Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
File:                     wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json)
Hash identifier:          7OelmFnEcDlpACOT7NMLyO6mMquTC8dL+CJzUfk9Dro=
Subject key identifier:   C6:BC:12:F6:43:E0:26:0B:9E:49:A6:8C:64:9C:0C:C1:14:88:36:78
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Certificate issuer:       /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial:       0197B7EAA1C9B62302326FE78977F4C0E26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
Manifest number:          0ABF
Signing time:             Sat 28 Jun 2025 19:01:36 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:36 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:36 +0000
Files and hashes:         1: X7sxw7uNpouw4ILJQaZasQ1FOVw.roa (hash: 7K5qnvzu1jh/3cj6mY1PwjKcxXcNjjVrkTNjEwE3NGw=)
                          2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: b3O4CqGQTH3fNTIJTW1PrLntcPqcGajKU9diVxp1DzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:a1:c9:b6:23:02:32:6f:e7:89:77:f4:c0:e2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
        Validity
            Not Before: Jun 28 19:01:36 2025 GMT
            Not After : Jun 29 19:01:36 2025 GMT
        Subject: CN=c6bc12f643e0260b9e49a68c649c0cc114883678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:41:35:44:dc:79:ef:da:d6:c0:8e:33:75:
                    83:ad:d6:a3:a9:6e:4b:df:1a:7a:fd:15:7b:65:cc:
                    15:dd:17:34:b6:7e:8e:17:28:a0:11:70:51:67:fa:
                    0e:a9:b2:bc:2a:f5:4e:86:e4:39:93:0c:1a:e8:f4:
                    17:8b:e7:5b:32:b1:07:5a:e8:38:b3:0b:83:01:2f:
                    2a:0f:33:71:50:05:d6:ba:33:c2:9a:9b:f4:4b:33:
                    87:11:cf:ca:49:ec:f3:68:07:08:14:fa:a8:40:67:
                    af:c8:58:ca:55:69:74:03:9f:02:77:45:64:1c:b9:
                    d0:e9:fb:7d:dc:93:da:a9:f3:58:6f:bf:8a:ee:79:
                    70:45:66:f9:7e:0c:33:8a:5c:39:7c:0d:e7:76:b9:
                    ee:e0:d0:c6:31:7d:8d:6f:e2:c0:c9:28:39:13:a5:
                    46:37:e5:6d:b6:b2:46:6b:b3:f2:ec:f6:51:33:43:
                    aa:10:51:4d:24:5a:8c:e0:26:88:05:6f:59:4f:df:
                    ff:94:b3:08:14:70:b4:4f:3a:59:69:b8:66:c9:2c:
                    be:36:8e:8c:7b:a2:7d:67:1a:9e:a2:ee:f4:a9:88:
                    f1:16:60:99:d6:73:1b:d5:d8:cf:cd:fc:64:76:6f:
                    3c:c8:51:b2:13:fb:5b:62:7b:59:26:2c:93:b6:d0:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BC:12:F6:43:E0:26:0B:9E:49:A6:8C:64:9C:0C:C1:14:88:36:78
            X509v3 Authority Key Identifier:
                keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:90:f9:67:9e:50:15:03:df:91:35:6b:86:97:b0:c8:0f:55:
         a8:fd:d5:27:b5:1d:28:59:af:7d:aa:47:7b:db:5a:f5:e9:b3:
         62:2d:81:d1:8c:57:67:4e:1e:5b:b0:81:76:81:cd:a5:9a:ab:
         bf:1b:9f:7f:89:c3:b8:94:b6:c0:30:76:2e:7e:a9:08:b8:5b:
         d6:00:b2:e9:0a:c0:e8:5b:53:c2:90:a2:69:0f:ab:0a:55:be:
         0d:3f:09:c5:d1:6e:44:db:a6:b9:ea:d7:1d:36:23:26:70:5d:
         22:84:53:4e:56:da:56:76:e6:7b:4c:90:9b:57:68:99:b7:e4:
         85:68:24:00:a6:c2:43:6d:1b:58:01:d7:2f:8f:ff:cf:ae:dd:
         9b:7e:37:c0:e9:a7:dd:57:3a:7a:bc:b6:e3:d9:f7:ac:c4:f7:
         57:03:6a:88:0d:ac:36:19:25:1b:3e:75:a5:09:9b:96:b5:08:
         5a:c2:45:4a:d5:4f:29:0b:ba:90:df:ab:d5:28:f2:90:66:30:
         9d:ee:3b:8f:bb:18:83:42:9c:44:a7:1f:61:13:ed:b8:79:4c:
         34:f4:14:f7:a3:aa:5c:af:94:02:a0:36:6f:5e:33:a7:83:4e:
         73:0a:9d:c9:8e:96:aa:bc:fa:02:54:f4:e3:19:73:cb:42:a4:
         d3:3a:f2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:57 2025 by rpki-client