Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File:                     1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier:          XNZ7Mx6N+uSW0rJffR/PGZBVURpRby3+/gKWNFo8OXU=
Subject key identifier:   96:4D:C0:B6:70:D4:ED:70:0C:71:96:6D:54:FE:F0:B2:9E:79:82:A5
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer:       /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial:       0197B77C6AF3AA85E9087CAF53644C4D5F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number:          04F3
Signing time:             Sat 28 Jun 2025 17:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:13 +0000
Files and hashes:         1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: 0YF4O2xWSyS1KWQe+4ecDWKo5OMAEx8m6EsAQU3NeRI=)
                          2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:6a:f3:aa:85:e9:08:7c:af:53:64:4c:4d:5f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
        Validity
            Not Before: Jun 28 17:01:13 2025 GMT
            Not After : Jun 29 17:01:13 2025 GMT
        Subject: CN=964dc0b670d4ed700c71966d54fef0b29e7982a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:5d:2d:50:5d:db:55:76:63:f7:ed:8c:52:
                    c4:90:94:32:3e:48:e2:67:82:a7:e1:87:94:ec:ca:
                    6c:b5:69:f4:29:d7:7c:48:b9:88:ea:2a:9e:e4:b6:
                    ac:ec:f5:b2:af:95:e2:88:ca:a2:51:34:78:ad:d9:
                    ef:cc:36:d9:77:0b:d8:ec:89:d0:42:8e:33:14:8f:
                    b6:78:ba:1a:22:af:32:9d:37:6d:4e:b5:00:ff:e0:
                    e1:7f:26:d4:1c:26:23:78:49:56:36:64:61:d2:dc:
                    1a:db:05:ac:db:66:93:6a:af:e7:5c:d2:83:fb:89:
                    3a:09:06:2c:db:4d:d3:2a:e8:c9:2a:f2:64:63:7d:
                    5e:ca:d6:ad:b6:23:bb:15:9c:b3:fb:35:91:53:2e:
                    35:52:3d:1e:72:5b:2f:57:11:d7:b5:3c:be:d1:8e:
                    d4:67:9a:fd:4e:49:22:69:6b:06:9f:35:ab:6f:02:
                    ae:59:e1:e0:bc:de:1a:91:47:61:93:7f:99:c0:da:
                    20:16:5c:95:ff:a9:da:e5:37:91:82:8f:c9:4c:4e:
                    c4:ff:87:52:27:90:05:27:e1:73:c5:84:6f:4f:19:
                    94:74:88:da:fb:bf:90:30:51:de:e8:1f:bc:c1:5b:
                    35:6a:ce:99:b0:98:61:f5:b5:30:55:68:3a:38:49:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4D:C0:B6:70:D4:ED:70:0C:71:96:6D:54:FE:F0:B2:9E:79:82:A5
            X509v3 Authority Key Identifier:
                keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:7d:cc:da:9a:f6:8b:78:36:39:36:a0:6d:5c:ac:cb:33:
         e8:79:4f:5e:e1:fc:8f:d5:5b:95:a6:80:47:58:7a:e5:d0:f7:
         33:c7:af:ab:ff:34:bc:2a:18:81:9b:34:93:33:19:ea:c4:7f:
         e6:23:da:6f:8b:55:15:5e:05:d8:6a:87:12:ed:f1:8a:7d:db:
         31:d4:67:18:66:1e:c6:d5:07:35:55:91:26:2d:38:39:ac:4d:
         57:0c:1d:0d:d3:1a:fe:78:46:79:98:00:f1:2b:cb:03:40:08:
         b3:c3:53:98:ac:5d:39:f6:ce:2f:19:e4:ea:29:6f:37:cb:e1:
         6b:53:31:15:10:2e:c8:a6:ec:81:24:39:6f:17:b2:34:a2:8d:
         1f:8d:46:54:fb:2a:74:db:db:71:81:f0:9f:d3:bd:c7:45:7f:
         8e:b7:0d:2e:79:e3:1c:1f:d2:7c:e1:6b:a4:8c:60:af:4d:15:
         4a:20:52:ed:15:24:2f:f0:64:c2:fd:29:bb:75:13:c8:96:c8:
         ba:b0:79:a3:44:39:43:61:af:2d:b6:e7:86:10:57:1f:21:c3:
         86:e3:b8:24:8a:5d:38:e1:56:e4:4b:54:0d:96:c0:7d:3b:8d:
         78:8a:6e:7d:17:b9:ea:5f:73:5f:0c:d2:13:44:d9:35:8b:59:
         45:51:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:59 2025 by rpki-client