Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
File:                     sWrUSceuS9Isau5fvcCCMEL_-Pw.mft (raw, json)
Hash identifier:          xarE7/MJLTOheqjC9FIXqjUFOiPEYSLnDyAXrQrGQNs=
Subject key identifier:   A6:1F:E1:60:FA:9B:76:E5:FB:8E:D5:67:9B:51:BE:C3:7F:E0:DA:F5
Authority key identifier: B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC
Certificate issuer:       /CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
Certificate serial:       0197B6A0624DDDCD8971D8B09DC45E321DA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
Manifest number:          0934
Signing time:             Sat 28 Jun 2025 13:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:53 +0000
Files and hashes:         1: _KRug4UjC_BJD-8BnustHPPdTrM.roa (hash: 9gRSSq2OhYrBQVFH3hvus35c9k0k20JUe3qcgY8xpt0=)
                          2: sWrUSceuS9Isau5fvcCCMEL_-Pw.crl (hash: y9ms1/vkdkjAqs3tPjM2gh4xAtfRqF3Wfe4dOayZHwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:62:4d:dd:cd:89:71:d8:b0:9d:c4:5e:32:1d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16ad449c7ae4bd22c6aee5fbdc0823042fff8fc
        Validity
            Not Before: Jun 28 13:00:53 2025 GMT
            Not After : Jun 29 13:00:53 2025 GMT
        Subject: CN=a61fe160fa9b76e5fb8ed5679b51bec37fe0daf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:eb:a9:2a:d9:5b:d0:57:56:ee:ca:82:16:
                    31:54:18:c5:8e:c4:8b:25:4d:51:3a:93:98:81:07:
                    14:3b:ee:09:cd:43:4a:9e:c1:5c:a0:58:c5:38:ec:
                    3a:77:6f:6d:8d:e1:2b:7a:a0:e4:f1:19:91:9c:e0:
                    2c:fc:aa:d2:37:d8:34:e7:e4:ae:39:ef:4e:3b:7c:
                    fb:c4:02:dc:4c:3d:2d:5c:62:c3:c5:44:da:79:76:
                    2e:f7:cd:9e:49:0b:50:61:88:08:1d:ee:8a:d9:f0:
                    b8:69:c0:cb:bf:9d:a1:f9:97:5a:5b:e2:fc:8f:3b:
                    50:9e:53:38:4a:06:68:f6:a1:64:96:8c:c6:10:0d:
                    26:cc:12:3e:13:d3:43:e2:1b:22:2a:75:3f:fc:18:
                    67:f2:d7:6a:0d:9a:2c:f2:04:fb:5a:53:38:08:22:
                    25:e4:9d:0d:19:f6:fc:9a:b0:6c:8e:c2:5f:0a:43:
                    e0:fd:f6:eb:d1:11:06:8b:4b:19:91:95:31:e3:74:
                    a6:68:b9:47:c4:e8:48:9f:a7:1e:32:3b:69:cf:bf:
                    3f:8b:42:c7:1d:3d:e9:97:5a:51:f8:33:58:3a:e4:
                    6b:45:12:4c:59:40:42:83:b0:98:ef:d2:26:d0:7e:
                    83:90:86:f5:0c:43:21:07:1d:71:4c:2c:85:bf:cf:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1F:E1:60:FA:9B:76:E5:FB:8E:D5:67:9B:51:BE:C3:7F:E0:DA:F5
            X509v3 Authority Key Identifier:
                keyid:B1:6A:D4:49:C7:AE:4B:D2:2C:6A:EE:5F:BD:C0:82:30:42:FF:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWrUSceuS9Isau5fvcCCMEL_-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/05126d-4ab7-4f99-a012-2b788312151d/1/sWrUSceuS9Isau5fvcCCMEL_-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6d:53:0e:98:c3:06:46:a4:f9:03:2a:42:2b:89:96:00:f6:
         df:b0:13:83:80:cd:ce:3a:c7:ba:2b:b8:82:94:71:9b:96:7b:
         fd:12:2d:9a:ec:75:14:08:26:6a:eb:06:e0:04:1d:41:b1:84:
         4d:3f:05:45:d2:cc:25:40:4f:6d:df:f9:09:3c:07:9c:25:6b:
         d2:b8:e0:c0:00:60:5a:db:38:e2:45:56:62:10:74:68:2a:5d:
         ba:c7:96:3c:5a:f3:6b:97:7a:81:94:9d:6a:0a:7e:d3:2a:c6:
         1e:55:a8:2f:29:56:73:98:bc:26:37:1d:ae:55:1d:69:9a:78:
         d5:0e:1d:9e:3c:67:b8:a6:2a:c9:9b:69:05:9a:72:18:55:d2:
         7d:57:00:5a:ac:ca:26:e0:ff:a8:45:46:aa:d5:2f:fc:eb:a3:
         36:a9:3b:1b:b9:7e:f6:20:04:86:2c:e5:2c:28:89:c9:e6:7d:
         fd:79:f1:95:a3:88:b8:92:43:ac:0e:5f:4c:43:25:49:62:0b:
         a7:e1:20:27:dd:a5:32:40:2b:0f:ab:92:87:e9:6a:61:bc:87:
         59:98:da:29:f5:ad:15:c1:25:80:08:23:38:86:90:f9:a6:62:
         77:16:e5:7e:29:b4:8b:55:9f:f3:9d:a8:a3:84:90:4a:b4:e4:
         1d:33:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:55 2025 by rpki-client