Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
File:                     wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json)
Hash identifier:          z8yO3ZElN7WK5NaSxpKt9lkPqbyfzwRNsbixLKQIEMk=
Subject key identifier:   4F:9F:C7:0B:02:C1:78:19:FA:1B:E4:3C:43:A9:77:D8:6B:5D:63:C2
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Certificate issuer:       /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial:       0197B8908D3D017BAD017212B4DF3504F625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
Manifest number:          057A
Signing time:             Sat 28 Jun 2025 22:02:50 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:50 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:50 +0000
Files and hashes:         1: 6vpPWF9um25M6oX0zTeF3gom6lU.roa (hash: j5SzTMsrcpLe+JWtPh5CUbSG7ignAGsV0q0+GlyKReg=)
                          2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: 0AKTAyzwlZe6AoSv2YJHAx0kUxyfaVWEVb2DOFi8nHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:8d:3d:01:7b:ad:01:72:12:b4:df:35:04:f6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
        Validity
            Not Before: Jun 28 22:02:50 2025 GMT
            Not After : Jun 29 22:02:50 2025 GMT
        Subject: CN=4f9fc70b02c17819fa1be43c43a977d86b5d63c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:a3:4b:f8:fe:a9:35:16:1d:56:7f:e2:dd:
                    78:05:36:96:48:a3:51:cb:f3:7a:46:db:09:92:ff:
                    a0:39:1a:6d:a2:2d:8a:ef:e5:0a:37:e8:bb:e1:17:
                    2d:9a:5f:b3:e4:f1:a0:0d:1c:f8:9e:79:28:9c:fe:
                    1b:03:e5:4d:e7:99:df:1e:28:b0:18:c4:ed:35:2d:
                    4f:35:32:bb:7a:7d:83:0d:86:3f:d4:8c:f5:66:0a:
                    22:d3:ab:8e:c1:1e:32:f6:dd:81:10:97:7f:c7:01:
                    f6:e2:81:9c:05:68:7b:f2:97:49:82:31:20:6a:d1:
                    a7:03:46:6f:ac:66:06:e3:d2:b5:ce:8a:2d:e3:01:
                    29:52:a6:ff:3a:6a:b4:97:98:ba:c3:7a:c6:ea:b8:
                    81:e5:bb:02:1b:e8:67:f5:61:84:73:d6:cf:a4:c6:
                    0a:86:84:60:4a:bd:11:1b:b6:03:cc:47:b2:9d:bf:
                    07:eb:c6:c3:6f:d2:cb:49:32:17:89:42:c1:88:f8:
                    9f:73:22:82:94:16:0f:e2:ce:9e:8d:47:25:12:5c:
                    a8:37:9b:96:b2:c7:47:92:92:64:e6:06:4c:6e:40:
                    94:2e:0c:20:df:3f:83:cb:47:7e:eb:12:ad:69:db:
                    30:e9:62:20:ed:0c:c1:98:2d:14:9f:5e:50:86:23:
                    9b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:C7:0B:02:C1:78:19:FA:1B:E4:3C:43:A9:77:D8:6B:5D:63:C2
            X509v3 Authority Key Identifier:
                keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f2:b9:12:e1:3c:c7:3a:23:7a:8b:7a:33:08:62:56:12:f3:
         58:5c:ed:2a:a0:3a:6d:98:de:28:9c:9d:23:46:00:03:26:09:
         aa:44:18:24:62:98:5c:b1:8e:d7:0c:47:00:53:28:29:92:50:
         c9:ef:09:aa:2a:f6:dc:98:78:ed:3e:f7:a9:88:04:3a:f5:59:
         03:52:24:a4:64:ed:fb:47:5b:7d:40:38:11:5e:de:d5:75:6d:
         b5:8f:24:2a:3d:34:6b:d8:8f:fe:d9:de:ee:cf:63:68:27:2d:
         49:cd:b3:ab:ad:1c:ca:e5:c8:e7:e3:e3:26:68:f9:07:17:e8:
         fa:23:42:89:52:90:c5:18:b2:9f:76:2f:dc:3f:a4:6a:17:15:
         63:b6:bd:8d:f2:3e:72:35:cb:e3:67:e3:c0:37:40:b9:76:fe:
         e1:fe:ac:ac:c2:2b:e1:84:28:b1:08:a0:c8:d2:51:eb:ee:6d:
         bf:8d:26:9b:b9:4b:1e:a4:07:c0:2f:ac:7e:02:25:b0:bf:7f:
         1f:ba:f0:01:78:6b:50:63:57:87:3e:f4:cb:df:dc:a5:e3:c7:
         bd:b5:b2:ef:50:b1:8b:5d:32:ab:19:1e:35:ec:70:5f:d0:ef:
         f7:c5:4d:1e:7e:0d:78:da:3a:05:57:19:fb:0d:35:4e:b3:9d:
         9e:dc:4f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:36 2025 by rpki-client