Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          JI+T8Omzlj+mHL4Yx1Xzdf7TRLLZtYpySVzx7KDBlFU=
Subject key identifier:   FC:0D:87:0F:27:7D:EA:B5:30:6F:3A:63:5A:58:E8:57:AE:20:71:9C
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       0197808E079305BE52E923E73F340FA56483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          13E4
Signing time:             Wed 18 Jun 2025 01:01:20 +0000
Manifest this update:     Wed 18 Jun 2025 01:01:20 +0000
Manifest next update:     Thu 19 Jun 2025 01:01:20 +0000
Files and hashes:         1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: o8v0Q1W0gMevoQdjUs4ku8GM180RdEKG5VLrm6219X4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:8e:07:93:05:be:52:e9:23:e7:3f:34:0f:a5:64:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Jun 18 01:01:20 2025 GMT
            Not After : Jun 19 01:01:20 2025 GMT
        Subject: CN=fc0d870f277deab5306f3a635a58e857ae20719c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:04:17:b6:67:5c:cd:14:e3:6d:84:35:9b:
                    74:3f:0c:9f:8d:9c:a7:43:1e:75:64:bf:5f:c0:3b:
                    fa:6d:60:07:14:a3:e6:4a:f8:2d:9d:62:16:d5:46:
                    82:0d:04:25:29:d1:5b:f4:29:66:2c:07:57:6c:02:
                    9e:78:26:9b:6c:e2:78:9b:2b:cf:33:32:a4:56:7c:
                    83:27:8c:9e:e8:e5:1c:ba:ae:33:be:9a:6d:27:56:
                    49:6e:08:fe:b3:37:4a:a3:40:fc:02:9d:99:d6:48:
                    14:e1:15:3b:7c:98:b0:66:21:9a:a2:61:f8:50:b9:
                    c0:0e:17:fc:0d:b1:53:9c:b1:60:fa:8b:5d:18:6e:
                    c0:10:0b:d9:d3:c9:e3:91:49:b8:2a:4c:e4:a9:a4:
                    13:36:cb:2d:38:2b:c9:db:a0:69:b9:58:9c:52:08:
                    45:41:62:6a:03:ba:e4:02:90:3d:ca:a5:e0:95:16:
                    43:4a:c2:e9:3c:ec:31:7a:3c:41:e3:6a:b0:85:b2:
                    52:e5:db:54:c3:02:2d:bf:db:9c:85:cf:a1:82:e7:
                    f6:26:b7:63:13:75:1f:85:d6:0b:ea:41:d4:0a:c6:
                    32:e0:25:19:b5:eb:1f:6f:44:9f:06:6f:da:8d:e5:
                    46:47:3c:c6:56:fb:c8:42:f8:d2:87:dc:0e:5f:e4:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0D:87:0F:27:7D:EA:B5:30:6F:3A:63:5A:58:E8:57:AE:20:71:9C
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:17:f1:d6:a5:c8:d0:63:75:69:b2:45:a7:cc:ed:03:4c:
         ec:56:a1:52:29:13:39:a3:27:1d:b0:ae:96:e3:dc:87:a2:99:
         3c:9d:5e:45:ef:bd:ea:68:3e:ee:00:7b:23:b1:73:fe:1b:01:
         e0:0d:84:e1:61:3f:9c:43:fd:06:63:c3:9a:c5:0a:30:79:fe:
         df:b2:bb:b5:b7:0a:00:e4:c3:a2:6d:c9:33:0f:18:bb:4b:13:
         54:09:da:ec:57:55:06:7c:80:5d:d7:24:b0:c0:b4:1b:4d:d4:
         e6:2a:10:f3:60:9f:ef:be:5e:d5:1d:fa:93:59:e5:05:a6:21:
         f7:5e:0e:7c:9b:7a:a8:06:b8:1c:b9:39:ae:3f:35:7e:9a:30:
         37:c5:e3:b7:66:66:ca:6f:af:a2:19:5e:52:c9:59:e8:ba:3c:
         cd:53:18:2b:d6:d1:82:59:4f:d0:10:bf:84:3f:80:9d:46:cc:
         34:af:ec:53:55:ea:7f:33:12:36:cb:44:33:3f:df:90:5a:b6:
         b0:80:05:2b:c1:c2:ca:23:38:c9:16:82:16:d2:0a:1f:33:9e:
         9b:f5:11:ad:ec:86:73:18:9d:c3:5e:ab:e7:14:4f:f9:78:8f:
         d1:57:04:f2:d4:16:03:7a:1e:a0:d9:ed:9e:e2:0d:ef:08:52:
         df:ac:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:49:55 2025 by rpki-client