Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File:                     wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier:          ix5DC5BKLB7OPye/u3RWikc+vt4uP/s/rTGSn3u5X24=
Subject key identifier:   50:45:55:F7:70:C4:AF:30:7C:32:44:F3:86:90:2A:52:14:A0:DB:93
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer:       /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial:       0197B7EA11B707A169E701695B789E7C8214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number:          050A
Signing time:             Sat 28 Jun 2025 19:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 19:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 19:00:59 +0000
Files and hashes:         1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=)
                          2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: P1j3KPJuj2Rt2TwRntnzH2TnPM51n6rEUfIEb+gRNnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:11:b7:07:a1:69:e7:01:69:5b:78:9e:7c:82:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
        Validity
            Not Before: Jun 28 19:00:59 2025 GMT
            Not After : Jun 29 19:00:59 2025 GMT
        Subject: CN=504555f770c4af307c3244f386902a5214a0db93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:db:20:07:c0:4b:6c:a9:06:2e:8c:a0:c9:
                    ba:0c:3d:e0:36:5b:f7:19:9e:9e:2d:af:2a:31:5f:
                    61:70:0d:1e:5d:63:1c:4b:70:be:e4:43:3f:97:26:
                    a4:2d:ca:20:63:4f:2e:3d:ad:03:78:f3:e6:8c:44:
                    b1:b5:28:af:1f:ac:e8:2e:0d:fd:75:39:1b:11:e1:
                    4c:78:35:61:95:f7:25:30:c3:3d:1d:61:e1:bf:42:
                    39:a6:8a:05:b4:e3:64:f5:c3:11:0f:73:4a:c9:1d:
                    1f:4e:c0:9e:ab:dd:22:c5:3b:5f:c8:cd:e0:c2:32:
                    e9:12:dd:8f:c5:62:02:ea:82:c9:8e:fe:dc:fc:95:
                    2b:a0:14:62:0b:ce:7d:e6:99:63:3c:78:04:3a:7f:
                    62:e2:e6:0b:52:91:1b:4e:d5:eb:ab:c3:64:fd:18:
                    9b:42:cc:3e:85:ff:45:cb:c4:c4:19:1d:62:65:cd:
                    36:ff:b8:54:aa:12:1c:57:55:9c:9f:4d:44:2e:70:
                    11:6c:42:0a:cb:ab:b5:a4:b4:dc:38:50:34:36:e0:
                    f6:a8:c6:5c:a7:d5:84:de:d1:b5:88:03:c8:74:38:
                    87:a3:f1:3e:e3:01:8f:d6:58:37:d9:40:52:6f:73:
                    42:40:90:d8:71:53:06:76:c3:ce:ef:2d:47:bb:53:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:45:55:F7:70:C4:AF:30:7C:32:44:F3:86:90:2A:52:14:A0:DB:93
            X509v3 Authority Key Identifier:
                keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:84:91:d4:35:1b:b8:af:c0:98:ac:b5:56:2f:25:5f:9d:f7:
         d5:8d:8e:a2:37:e1:fe:91:1c:3e:36:e6:2c:93:9f:56:f7:32:
         83:0e:9a:52:cb:81:0e:4b:4a:08:f4:0a:0c:0d:68:b4:77:1e:
         01:83:6a:c0:24:97:f9:2f:ad:75:c2:70:a5:39:18:33:f1:cc:
         bf:8d:a0:7f:1a:6f:a4:27:47:6e:a6:37:88:77:b4:da:23:fd:
         47:88:5b:33:ea:bf:8b:a3:d8:ce:1e:4b:fd:27:06:4a:3c:0c:
         41:0e:3c:a7:1c:c5:e3:43:2b:fd:d0:b5:d5:5b:ee:a1:c5:12:
         60:95:0d:5f:d6:f5:d4:65:66:89:ca:c2:50:55:2e:1b:1c:cd:
         b2:8f:4a:2b:fd:00:f4:22:5e:59:e8:72:03:e7:72:f1:27:ec:
         85:46:80:e7:31:1b:73:fe:8e:c4:c6:40:65:7e:71:da:be:e2:
         84:ca:e5:5b:b9:a1:e7:2b:1c:ce:7b:b2:58:cb:ab:2f:f1:43:
         27:bd:cf:2f:70:95:d9:b4:08:2b:7a:32:34:39:77:e4:a6:da:
         55:d0:36:5e:12:bb:e5:a9:13:28:ba:8a:7e:7f:01:27:5c:ca:
         cd:db:29:91:1f:13:c9:32:e9:8f:d2:de:53:7c:51:eb:23:fa:
         a4:5a:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:14 2025 by rpki-client