Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File:                     1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier:          5EWL7eE5IwcTkiiaIdO7sknkWqlYa02+5PYs4g1/ZpY=
Subject key identifier:   78:62:39:D0:D1:3C:DC:B0:B9:A6:93:81:E8:4C:A8:92:4D:77:5E:81
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer:       /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial:       0197B6D7BA25CAE063B47C1A86E2E5B0BE45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 14:01:20 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:20 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:20 +0000
Files and hashes:         1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: P/TogkkLt9PAknfPma9oFMTokViQ3dHpzztvH5rvKo0=)
                          2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:ba:25:ca:e0:63:b4:7c:1a:86:e2:e5:b0:be:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
        Validity
            Not Before: Jun 28 14:01:20 2025 GMT
            Not After : Jun 29 14:01:20 2025 GMT
        Subject: CN=786239d0d13cdcb0b9a69381e84ca8924d775e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a5:fd:f9:15:e3:67:ef:c4:dc:39:bf:1a:70:
                    fe:a8:2b:b7:75:44:88:44:92:18:4c:2a:cf:94:1e:
                    bc:fc:60:ec:0c:80:f5:43:40:e7:e5:98:62:3f:e7:
                    0b:b4:1e:6e:f0:38:0a:3e:b4:39:b4:43:2c:47:59:
                    2a:f2:96:b2:8a:10:f4:c7:ef:8d:ea:3a:7f:62:77:
                    9f:ae:b2:29:06:d1:ee:c9:16:a8:7f:0e:ae:8c:39:
                    de:fc:16:c9:86:3b:84:85:6f:50:cb:a2:02:d7:c4:
                    80:6d:c4:44:49:32:0b:1f:5c:2a:dc:72:07:c5:0d:
                    97:76:02:84:92:0f:69:d7:1d:25:2f:3e:74:04:59:
                    08:db:b4:4e:2f:67:1c:db:82:20:b4:8a:2a:25:0a:
                    04:fd:95:35:a5:a6:de:d9:f0:19:65:10:0c:cc:ba:
                    5c:1e:3d:ad:d4:e3:39:06:66:b9:1a:4a:16:c2:ad:
                    9a:3e:b8:6a:f3:ca:c1:be:68:8e:9b:4d:90:2d:ef:
                    cf:e8:57:84:56:f0:35:aa:d1:e1:19:26:38:96:fe:
                    a6:be:b4:3f:8a:9a:20:46:d9:b1:25:0c:2e:bd:1d:
                    2b:3a:11:46:bc:71:14:c4:4f:7f:53:38:e4:45:cb:
                    2a:1c:ef:d7:f7:29:1c:77:fb:13:ae:ed:37:0a:f1:
                    63:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:62:39:D0:D1:3C:DC:B0:B9:A6:93:81:E8:4C:A8:92:4D:77:5E:81
            X509v3 Authority Key Identifier:
                keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bc:4f:51:5c:cd:e0:d4:a6:f6:90:b0:72:e0:40:03:14:d9:
         89:11:7c:3f:9b:be:fc:0c:ef:5a:6a:1e:8b:1f:e5:50:24:26:
         2c:7c:2e:6e:d9:a7:f3:1c:bf:0b:da:a3:43:9d:65:aa:31:11:
         a9:b5:9b:da:14:02:78:a7:a6:a5:3b:d8:3d:01:ed:42:0e:a0:
         ad:9c:ef:2a:2b:c6:24:67:a3:85:fa:96:02:45:82:2d:57:54:
         b2:94:7e:32:42:0d:01:e8:cc:d6:64:7c:6d:d3:75:1c:30:3a:
         c4:c3:24:a9:53:16:c3:e9:de:ca:a0:b9:00:65:50:67:cb:3c:
         10:ad:5e:54:7a:95:11:4b:8b:ca:57:4c:2e:b6:fd:11:2d:a8:
         c5:9e:8d:9c:52:95:20:d9:fa:a6:a4:74:98:50:b9:d0:69:25:
         de:25:96:1b:a6:5f:5b:ff:ed:4e:33:20:2a:bd:8c:b2:83:09:
         6a:2d:ef:40:e5:cb:bf:ce:82:77:b5:e7:6b:61:38:71:d9:12:
         18:6f:a0:5f:dd:dd:e7:9b:50:55:2d:63:65:a9:79:50:cf:8d:
         d7:d7:2b:9f:04:6d:fd:01:d9:b4:86:26:89:e5:a8:88:56:9c:
         9c:f0:16:0f:8c:a7:1d:b4:a8:5e:8c:e3:8c:53:53:4e:22:0d:
         10:93:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:04 2025 by rpki-client