Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          +Xz6OqwgGMpPww0VvrEh3DE4STGInQCQ8LGFUHLlH+Q=
Subject key identifier:   8E:10:8F:CF:16:2D:84:34:33:B6:27:70:DD:AA:EC:57:EC:36:11:A3
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       0196A2E4DCB4C418EF22C3CA4563847BEE63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 00:00:29 +0000
Manifest this update:     Tue 06 May 2025 00:00:29 +0000
Manifest next update:     Wed 07 May 2025 00:00:29 +0000
Files and hashes:         1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
                          2: MrwCb1VshNGuSjy8-ZcrQ_jjBz4.roa (hash: RL8Yc0SUjE/2UAMDk7eU+CcumrO0VbncY+6nMnTALA4=)
                          3: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
                          4: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: wjnh73/dEjR6K3wGiXXLsUAQfym76WfqYe5GKK6Xkms=)
                          5: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
                          6: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
                          7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
                          8: rrWx_KVK0nRTRlZQQB4TJRqTC28.roa (hash: BETaqE0/0r4sYx0mpie4wQWJFL1T5S0trn7rIn0+6Eg=)
                          9: txKA05gc1PNEhcuQ9gw4JRL4SOg.roa (hash: ZxoTI5LHLJfIjBc6aAlc7tJn+4E9R4JWht3d4AMJtIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e4:dc:b4:c4:18:ef:22:c3:ca:45:63:84:7b:ee:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: May  6 00:00:29 2025 GMT
            Not After : May  7 00:00:29 2025 GMT
        Subject: CN=8e108fcf162d843433b62770ddaaec57ec3611a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:21:e6:69:4e:1d:aa:ee:db:3d:d5:70:cc:
                    eb:c1:cb:96:84:09:cc:d6:ad:81:4e:1b:d2:3e:95:
                    00:61:f1:1e:c2:81:96:56:ec:9f:5d:03:5b:2b:61:
                    b4:e7:59:3b:b5:9e:a2:6d:cd:aa:89:ce:37:1a:35:
                    46:b2:84:75:71:38:4c:a1:e8:27:7f:df:83:31:75:
                    d3:80:10:db:9d:54:d7:b9:48:a1:a1:20:8c:02:27:
                    7a:c9:24:f1:15:7e:b5:b7:e0:fc:f0:42:1b:e7:78:
                    8f:82:ba:ad:c1:9c:31:c5:71:28:b9:15:49:88:ca:
                    e9:8d:40:6d:10:b6:94:e5:67:9f:ec:61:d9:0c:ef:
                    b7:33:88:f1:e9:7b:b5:2f:14:02:0b:4f:c3:00:61:
                    fe:0b:b2:e3:f6:91:30:0d:62:32:0f:f5:b4:78:fe:
                    bf:37:19:7a:e6:98:df:dc:cd:d5:1c:85:1d:c0:7f:
                    e2:72:f0:e0:d3:74:17:0f:cc:f5:1b:af:a6:70:7d:
                    f9:8e:1a:5f:a9:3f:e5:f9:34:4c:25:8f:87:a5:91:
                    72:ab:84:78:85:65:00:d9:e9:47:a5:07:0c:e9:94:
                    f3:30:ee:20:1c:c5:46:65:bb:38:e7:d1:e0:59:09:
                    ac:15:99:83:9f:85:26:07:f4:11:fe:12:df:fb:3d:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:10:8F:CF:16:2D:84:34:33:B6:27:70:DD:AA:EC:57:EC:36:11:A3
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e6:f6:f7:28:ea:e3:d7:af:59:5a:f1:ab:2b:c1:c9:b5:65:
         f4:d2:89:2a:fe:59:92:99:48:4e:ae:96:ac:ce:f8:77:69:f6:
         e8:ee:b2:93:cb:eb:f9:60:2e:e4:bc:01:88:3a:dd:ac:37:60:
         f6:9c:c8:2c:21:08:6d:98:35:5d:31:65:ef:65:f7:39:2b:0b:
         d8:dc:ce:32:27:63:22:da:44:d5:06:8f:92:d3:e5:93:62:ef:
         31:44:0c:a8:f8:d2:ae:36:50:b4:51:4c:dc:ad:5c:de:c8:5c:
         ba:98:f0:e2:03:fc:e3:00:9f:50:f2:34:22:14:a3:f9:94:0d:
         e9:c1:2c:2b:8e:35:e2:63:38:32:c9:5a:7e:eb:79:32:fd:5f:
         8f:e7:74:2e:40:84:02:4a:d2:70:1d:09:02:e0:09:69:2a:4c:
         0e:d0:44:39:ec:86:74:31:3b:98:9d:88:b0:a9:49:05:56:87:
         82:3f:11:62:aa:52:5a:91:08:1a:72:b0:58:67:a9:75:5d:b2:
         0a:87:71:90:a2:f0:e3:d7:aa:2d:b6:b6:cb:68:67:58:3b:57:
         fa:67:f5:ec:23:50:c3:3a:ec:cf:27:c9:12:ba:83:6d:ce:7f:
         39:84:30:82:26:38:e0:3f:7c:64:84:28:e8:02:38:0b:5a:be:
         9a:e2:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:30:14 2025 by rpki-client