Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
File:                     wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json)
Hash identifier:          F1GFzmXbFW1VPI2bHD06QJ9EvId1+0QzGZh7Uc3lJeo=
Subject key identifier:   20:96:B1:B9:04:04:09:E2:2D:B8:C4:C2:4A:DC:C4:3C:B3:AE:B8:16
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Certificate issuer:       /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial:       0197C6B8322736E30C03D721457D8E64BE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
Manifest number:          15BE
Signing time:             Tue 01 Jul 2025 16:00:49 +0000
Manifest this update:     Tue 01 Jul 2025 16:00:49 +0000
Manifest next update:     Wed 02 Jul 2025 16:00:49 +0000
Files and hashes:         1: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (hash: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=)
                          2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: 7izo1SN1sR7tMb2HPP7e45ROUGueRJaG8kruRnDxZuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:b8:32:27:36:e3:0c:03:d7:21:45:7d:8e:64:be:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
        Validity
            Not Before: Jul  1 16:00:49 2025 GMT
            Not After : Jul  2 16:00:49 2025 GMT
        Subject: CN=2096b1b9040409e22db8c4c24adcc43cb3aeb816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:65:78:37:d7:82:24:7d:2d:e5:c4:9d:0b:
                    2e:93:1e:75:33:af:a5:df:0c:28:ee:23:e8:c1:b5:
                    b1:e9:ae:42:41:c0:09:9d:af:35:dc:a5:af:62:f9:
                    9d:d2:df:83:d9:fb:ec:47:a3:27:fd:d2:67:14:e6:
                    22:50:43:a2:4b:c2:f3:78:4d:56:9d:cc:3d:ce:b2:
                    88:63:6e:20:9a:0a:61:62:34:62:f7:d6:fa:64:75:
                    9c:2c:f6:1b:86:f4:21:98:14:4d:0b:07:74:35:06:
                    08:d4:f3:a6:66:d1:71:b4:75:b9:f1:2d:ec:40:eb:
                    24:20:44:5b:d1:8e:39:31:1d:ea:2d:41:f6:2c:77:
                    8d:31:04:6e:1a:03:31:2e:00:d4:b9:d1:9b:4d:c4:
                    2a:82:cc:a8:d5:ff:46:8b:73:96:b9:17:15:23:11:
                    14:f7:da:38:65:e3:87:bb:21:e5:e9:51:fd:03:76:
                    31:c2:d2:05:b6:0f:09:3e:df:bd:a6:5b:9e:71:2d:
                    22:3a:fb:aa:00:4e:35:69:33:d5:b1:65:ec:65:9d:
                    67:03:f7:41:3a:0f:0d:95:b1:5a:16:a5:02:aa:63:
                    2a:da:65:10:6b:53:72:0f:00:fb:cd:fc:86:2d:cc:
                    12:f5:b3:3f:78:54:c6:c9:88:23:08:c9:67:be:b0:
                    5b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:96:B1:B9:04:04:09:E2:2D:B8:C4:C2:4A:DC:C4:3C:B3:AE:B8:16
            X509v3 Authority Key Identifier:
                keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:20:d5:15:8a:60:8e:33:25:68:eb:44:48:bb:a6:02:e9:4e:
         79:3a:6f:7d:2e:8d:cd:6c:52:ac:7a:82:5a:c8:af:4f:ab:16:
         cb:2a:ae:ff:ad:1e:e8:ac:d5:6c:fc:0d:32:6e:9a:9c:91:52:
         d0:44:8b:89:c2:e0:01:65:64:e4:e9:37:5d:63:a6:0b:fb:ce:
         29:36:6f:29:50:66:9b:31:88:1b:76:a4:2d:8d:5f:19:e9:ed:
         cb:4b:ff:f0:35:2d:07:da:ea:48:8a:b0:46:94:42:05:f5:07:
         09:0b:e3:36:e2:2a:fa:e6:39:56:b2:39:a8:d0:6d:28:87:b5:
         6c:50:88:b8:ad:db:3b:d9:7a:47:67:3e:8c:23:1d:47:82:da:
         2f:ca:03:43:1c:90:2c:87:ce:5f:c3:a0:14:c0:b4:a2:87:5f:
         2a:0b:02:7a:b3:44:54:e7:4d:91:36:f2:04:22:11:96:b7:bd:
         f2:5d:20:54:b8:3a:3d:4a:c3:b0:5a:57:fa:50:30:f2:60:d1:
         c6:28:f6:9f:eb:58:01:7a:b2:f2:bc:2b:01:9e:f6:6b:52:b9:
         e9:0a:24:cd:dd:8c:69:2e:fd:7f:18:c0:9e:ef:18:58:5e:a4:
         68:c1:90:0a:b2:52:78:c5:c3:ed:72:33:ef:d6:4c:88:1c:c3:
         cf:b6:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:12:36 2025 by rpki-client