Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          pGHUIm5rGIfKI8xwaktqPvlhpZipAtQuUVRpg2P27u8=
Subject key identifier:   2B:EA:B9:9B:F1:B5:34:C6:6E:94:A9:31:D1:BD:9A:C6:2C:D6:77:AE
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       0197B6A20E8DE9E49B54CF3BA03F61FC6843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          0EC9
Signing time:             Sat 28 Jun 2025 13:02:43 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:43 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:43 +0000
Files and hashes:         1: Bb8ycOE7qhSFoSMHyD2xB85u_Z0.roa (hash: KcdCM+LEn+v24gkqqCtc8motwJZXGA9KFLUTB0+gGg8=)
                          2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: o3UbOzNJmkBYqY+rwAZ42kpgacTU107fz8M9nukzFqg=)
                          3: g-54cvk5hO2Au4tfyjhzhnHoH90.roa (hash: Q49mbpUpWnr28zAxYWF00PO3wsoqtVE5pDkqJmiOpho=)
                          4: kTl30QOsbrDzk_mb8ECK1dAhV14.roa (hash: ktEj7/KQdl7DWD89NCLPeaAfOqTe9FU+2FvlPHr9TVM=)
                          5: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (hash: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:0e:8d:e9:e4:9b:54:cf:3b:a0:3f:61:fc:68:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Jun 28 13:02:43 2025 GMT
            Not After : Jun 29 13:02:43 2025 GMT
        Subject: CN=2beab99bf1b534c66e94a931d1bd9ac62cd677ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:c1:18:58:a9:a0:6d:76:a9:69:e5:0f:40:
                    1c:9c:fb:28:6a:a8:9e:5e:09:8f:75:6c:f2:c2:41:
                    b8:09:84:68:3d:58:44:71:82:b2:13:99:a0:c5:65:
                    2d:99:8e:e9:27:9b:cb:b7:16:ca:69:c0:79:d0:86:
                    1f:64:67:3a:dc:5d:a0:50:36:ba:69:81:65:c5:ba:
                    d8:e1:15:5c:b9:b2:f1:b2:fd:68:6e:01:68:23:a8:
                    c0:c2:01:4e:1d:0a:2f:4b:89:ee:e6:43:c1:f6:ad:
                    48:8d:f5:5d:41:54:1c:7e:b6:05:00:9d:45:d1:52:
                    11:22:43:c2:dc:b8:5a:6c:74:9d:1a:34:44:45:ed:
                    1b:43:68:03:15:ec:81:1d:22:fd:07:e4:7a:f2:45:
                    22:e6:b2:0f:db:4a:a8:2d:78:30:9e:69:2a:c3:53:
                    8c:96:52:6c:09:9b:4c:a6:c8:60:7b:f1:f5:e2:d7:
                    67:7a:0d:d5:55:5c:18:4e:67:77:d9:d2:05:a2:18:
                    73:ba:73:f1:43:c4:52:1c:11:58:71:36:56:6c:3e:
                    e0:51:9e:2d:40:47:bc:bc:5c:ea:02:c7:0f:35:6c:
                    32:bc:e9:be:26:1a:01:a3:6c:6c:2b:c4:f2:0e:7b:
                    33:48:db:e8:ea:ee:73:de:67:4c:f7:e2:89:26:e4:
                    ed:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EA:B9:9B:F1:B5:34:C6:6E:94:A9:31:D1:BD:9A:C6:2C:D6:77:AE
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7f:ad:b3:2d:3f:98:ed:e3:a3:81:4f:c0:9d:d6:de:c9:91:
         c7:4d:de:58:5f:90:ee:cc:11:51:7c:ad:be:af:01:d3:b7:28:
         5a:97:3b:30:e8:2b:7f:83:0f:f0:c3:87:89:d2:76:fb:bc:25:
         51:96:08:de:80:9c:b4:a9:6f:be:c4:16:20:e4:32:42:92:ba:
         e4:33:a3:d5:5c:05:db:91:d3:64:ba:72:16:7c:90:b3:3f:33:
         80:0c:9d:ac:86:bf:d4:91:4c:57:cb:39:33:3c:a5:e5:c6:f6:
         6d:60:c3:ae:ab:16:66:ec:5b:05:43:de:c6:d1:da:4f:ec:a1:
         47:ab:7c:4f:9e:49:38:15:12:8a:5d:7d:1e:50:26:40:9d:c0:
         1a:d0:2b:57:ac:fa:d7:74:60:8e:f1:08:ed:14:8a:dd:34:5b:
         82:69:78:6d:d2:dc:5d:57:ee:3f:76:4a:9d:8b:28:00:50:ea:
         a0:42:af:30:45:04:0c:4b:02:2d:51:7f:cf:fa:4d:03:fb:84:
         86:82:b4:48:76:0d:e7:36:e8:b1:26:82:04:71:86:34:e3:d3:
         52:da:f0:b2:7f:56:22:7f:3b:29:2a:f6:f2:3f:ef:0a:36:c6:
         41:07:ff:a1:06:ad:bd:2e:7b:21:71:b0:cc:3d:c2:22:b7:62:
         d9:7f:f5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:14 2025 by rpki-client