3f:11:e0:8e:c5:c7:ad:ac:04:73:a1:a0:
                    3d:f0:2c:a1:a9:ec:2b:6f:99:be:a0:72:b8:02:52:
                    e6:7b:df:2d:06:a7:09:50:11:0d:b0:c4:36:e7:bb:
                    26:d2:a1:3c:4e:c4:64:58:35:b2:a3:e5:91:37:3d:
                    ac:23:fa:f6:78:32:94:09:28:e5:fa:e0:5a:e0:76:
                    3b:ea:b0:7f:0b:13:ed:de:a6:cc:6e:82:58:4b:35:
                    86:dc:42:5a:55:70:87:c6:4b:b5:c1:a7:e0:fc:cb:
                    20:38:f9:c5:cc:5c:96:b2:59:da:81:80:11:a0:5f:
                    df:af:aa:f4:6e:15:4a:70:4c:f8:26:44:23:25:85:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:07:83:16:13:26:79:4E:25:9F:60:C2:D4:A1:0E:38:52:E8:BF:4D
            X509v3 Authority Key Identifier:
                keyid:59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:44:7c:7b:74:4f:43:05:b9:eb:8e:ee:23:48:7b:b8:18:ef:
         27:05:ce:e2:d6:c1:97:c0:76:22:86:40:32:4c:6d:5e:9f:2d:
         11:6d:5c:70:be:f7:48:1b:3d:37:bd:71:b2:04:f9:91:f8:18:
         0f:32:57:be:6e:b4:43:68:88:b6:32:c9:3e:ea:a7:a0:9a:88:
         9a:53:55:37:57:8b:b0:7a:5d:b3:8c:4a:7e:04:28:2d:ef:7f:
         62:c3:7e:21:81:07:64:f7:f3:98:06:36:dc:26:38:69:5d:6b:
         e0:8b:8d:a9:7f:89:70:39:0f:b4:84:bb:aa:7e:02:d6:43:bb:
         72:90:3a:4c:78:74:1d:18:16:e3:ca:55:03:ca:c7:2a:b8:b6:
         1e:80:38:8f:da:74:3d:f1:73:f8:a7:d8:6c:3e:6c:f4:4a:92:
         62:d5:38:93:9d:a1:30:1b:54:4a:ef:db:61:97:65:30:70:2b:
         d0:af:eb:22:60:c2:78:1d:67:9b:92:ec:36:6c:70:41:c6:75:
         08:00:a7:12:33:4f:e7:f7:1b:6e:7e:31:6b:f5:2e:2d:e8:6c:
         ee:fd:80:ed:32:35:1d:85:34:99:ac:27:a4:bd:47:23:20:9f:
         ff:8f:26:37:75:fe:9b:33:3a:00:10:c4:b7:5a:e9:7b:fb:ff:
         66:c7:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:04:30 2025 by rpki-client