Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
File:                     iWaGG-V9NtX22dn46_YoF2FqIfU.mft (raw, json)
Hash identifier:          fzkpjD2ZNHyYiNBWSqJ49ZFRyghPbefcp0BpHq9JXv4=
Subject key identifier:   26:C9:96:33:0E:E2:D9:04:4A:06:6D:40:31:44:A7:75:62:F9:E5:5C
Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5
Certificate issuer:       /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
Certificate serial:       0197BB8FA76B75C55A5AD2FCE52B56B43F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
Manifest number:          09C6
Signing time:             Sun 29 Jun 2025 12:00:43 +0000
Manifest this update:     Sun 29 Jun 2025 12:00:43 +0000
Manifest next update:     Mon 30 Jun 2025 12:00:43 +0000
Files and hashes:         1: HVZZgTt0qImB-OIxZYe0LV_oR4c.roa (hash: CxMOuogiyPkbYMbQPW67m4ttU2r00+UG5PTmwlkEZ0c=)
                          2: iWaGG-V9NtX22dn46_YoF2FqIfU.crl (hash: zLREaof15smDgkfMxqln/LBaLzF6dCvODe7BXo5VyBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:8f:a7:6b:75:c5:5a:5a:d2:fc:e5:2b:56:b4:3f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
        Validity
            Not Before: Jun 29 12:00:43 2025 GMT
            Not After : Jun 30 12:00:43 2025 GMT
        Subject: CN=26c996330ee2d9044a066d403144a77562f9e55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:a2:3f:8b:6e:cd:ca:a5:2a:aa:24:6f:04:
                    75:c8:a7:87:40:d9:46:0a:f9:37:f2:38:f5:40:27:
                    42:02:3b:c2:57:1f:40:da:b9:5c:59:9e:df:25:48:
                    1e:ee:35:d7:46:ec:68:ac:67:d1:14:d1:d7:f2:06:
                    b9:3d:11:81:71:db:b1:74:a4:3e:40:dc:47:77:ed:
                    d1:a9:61:d8:12:1f:9d:ab:22:60:81:15:d3:73:17:
                    a5:61:a2:88:5b:ae:c8:e4:14:36:32:f3:3f:29:e6:
                    59:44:6e:96:06:e5:79:53:9d:d5:fd:e8:8e:d5:57:
                    bc:d9:eb:dc:90:f4:67:f5:9e:05:18:89:9c:f2:3a:
                    fd:27:16:28:5c:df:22:14:d3:c1:68:67:54:6c:7a:
                    9c:5d:5d:9c:24:5b:06:7d:64:b6:a0:d2:58:41:a1:
                    cb:d8:24:c4:c1:bf:47:f1:fa:e9:7c:af:72:fc:82:
                    c9:ae:9b:8a:eb:15:85:70:75:3a:86:ce:a3:1b:e3:
                    97:72:ec:7d:fd:f8:7a:6b:a8:e4:fc:41:24:47:e2:
                    f4:53:b0:e5:3b:fb:f0:b9:7c:0e:f4:20:71:8e:23:
                    3f:85:f4:9b:73:e0:3c:f4:5c:28:77:e2:40:56:51:
                    7c:37:a8:79:8f:ac:60:01:94:aa:c1:f9:7c:7d:14:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:96:33:0E:E2:D9:04:4A:06:6D:40:31:44:A7:75:62:F9:E5:5C
            X509v3 Authority Key Identifier:
                keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b1:78:6f:14:72:5b:f5:8e:2e:0f:cc:8c:fa:0d:d2:5c:c8:
         ea:87:ab:21:c6:6a:e7:37:32:a7:eb:55:50:45:d8:2e:82:9a:
         0f:6f:8b:64:2e:25:9f:8c:d9:f8:0d:c7:c5:17:f9:8f:2f:22:
         1a:71:4b:b5:8a:eb:a8:c9:62:b5:75:2c:4e:b5:5e:a9:37:77:
         d3:39:af:cf:79:2e:40:18:00:25:d6:4d:d0:15:91:fe:f7:05:
         17:70:11:77:02:4b:aa:05:24:08:da:d3:05:42:99:dd:79:82:
         a3:be:8d:09:1d:f7:bc:cd:05:d5:b4:fd:18:52:4c:6b:53:6c:
         c5:0e:93:09:d3:6a:02:87:26:68:40:b6:35:5f:65:df:9a:60:
         dc:c1:77:99:9a:cf:ab:31:04:03:70:dc:a0:d4:80:3b:f2:16:
         a0:87:3f:79:1d:26:16:6a:70:08:a8:7a:e9:c8:ae:e6:36:52:
         b4:b2:36:84:cd:b9:58:85:36:e2:b8:58:56:be:44:8a:5e:a5:
         86:16:d8:c6:e4:20:7e:9b:33:bc:4f:ef:22:70:1d:5c:f0:96:
         f0:82:57:99:f6:d8:8d:49:d6:ad:1c:87:7d:96:7e:6b:1a:75:
         3e:fb:64:44:d3:3d:d1:13:01:20:a6:ed:3a:33:c5:35:09:a6:
         27:2c:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:32:18 2025 by rpki-client