Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File:                     wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier:          JGYBaG8DRuTVywTtYMoYmlIsghDin7x6n3y0QamkXJA=
Subject key identifier:   7E:A8:C2:D7:10:C6:B9:DE:74:27:1E:E6:F9:3E:11:A9:85:0E:CA:10
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer:       /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial:       0197B6A13B486B639B6FC5C61C069734BE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number:          0FD0
Signing time:             Sat 28 Jun 2025 13:01:49 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:49 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:49 +0000
Files and hashes:         1: lXUonjcSHCnymM91YbnZZiIsRN8.roa (hash: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=)
                          2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: TI93QPvN9LQv3FRp4gfUBVtMp+6AIl+lbwdWqHdteXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:3b:48:6b:63:9b:6f:c5:c6:1c:06:97:34:be:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
        Validity
            Not Before: Jun 28 13:01:49 2025 GMT
            Not After : Jun 29 13:01:49 2025 GMT
        Subject: CN=7ea8c2d710c6b9de74271ee6f93e11a9850eca10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:ab:45:99:c6:20:8a:b4:26:3f:4b:dc:25:
                    00:8c:d3:0e:dd:7c:f9:0f:c8:06:7c:b0:9c:0e:da:
                    29:d0:c8:85:fc:48:3b:07:51:a7:bc:02:be:51:81:
                    b0:1a:41:14:43:94:1a:c7:3e:a9:0f:19:c9:70:9f:
                    b2:cc:1d:7e:85:07:7d:9a:cc:f0:e6:bb:10:2a:54:
                    8a:f1:0c:c8:56:d3:3c:17:fc:9c:27:34:24:78:07:
                    3a:69:a8:61:e8:32:ee:48:2e:7b:e1:a5:c2:30:53:
                    d0:60:a6:97:9d:b3:9d:44:50:b6:8a:db:c7:2f:80:
                    66:02:4a:3e:22:72:f8:d3:9a:8e:e0:16:05:fa:85:
                    09:19:e0:89:bc:85:53:3e:9e:cb:39:1f:78:c8:46:
                    53:44:5c:43:a5:ec:b2:ce:51:05:b5:64:51:fd:e0:
                    96:d9:c9:81:6b:a3:3d:f0:be:3b:9e:39:a7:4d:ff:
                    db:ef:e5:39:d6:db:eb:18:d1:e8:61:c5:ed:39:4e:
                    1b:59:1e:91:07:bc:63:15:10:5a:5b:80:e0:c1:cb:
                    3a:8a:be:28:e1:ba:b2:2d:46:7e:ac:30:9b:8c:fb:
                    70:b4:f5:53:49:68:4e:40:12:76:14:63:87:44:17:
                    9f:ac:4f:ba:f4:e9:9b:94:22:cb:7a:30:23:b5:54:
                    d9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A8:C2:D7:10:C6:B9:DE:74:27:1E:E6:F9:3E:11:A9:85:0E:CA:10
            X509v3 Authority Key Identifier:
                keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:92:a6:91:13:b4:79:f2:1f:db:aa:e9:61:91:96:fb:2a:ab:
         9b:4d:2f:ea:0e:ac:8c:36:e1:96:11:2e:fd:1b:23:26:5e:46:
         6a:8a:75:b8:8d:8e:fc:3e:08:de:1a:53:1b:0a:c2:66:bb:ff:
         38:3e:2d:49:e3:87:88:27:4c:94:29:3b:16:91:b8:54:c3:09:
         7e:0d:81:59:5f:c1:ae:02:83:56:f4:e3:36:5f:36:50:0b:25:
         18:c2:3e:a6:3b:82:52:ec:f7:b9:8b:bb:09:eb:8a:e2:d9:7f:
         8f:54:1a:36:9d:91:ec:27:74:78:38:31:34:e1:f4:3e:09:59:
         23:dc:4b:9a:3e:98:c4:a7:e8:65:55:4c:4d:c5:97:8a:60:b5:
         58:3c:ce:41:e0:62:86:1c:3c:69:9d:6e:f5:fd:b1:5f:8e:e0:
         f7:d7:95:15:6e:19:18:65:91:53:22:84:2f:9f:6f:aa:4e:3a:
         bf:58:a2:d3:87:57:0d:e8:6c:fd:4e:b8:0f:f9:6d:5f:2c:60:
         5b:8c:63:76:0c:f6:8c:7f:d3:2d:57:cf:e9:ed:40:36:6b:5b:
         ad:b9:db:33:70:d9:a6:0c:2b:cd:ac:cf:f3:68:db:25:c4:0e:
         be:cd:e0:1e:91:93:76:a8:ed:6c:72:ec:55:51:70:b2:3e:df:
         ec:d9:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:11 2025 by rpki-client