Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File:                     wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier:          8s+JZ+aq8w+65u+mwkXAFei2fpiTZmlqQWAZye+8Vk8=
Subject key identifier:   1F:55:3C:F6:E7:90:1C:30:F3:0C:75:74:8C:51:FF:4B:F6:05:BD:A4
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer:       /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial:       0196C45DF7D3ABC2E3C1F2128FD78599AB5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 12:00:14 +0000
Manifest this update:     Mon 12 May 2025 12:00:14 +0000
Manifest next update:     Tue 13 May 2025 12:00:14 +0000
Files and hashes:         1: JPfPPVmim_oMGeKjFN51mz2DXZs.roa (hash: huLyNUibR3FOKspRTI8zL5oJYiyI6ApwBCQ1/RFqhSE=)
                          2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: VRO3r2xRYkKdxMEt4VT4Z8yWNLQ+dNDgZetHE8n9ny0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:5d:f7:d3:ab:c2:e3:c1:f2:12:8f:d7:85:99:ab:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
        Validity
            Not Before: May 12 12:00:14 2025 GMT
            Not After : May 13 12:00:14 2025 GMT
        Subject: CN=1f553cf6e7901c30f30c75748c51ff4bf605bda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:6d:53:a2:07:33:5c:fb:22:d8:6e:c6:00:
                    d9:6f:1f:d1:a2:10:0b:14:c6:59:ba:78:a3:7b:cf:
                    75:bb:37:1a:c0:a2:3f:85:7d:ef:2f:17:05:46:9f:
                    97:eb:85:8a:c1:3b:b5:ff:29:0a:cc:80:a5:a0:a9:
                    11:ee:e1:c2:a6:be:22:79:f5:fa:10:e4:ea:c3:d4:
                    f6:94:21:5e:35:42:b4:10:17:1a:31:3b:e0:48:17:
                    32:80:65:4a:fd:14:3a:32:8c:36:fb:4d:36:3e:b1:
                    2d:2e:97:71:e5:db:2a:ab:81:db:4a:f1:e9:2e:c2:
                    75:1d:69:f2:e7:1b:74:e1:52:fc:54:30:48:f3:75:
                    1d:83:23:50:18:b5:1c:b4:a3:dd:a6:02:13:0a:5e:
                    23:ca:75:c8:97:d6:ff:d5:3a:5b:de:b6:53:6b:79:
                    fb:b1:23:dc:3c:74:a1:b4:d2:36:f0:75:c0:e7:c1:
                    71:78:6f:5d:a4:5c:22:9c:35:ef:02:4b:66:14:fc:
                    c0:6e:b4:15:5d:70:e9:eb:be:cc:2f:2a:a8:21:3b:
                    c8:05:a2:53:93:55:28:fb:7c:29:77:e4:9c:44:3b:
                    4a:a6:96:fd:a8:01:29:4e:3f:b2:42:a1:ea:ef:46:
                    1d:09:d3:0c:bb:0a:e4:0d:8b:63:a8:0a:85:94:0d:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:55:3C:F6:E7:90:1C:30:F3:0C:75:74:8C:51:FF:4B:F6:05:BD:A4
            X509v3 Authority Key Identifier:
                keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:93:3e:02:01:25:f0:4d:b5:cb:5b:c3:ec:42:66:32:e8:50:
         e9:d5:68:91:37:f8:c7:6a:57:64:a2:5a:31:8d:d8:88:bc:6d:
         b0:4b:63:63:f7:20:57:cd:00:a3:00:90:94:e7:c0:df:89:18:
         b3:4b:e7:46:d9:cf:a4:01:cf:89:0a:e1:dd:29:62:ac:ac:b8:
         3f:13:a5:e4:22:76:c9:df:a6:2f:98:22:dc:62:19:66:2e:a6:
         74:d0:a0:fd:3d:87:c9:14:45:45:ad:30:fe:3e:c9:00:e6:fb:
         65:91:17:f1:37:7c:d7:c5:b7:84:19:f6:b3:0d:53:aa:74:c4:
         19:72:91:ae:82:5c:6f:b8:c0:9f:59:f9:6e:5c:53:80:81:88:
         44:ee:74:f8:b1:7e:8f:30:f6:ad:5b:99:86:b8:42:fb:32:a9:
         ef:f7:91:d5:c0:b3:cd:4a:5f:9c:cd:fc:1a:29:eb:dc:d9:cb:
         b0:c8:2c:aa:4a:b6:a5:51:be:dd:0b:ab:64:34:0f:ba:c0:ed:
         fb:5b:85:82:3a:ac:38:d8:c9:41:70:76:0d:85:f3:e3:4d:cc:
         66:e5:c3:67:0a:10:bd:5f:37:79:12:61:98:47:26:bc:b9:eb:
         df:0f:aa:3c:cc:15:54:1a:f9:b1:67:bf:31:bd:de:d1:52:be:
         c9:a4:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:04:27 2025 by rpki-client