Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File:                     wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier:          53f6KOBRuDbSwX46+dkRgjWRzP35QOnKEX46LHrfPgg=
Subject key identifier:   B4:0A:6A:28:F1:EA:83:5A:2A:DE:C5:85:EB:45:95:E6:88:2C:48:0C
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer:       /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial:       0197B96B1E5EC7D763A1E36CF9DE4375A3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number:          0C85
Signing time:             Sun 29 Jun 2025 02:01:34 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:34 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:34 +0000
Files and hashes:         1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
                          2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: zOcFfRgVGxP5HJnSZxfsaM83jzPhD0enUhb9lM9XcJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6b:1e:5e:c7:d7:63:a1:e3:6c:f9:de:43:75:a3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
        Validity
            Not Before: Jun 29 02:01:34 2025 GMT
            Not After : Jun 30 02:01:34 2025 GMT
        Subject: CN=b40a6a28f1ea835a2adec585eb4595e6882c480c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:38:d8:ee:09:31:1a:f1:55:fd:28:d0:59:e8:
                    87:26:c7:3e:a8:5f:68:f7:b5:16:48:26:72:fd:82:
                    da:51:9d:6e:85:ea:ac:0c:3c:99:8e:a3:6d:3c:6a:
                    a7:e1:ea:45:95:1c:e0:54:00:7b:7d:e5:57:5d:35:
                    26:7b:71:6e:b8:89:c4:67:83:13:1b:bf:03:42:e1:
                    31:94:0e:3f:2d:34:d5:21:01:26:50:49:c5:52:8e:
                    0c:5a:20:f4:80:5d:a9:98:83:d2:d8:1b:31:b6:a4:
                    68:64:37:da:68:41:a0:c6:b5:74:fb:26:4c:61:11:
                    dd:bf:c1:a3:1c:82:b1:e6:a8:25:a3:20:6a:46:fe:
                    de:07:34:d5:6d:16:6b:64:c7:52:64:5d:55:b4:95:
                    7f:9c:2b:e9:cb:04:dd:71:76:0a:ca:3e:78:56:51:
                    a7:56:d7:63:9d:3f:5e:bb:77:82:fb:fc:6c:40:02:
                    cd:28:49:39:3a:66:47:1d:7d:e8:28:14:30:6d:88:
                    54:61:80:d5:f7:b9:62:74:83:2d:64:83:26:10:c7:
                    41:a5:de:ed:70:8c:d7:37:c9:69:01:00:32:0e:c7:
                    3f:58:77:16:a8:e2:1a:33:46:81:cd:61:e4:24:11:
                    ba:c0:a6:b0:51:9e:47:76:5c:34:dc:3c:f8:1a:b4:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0A:6A:28:F1:EA:83:5A:2A:DE:C5:85:EB:45:95:E6:88:2C:48:0C
            X509v3 Authority Key Identifier:
                keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:f1:61:a8:d8:30:14:c2:87:43:67:db:ba:0e:bd:c3:bf:
         3a:d1:b6:22:f3:f4:62:c4:09:9b:34:0d:e1:f0:43:8a:b1:a5:
         85:3d:57:aa:09:22:56:f6:8d:e4:73:a6:dd:cd:d3:e3:f8:d9:
         54:15:34:38:ed:c4:ba:02:51:68:e2:76:a7:a6:ba:52:68:55:
         2a:ef:e3:dc:69:34:cb:06:7e:3c:e9:d1:83:5e:a1:56:da:5d:
         91:bb:41:cc:c9:24:47:c4:7e:79:62:41:ae:3e:2f:44:e5:09:
         aa:10:97:62:21:1e:94:5f:9f:72:ae:3f:e0:17:56:d7:3b:7b:
         86:67:f1:9a:55:fb:f4:2e:43:b6:36:0b:d5:33:46:d9:0a:36:
         ee:e5:8f:e0:1d:17:c3:91:b2:21:18:5c:af:4d:8f:19:53:cc:
         67:e3:39:b8:0e:40:94:10:79:f4:f4:35:f0:59:24:77:f6:11:
         2d:54:de:b5:f8:1a:69:44:3c:eb:28:5b:f7:a4:3c:16:44:2a:
         8d:7f:bd:e3:57:97:db:a6:e2:01:56:af:c7:d0:70:92:21:de:
         69:68:ff:fd:46:75:e8:94:ed:5f:d8:13:ed:fd:f7:a9:53:cb:
         4d:62:ea:09:a6:5f:8d:71:5c:5f:e6:b6:df:24:7b:6d:87:e3:
         be:e2:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:24:31 2025 by rpki-client