Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          auXU1JUCAGO4646ADIM/g1r89CEvVXTqiz1ZyE5RYz4=
Subject key identifier:   7C:1F:8D:43:4D:47:FE:08:96:47:B5:85:EC:28:9B:21:8D:34:0C:A9
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       0197B6A1E3DA24CE8CAC159104633E947476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          1547
Signing time:             Sat 28 Jun 2025 13:02:32 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:32 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:32 +0000
Files and hashes:         1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: SwAzY69vRg+GVr2fdAmD3XUB9UOOviHzV+hmW8pknDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:e3:da:24:ce:8c:ac:15:91:04:63:3e:94:74:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Jun 28 13:02:32 2025 GMT
            Not After : Jun 29 13:02:32 2025 GMT
        Subject: CN=7c1f8d434d47fe089647b585ec289b218d340ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:f6:c0:a9:98:f1:e7:e9:3e:d5:ab:88:ce:
                    97:db:7d:91:68:fb:92:c5:76:b8:0d:af:81:6d:d7:
                    8a:ac:5a:f9:ba:54:41:c7:a0:59:d9:f5:08:cf:f4:
                    23:33:d7:9c:fa:0d:04:3e:be:f6:bf:e7:29:8c:76:
                    81:79:c6:da:5f:73:bb:74:15:94:36:4f:a8:14:ba:
                    b3:0e:fb:1e:71:ec:8a:8c:4f:6a:59:d1:d0:e3:0e:
                    37:9c:8d:3d:50:ba:be:a0:3f:34:e4:75:58:c1:34:
                    7a:7d:92:66:79:38:38:5a:4d:aa:d1:c1:ec:44:6c:
                    fd:b3:62:51:a1:27:ce:75:53:41:b7:4e:2d:c6:47:
                    4c:ab:d8:88:5f:62:f8:9e:43:17:af:2e:e6:9f:56:
                    78:6e:de:f2:af:69:bc:23:1a:04:94:77:c7:f3:a8:
                    26:33:da:7d:e3:85:0c:1d:0f:71:45:30:3f:1e:32:
                    b2:95:74:d2:d8:92:6d:d5:da:1a:50:f7:ea:fb:72:
                    e2:41:df:5c:83:08:9e:af:dc:2a:8a:fe:60:44:53:
                    81:bb:bc:cc:82:d7:b4:fc:e9:8f:e6:ce:0a:e0:2d:
                    9f:40:85:65:7c:ca:2f:ee:21:89:a6:88:25:31:c4:
                    b5:4d:99:45:98:fe:49:de:d3:69:51:41:af:cf:25:
                    ec:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1F:8D:43:4D:47:FE:08:96:47:B5:85:EC:28:9B:21:8D:34:0C:A9
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:10:a9:f6:eb:76:12:c0:88:0f:0b:92:73:25:ad:53:6f:0f:
         3f:57:a8:b6:43:dd:21:55:af:cc:30:a3:a0:0a:52:da:77:97:
         b6:59:52:ef:14:66:3e:72:73:1b:02:69:5e:ee:04:81:af:60:
         91:66:10:32:34:b1:5d:be:b2:26:07:e2:43:cf:6e:05:50:28:
         05:6a:27:1f:16:04:ab:c0:f9:97:70:59:b5:fc:dd:e7:7d:d8:
         4b:d3:0e:08:fe:d8:35:8b:ed:3f:5d:08:44:04:08:93:fc:77:
         7c:c7:c5:aa:06:68:06:79:2d:52:5e:2f:24:af:0b:19:2a:14:
         14:0f:93:6e:7e:23:46:43:8b:f3:27:59:8a:88:10:84:85:2d:
         c6:a5:aa:01:1f:a2:0d:a6:d9:38:d4:fb:55:3f:30:f8:51:ce:
         4b:e7:fd:b2:f3:06:eb:c3:64:91:a2:a9:db:02:4a:6b:b3:ea:
         17:de:d9:18:b0:7e:62:93:6c:52:68:43:b8:06:fb:52:11:54:
         23:15:ed:bf:c5:10:ae:f2:44:27:ec:d7:9e:64:0d:52:54:3f:
         1c:e0:5e:ba:1e:97:31:eb:56:9f:d6:90:07:b7:f2:f2:69:a6:
         1c:8d:0a:ec:eb:98:d6:dc:86:da:c8:9c:d5:74:12:de:d7:ab:
         ea:00:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:32 2025 by rpki-client