Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File:                     wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier:          uquaOPHsgiw3IIXEJm5DX93U6FX6WEp86WWh6Drwpsg=
Subject key identifier:   B7:74:B7:0E:A4:5A:C3:1A:9F:27:DC:CF:A4:4C:B9:2C:DC:2E:39:59
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer:       /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial:       0197C500CC107DDEA3F42E44DBEDD0039100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number:          15BE
Signing time:             Tue 01 Jul 2025 08:00:53 +0000
Manifest this update:     Tue 01 Jul 2025 08:00:53 +0000
Manifest next update:     Wed 02 Jul 2025 08:00:53 +0000
Files and hashes:         1: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (hash: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=)
                          2: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (hash: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=)
                          3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: ZpTUPcGGC/WuTtece0gy3c7o2cC/Tm/x4ea60QDIA0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:00:cc:10:7d:de:a3:f4:2e:44:db:ed:d0:03:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
        Validity
            Not Before: Jul  1 08:00:53 2025 GMT
            Not After : Jul  2 08:00:53 2025 GMT
        Subject: CN=b774b70ea45ac31a9f27dccfa44cb92cdc2e3959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:45:07:d4:7c:f2:1f:35:3e:7a:1f:78:c7:
                    4b:44:a2:0f:a1:4d:66:38:32:99:52:88:ee:67:e6:
                    1b:0f:3b:c0:53:bb:c5:3c:3b:9b:8e:5e:54:dc:fb:
                    26:00:88:24:74:b0:65:01:85:1e:6f:07:65:98:a7:
                    7a:29:9f:2d:da:ac:e3:d3:e4:d2:ce:b0:66:d6:26:
                    b7:c0:a0:1e:b6:c6:43:ea:85:62:28:fb:b6:d6:0c:
                    e4:7c:a7:ce:f8:e1:52:c5:88:3a:c4:f2:44:75:31:
                    1a:b8:b6:10:dd:d2:ea:8c:3b:70:e7:7a:a8:7c:1d:
                    31:95:0c:97:9b:a7:6b:00:aa:ab:d9:4a:28:63:7d:
                    4c:cf:70:3c:81:6d:9c:8c:71:7b:bd:9d:9d:89:ae:
                    09:5a:a7:18:86:8e:4b:2f:81:ea:46:ef:81:c6:da:
                    1a:37:12:e8:e9:e2:65:c1:59:17:b4:8a:17:7e:12:
                    62:3a:71:5f:6a:31:b8:20:4f:48:05:a2:6a:25:28:
                    01:ed:e2:4b:8a:16:d5:67:34:54:2d:4e:1e:8f:71:
                    15:e8:1d:80:22:6a:92:f6:d2:e3:40:7a:37:d4:ac:
                    47:5d:7c:c7:56:82:0c:33:2c:b4:9f:f6:04:d7:b8:
                    c6:c0:2c:a2:f6:30:d5:4f:e9:17:40:c4:d3:1e:dc:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:74:B7:0E:A4:5A:C3:1A:9F:27:DC:CF:A4:4C:B9:2C:DC:2E:39:59
            X509v3 Authority Key Identifier:
                keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:5b:c4:08:b7:87:23:d9:a0:9e:a9:71:aa:93:e0:2b:d1:
         85:d4:fd:d0:d8:48:84:de:ae:26:a6:10:fb:0b:da:c4:09:f7:
         65:2e:82:03:0e:f8:16:77:fb:01:e4:36:0a:5f:7f:e7:ce:f5:
         7d:67:8a:f3:d1:ac:cc:e9:5f:c1:b9:d6:b5:8f:fb:bc:be:b5:
         08:cf:af:9c:82:2a:cc:2a:55:ee:fc:aa:3e:ca:68:74:59:af:
         47:c8:61:0e:cd:90:44:61:74:45:6a:cc:ff:42:cb:4d:f8:93:
         24:3e:f3:62:46:95:e9:c4:e9:0a:36:93:8c:1f:33:d7:16:79:
         bd:79:1a:b9:81:d3:8e:46:24:28:2e:47:69:2b:6c:01:66:13:
         20:f6:f0:c4:9e:0f:f5:d1:d3:81:00:ab:40:12:2e:71:13:6c:
         15:85:ec:34:ec:62:4c:3d:3b:a9:17:2d:53:c9:2b:e4:cf:57:
         23:20:b8:7c:74:d2:5e:a7:c1:c7:15:5d:19:e5:80:44:59:eb:
         2f:0a:e3:c6:d4:56:2b:d0:07:78:4c:a2:00:76:2c:7c:20:68:
         41:81:a7:4c:f1:bc:10:9a:5b:20:e1:f2:6f:cb:e5:c3:c7:63:
         3d:07:8c:9a:51:67:c4:b6:2c:c3:b9:49:3d:0c:2a:fd:b0:20:
         a1:10:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:07:37 2025 by rpki-client