Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File:                     wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier:          Uizv+x97yBuzRBV4FlLkkdOoc8kr1kZBtoLmkvjKEb0=
Subject key identifier:   4C:BC:96:FF:8D:25:55:3D:62:8A:87:1B:74:07:2F:40:76:76:42:FF
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer:       /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial:       0197B6A1672415FF4BE5A08F7A8B7F7D31C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number:          0479
Signing time:             Sat 28 Jun 2025 13:02:00 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:00 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:00 +0000
Files and hashes:         1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=)
                          2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: V1JYm/fCULjjOtfSASBKswOwYnbHQ02VeErmw98BcXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:67:24:15:ff:4b:e5:a0:8f:7a:8b:7f:7d:31:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
        Validity
            Not Before: Jun 28 13:02:00 2025 GMT
            Not After : Jun 29 13:02:00 2025 GMT
        Subject: CN=4cbc96ff8d25553d628a871b74072f40767642ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:95:7d:a8:a8:eb:76:8c:7f:67:d7:d2:21:
                    47:52:a2:d9:7c:65:09:69:a8:49:db:7b:42:8f:35:
                    3c:11:39:17:11:80:fc:fe:b1:92:0c:17:b7:b3:05:
                    cb:d6:bf:17:30:e1:ed:97:17:a3:80:1f:49:64:2a:
                    bb:53:93:a2:57:6d:3a:d2:75:97:6d:82:de:0c:5e:
                    59:d9:d1:0f:35:95:2d:1d:87:e1:49:6f:44:90:55:
                    81:c8:e6:6f:b7:bb:07:e7:22:33:cc:6a:77:f4:ce:
                    d7:a0:51:f5:95:60:6a:f5:cc:1c:4d:d5:e3:7b:5d:
                    b8:f2:7e:d8:83:50:46:4a:a8:c8:95:23:ef:7f:2a:
                    1e:de:44:63:aa:26:4e:12:be:1a:40:ad:75:2d:f5:
                    f7:e3:7e:43:52:f0:f8:ac:d3:d0:74:f3:c2:43:31:
                    d0:5c:3d:62:00:33:cf:a5:82:3c:6b:15:31:1a:5f:
                    b4:84:d4:95:75:ca:05:21:aa:31:73:37:01:98:06:
                    bd:f4:2b:62:a3:82:8f:5a:d3:ed:a8:00:32:e1:de:
                    c2:da:bf:ee:25:dd:1c:bf:2e:05:fe:c4:67:ac:c1:
                    a7:5b:34:f1:c0:fa:c3:3f:88:1d:29:cb:2f:a5:77:
                    61:6b:d0:df:7d:ed:86:bc:8d:b3:36:8a:b9:94:82:
                    bf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BC:96:FF:8D:25:55:3D:62:8A:87:1B:74:07:2F:40:76:76:42:FF
            X509v3 Authority Key Identifier:
                keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:01:60:44:82:23:ca:25:fb:08:01:d2:76:0c:75:5a:fb:
         ea:1d:ca:f1:8f:0b:37:e5:72:3e:1d:e9:c1:7e:a3:fd:ff:7d:
         e4:fe:ed:00:0f:59:55:d4:dc:48:c1:04:8f:df:3d:02:3d:7b:
         ae:63:cc:f5:47:c9:7d:ab:be:27:d4:89:4a:3a:28:90:c9:81:
         23:2f:79:7c:a8:f2:04:28:ad:11:4c:5b:5d:15:c7:bd:fb:a5:
         97:70:cb:d2:a5:f1:0e:83:11:a9:0c:a5:52:a0:5a:fb:a3:16:
         cd:4c:46:d3:4e:7e:a9:d7:09:21:55:02:61:53:02:be:1d:0e:
         74:ae:97:08:40:6d:87:91:90:04:36:a8:fe:c6:b3:5a:ed:2b:
         23:3a:10:47:49:71:10:1e:03:e7:22:5f:7d:86:de:92:2b:24:
         9f:b5:f8:a7:8c:de:0d:73:11:e3:f7:49:43:0c:2b:41:ab:94:
         e7:45:42:70:8a:65:7a:23:83:34:27:dd:94:f1:74:61:ec:e0:
         ee:7a:a5:4e:60:82:b3:7a:87:6f:60:ce:bf:2b:b2:84:09:bf:
         9a:42:a6:24:37:98:51:d8:99:78:47:bc:f1:5d:bc:81:3d:01:
         2d:9e:db:99:b8:e9:8c:60:28:f0:fc:3f:9f:be:0c:31:a4:61:
         f4:cd:77:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:50 2025 by rpki-client