Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File:                     wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier:          66DXM4O+5yMiJ9doX/3Kq6krHyY325W5vhQkZ1ppirM=
Subject key identifier:   3B:E9:E4:06:EC:81:66:FE:4C:B8:16:A3:9D:BD:16:28:DB:86:A3:09
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer:       /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial:       0197C9F0A3B4C8DECAA91C14D1B51FAE0C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number:          0A56
Signing time:             Wed 02 Jul 2025 07:01:20 +0000
Manifest this update:     Wed 02 Jul 2025 07:01:20 +0000
Manifest next update:     Thu 03 Jul 2025 07:01:20 +0000
Files and hashes:         1: 5CKcJ3WWdLnxNxA8zS9MSqemGeU.roa (hash: F1W/LYRU/swbDsn7VsjuOlThJoPhjHiHTuqYQgQV4vQ=)
                          2: FZ6_BK0_bbVrJHhN6MfGrD_zBBU.roa (hash: pGJzWgBtcqu+YLCletr5FYBbo/hFDdnErtqiP7qljbk=)
                          3: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=)
                          4: WalhO7K1hj39eQFX6Fsg65lsYZc.roa (hash: TPuLRQcIjhduyALRmIncbUOw8bhZHm8cVLFCDxTFRgw=)
                          5: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=)
                          6: pIvBgTa21ZIrbNAe93h6ywfLfqU.roa (hash: 4TvmPBfwBLS029TBaeYbv9kyWoozw1GEP3VDLEg1dFk=)
                          7: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=)
                          8: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=)
                          9: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: tAiT/dJ3kWSxgamFfyqBjNUXmXWLuL+9DHVbKaWyGh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f0:a3:b4:c8:de:ca:a9:1c:14:d1:b5:1f:ae:0c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
        Validity
            Not Before: Jul  2 07:01:20 2025 GMT
            Not After : Jul  3 07:01:20 2025 GMT
        Subject: CN=3be9e406ec8166fe4cb816a39dbd1628db86a309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:24:3b:a1:4e:28:82:45:2c:97:8d:bc:e1:
                    c7:31:91:0f:be:44:92:a4:a6:4d:4c:13:13:cb:81:
                    8e:ef:1a:6f:d0:17:31:c7:ab:e0:ca:41:ec:6e:40:
                    5f:01:67:cd:29:7f:76:e8:a8:c4:ad:0b:5d:27:bf:
                    22:87:44:fd:7a:56:a3:85:a5:81:32:53:f7:d9:d4:
                    4e:ee:df:93:e3:ab:ef:c2:f5:d1:3b:b1:41:59:ea:
                    2b:f5:0b:4a:76:52:71:72:28:03:e5:54:e5:2b:e4:
                    38:ab:ee:8f:03:46:4e:87:d8:97:60:b0:ef:16:0f:
                    03:dd:87:48:7f:3b:b3:1c:b2:65:32:09:09:07:79:
                    a8:1e:9e:ce:c9:b3:e3:71:f3:04:c5:f6:93:00:88:
                    8c:49:d2:89:eb:60:7a:d2:0e:cf:89:7a:43:1c:fe:
                    b8:7b:82:8b:b0:90:1b:c1:c4:6e:a6:e0:34:3b:ee:
                    08:77:b9:a8:48:39:4b:71:34:ac:c5:ef:54:94:6d:
                    66:69:5c:6f:1e:ef:a9:81:84:04:41:83:8f:5c:75:
                    64:88:fe:5f:2b:d4:6d:03:45:89:68:90:4a:f4:8f:
                    f2:84:f5:fa:79:69:f1:e6:c7:81:93:f8:3b:0f:ad:
                    77:79:e1:07:d4:d0:05:85:89:a2:45:6a:3c:ef:a2:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E9:E4:06:EC:81:66:FE:4C:B8:16:A3:9D:BD:16:28:DB:86:A3:09
            X509v3 Authority Key Identifier:
                keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:7e:6e:2e:42:8b:8e:83:02:d6:35:4b:5a:4b:ab:e4:9c:17:
         32:be:1d:32:30:5b:47:08:7e:fd:84:dc:1a:3e:ed:0a:ea:4c:
         5b:a0:35:46:4e:77:56:5d:49:88:57:c2:a6:6f:fa:31:49:5e:
         28:eb:89:39:a5:67:f9:b0:6f:9a:7b:4a:58:17:08:56:a9:e0:
         fb:fa:f9:91:06:ac:4d:da:f3:3f:e5:68:c5:9f:54:c4:71:90:
         70:51:da:d4:18:f3:81:a7:cb:08:04:fc:03:95:86:a8:b1:06:
         a8:74:00:9f:12:94:ed:3a:3c:a9:0c:3e:5e:3f:d0:0b:ed:ee:
         03:cd:9f:0a:25:ac:00:31:f3:b9:f7:84:ec:75:a6:d5:a9:ac:
         7b:bc:72:ff:7f:be:b8:41:25:38:11:b9:b8:78:4a:0b:b1:d1:
         6d:37:f0:ab:13:0a:c9:cc:88:d0:fc:84:2f:4c:db:4c:41:fd:
         ab:57:87:61:08:40:bf:e3:78:b3:56:2c:5e:06:aa:db:1d:07:
         49:c6:9d:4d:31:b5:c8:2a:32:80:34:3e:00:98:ed:d3:a6:46:
         56:b3:a1:14:5f:ac:ec:14:b7:f2:8d:f2:f4:24:a8:28:5d:9a:
         e4:26:24:20:ea:3a:30:a7:65:ba:a6:90:b4:e6:0b:70:00:cb:
         4b:17:e8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:38:40 2025 by rpki-client