Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File:                     wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier:          Go34m8FQxUCldQpdSZGKALPNjqGCQlkUch5pzrHolq0=
Subject key identifier:   08:60:9A:79:15:B9:8E:66:26:7B:6A:B6:57:EF:33:1B:E5:32:A0:2F
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer:       /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial:       0197B88FCAFD31872D93697750ACB60733D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:02:00 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:00 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:00 +0000
Files and hashes:         1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=)
                          2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: MflYmpVW1xc99YGCYCghU/UhbuOjUPz+RhKM50YliGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:ca:fd:31:87:2d:93:69:77:50:ac:b6:07:33:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
        Validity
            Not Before: Jun 28 22:02:00 2025 GMT
            Not After : Jun 29 22:02:00 2025 GMT
        Subject: CN=08609a7915b98e66267b6ab657ef331be532a02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:c1:cf:49:6c:9f:8d:ec:74:26:55:63:f5:
                    41:31:c2:23:ec:84:1b:79:e9:d9:ae:a3:79:f5:2a:
                    45:02:cb:78:03:04:4d:e9:b5:8b:c9:24:3b:75:60:
                    cb:dc:ce:b4:14:6e:8a:df:29:4c:bf:e0:88:47:b7:
                    e8:e3:92:db:1d:f5:6a:a2:12:b9:ca:d1:de:68:4d:
                    2a:de:51:25:41:e8:9d:74:ae:55:72:4a:da:36:c4:
                    e6:22:1b:24:53:bb:85:9a:8c:3d:a0:9b:1c:81:51:
                    22:e0:e0:fc:6e:28:d4:ed:cd:52:34:ad:f1:c2:c1:
                    51:e1:83:55:b4:3c:05:1e:3e:90:33:d6:b7:31:6b:
                    16:ba:cb:a3:28:3c:f6:5f:27:89:f3:80:96:fb:c5:
                    6b:6b:cf:c9:ff:4f:26:2b:d6:46:83:1a:b8:1f:38:
                    5c:55:d6:2c:7e:1c:33:ed:3d:ba:54:c9:f3:66:f6:
                    2e:b4:a5:c6:a0:52:a8:8d:0b:16:ef:dd:dc:26:e5:
                    d5:8e:5f:cf:84:bb:51:58:f5:b0:cf:ce:ad:63:a5:
                    8a:d2:65:c4:33:7d:af:ac:29:57:d8:53:23:0c:17:
                    f7:0a:18:51:96:65:e8:7a:18:c0:5d:0e:93:2c:7e:
                    78:12:6c:5e:c8:dd:92:9b:8d:9c:51:9a:ee:0c:87:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:60:9A:79:15:B9:8E:66:26:7B:6A:B6:57:EF:33:1B:E5:32:A0:2F
            X509v3 Authority Key Identifier:
                keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6b:64:76:d1:50:4e:cb:8c:cf:ec:79:0f:08:7d:93:a0:db:
         68:45:a5:71:48:d3:c7:55:70:5d:af:ff:40:55:5e:87:14:8b:
         3f:c3:ba:c7:89:5d:cd:39:4a:a3:1d:5e:82:7b:09:19:f3:6c:
         86:ca:34:f6:05:c1:e8:dc:ac:d0:41:10:28:69:dc:a3:b0:40:
         61:74:bc:f3:7b:81:d5:85:4d:49:f2:8c:14:71:3f:05:f7:92:
         14:95:74:29:ac:90:86:96:2a:aa:49:db:fa:50:14:32:47:7d:
         30:8f:91:43:ef:35:3d:5d:38:b1:9a:d9:ed:a9:76:9b:94:0c:
         00:bd:72:dd:db:73:75:db:a4:76:58:e0:05:88:86:33:83:bd:
         2c:95:b1:f9:05:12:62:34:59:7f:c0:b6:62:26:58:58:f1:97:
         4b:60:ed:3e:9f:de:51:17:f5:19:0f:2b:f5:52:28:43:bb:ce:
         93:17:2e:82:5b:9f:e3:7d:13:bd:f6:0b:b5:e6:1c:c7:41:8c:
         ac:2f:57:84:4c:d1:73:db:f3:36:b5:7d:85:a8:94:53:55:c7:
         0e:f6:83:af:0e:9e:df:99:bd:b8:d8:a4:66:92:53:37:5f:b4:
         ea:d3:b9:fc:5d:2d:be:65:0f:66:81:05:8c:0b:99:88:2a:5b:
         44:39:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:35 2025 by rpki-client