Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          Ik0XH2MBStwCUUyS+NZEGkz3ajzxiVAaeH015DZ5rXY=
Subject key identifier:   51:87:00:D6:92:F7:04:A0:1B:E0:E4:12:5B:DC:0D:21:83:F2:E2:00
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       0197B7EAA0977FEE861621F6B3A9F74E158B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          0E88
Signing time:             Sat 28 Jun 2025 19:01:36 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:36 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:36 +0000
Files and hashes:         1: VWUmt1-Lc9mwWkzpXFUMDbb2UqE.roa (hash: Tjmb/lxEFBxZz68PrILtJGnl1lSlmzqzB3RT5UoyTR8=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: 0ocpiVm7lUnEO0tOXkZLhO743hC5DPD6ELMl1bmmIeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:a0:97:7f:ee:86:16:21:f6:b3:a9:f7:4e:15:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Jun 28 19:01:36 2025 GMT
            Not After : Jun 29 19:01:36 2025 GMT
        Subject: CN=518700d692f704a01be0e4125bdc0d2183f2e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:79:f6:2a:ec:2d:6f:aa:d5:c5:30:36:c2:
                    7c:b5:67:7f:78:55:d2:cc:a4:e3:d9:68:ed:2e:92:
                    32:62:53:01:7f:8e:d8:d5:44:3f:29:48:d0:b9:73:
                    74:31:f4:1b:01:50:9c:1e:23:9a:91:a4:91:5e:d2:
                    eb:be:14:59:f7:d4:1d:e5:bc:d1:f0:7a:de:0e:77:
                    34:27:f8:d5:51:fb:f1:72:d4:ae:ea:43:7f:0e:cc:
                    15:51:9e:8c:a2:06:a8:ac:af:67:67:52:aa:31:bf:
                    07:3d:5d:c1:d9:20:f7:51:0e:0d:b5:2e:1a:03:34:
                    e3:f5:6b:f4:76:68:c8:3a:65:3f:9d:34:c5:1f:28:
                    d5:d2:7e:5d:1c:1c:b9:c8:9c:d9:82:d5:52:26:f1:
                    c8:6a:da:56:a4:d0:09:13:b5:09:1a:2e:a8:ec:b0:
                    37:8e:e4:af:2b:39:56:1e:9d:1e:c5:65:26:2e:21:
                    0d:22:8b:93:88:49:db:f5:22:c4:de:9a:ae:eb:2f:
                    6d:b7:d4:e6:f2:93:6b:10:32:26:f2:b5:54:cb:87:
                    4a:ee:39:ee:74:73:8a:46:c4:b7:4e:e4:cd:31:0b:
                    dd:f2:86:67:09:b6:88:0e:1f:4d:82:2e:b2:0a:08:
                    1c:d3:81:b5:bb:08:27:c3:bd:71:e4:ac:20:96:8d:
                    65:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:87:00:D6:92:F7:04:A0:1B:E0:E4:12:5B:DC:0D:21:83:F2:E2:00
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:54:69:94:de:7f:2f:ac:41:54:3e:95:e0:df:06:4f:54:bc:
         e5:61:9b:ee:b4:42:79:f0:f0:91:ae:14:d9:77:3e:75:be:c1:
         00:f9:8b:ee:52:0b:c3:64:30:ad:f3:14:e0:36:43:a3:b8:24:
         c6:99:b3:24:d2:96:1d:e9:f3:48:2e:c0:90:59:76:aa:3b:af:
         79:0b:7a:23:86:6f:8b:f1:5d:18:fb:d6:a4:b2:41:40:93:29:
         a6:e6:e5:72:5c:91:dd:b9:c2:6b:4b:2f:33:a9:45:b0:d2:71:
         a3:81:ce:c9:41:d5:af:02:94:58:fd:7f:2d:98:88:d3:ea:f5:
         d8:cd:b4:f6:e9:cd:cf:4b:06:2c:6d:82:6a:0e:fb:e1:5b:0e:
         09:81:cc:ed:67:50:80:19:bf:dc:ea:fe:59:88:35:08:f1:c8:
         89:0c:8b:29:3d:5f:58:f6:36:17:78:20:b3:b3:bb:bb:11:db:
         da:d7:4a:aa:85:5d:e2:a6:da:da:61:2b:d2:20:61:0e:58:b5:
         46:c5:fa:df:15:6d:b5:e6:a8:81:9a:5d:ef:59:9a:00:e9:a7:
         3f:51:86:e0:24:79:e6:b3:7f:22:a7:6b:09:9e:51:cd:3a:98:
         0c:a0:19:b8:4d:66:fa:ff:d9:c2:48:e7:35:00:f0:41:0f:d2:
         91:12:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:15 2025 by rpki-client