Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File:                     WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier:          zZNDBKdYD8kBpihUDxe+en0tK3Wq1mgdN81fywJFmnM=
Subject key identifier:   0B:5F:85:2D:35:D0:DE:06:28:D2:A3:2F:62:53:5C:57:46:58:00:E7
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer:       /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial:       01976D068BB68310E65166EB88C99AAA6055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number:          023C
Signing time:             Sat 14 Jun 2025 06:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:34 +0000
Files and hashes:         1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=)
                          2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: SsDcp4jKkCQuHkfrg9HauzhkNlOMWMsLjRpQKISFat8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:8b:b6:83:10:e6:51:66:eb:88:c9:9a:aa:60:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
        Validity
            Not Before: Jun 14 06:00:34 2025 GMT
            Not After : Jun 15 06:00:34 2025 GMT
        Subject: CN=0b5f852d35d0de0628d2a32f62535c57465800e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:4a:af:22:11:a6:14:5d:54:30:06:4f:cc:
                    2c:14:da:ee:a6:2f:1c:64:58:f2:53:b8:c2:f4:72:
                    d8:fb:bd:f0:38:1f:96:2d:94:a6:95:83:ac:e0:50:
                    f1:a2:c7:f4:e8:c1:90:19:7e:52:b9:ad:9f:80:c7:
                    c4:30:01:3c:11:b0:6a:21:b4:c6:b6:f1:36:88:2d:
                    ea:47:10:0c:34:58:cd:81:fc:0a:56:fd:e2:33:d1:
                    e8:2c:e9:a2:00:9a:27:be:05:fc:eb:ae:eb:fe:d0:
                    8f:c8:87:d9:17:24:60:80:0f:e5:0e:3a:19:ea:c2:
                    3c:d9:aa:eb:1d:fe:f1:a8:35:05:c1:7d:2c:5e:bd:
                    84:7f:79:05:72:34:c4:34:94:46:8f:08:eb:e0:bf:
                    db:8f:dd:ab:11:3c:05:3a:ec:41:0e:81:b2:ad:b0:
                    b0:c2:62:83:e6:29:40:e4:28:31:71:92:ca:b3:da:
                    ac:27:d0:95:17:e7:4e:8f:38:ec:5e:0b:ce:9e:67:
                    c0:a6:1e:3b:6d:62:71:f6:19:85:62:23:1c:0c:d3:
                    22:22:6c:11:8d:05:2a:b2:25:44:ce:d8:62:f7:3f:
                    d1:c7:1d:e7:5a:92:d8:07:66:d0:62:e2:7b:18:d0:
                    47:a7:db:57:ed:05:cf:34:17:00:8d:ab:cd:91:3a:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5F:85:2D:35:D0:DE:06:28:D2:A3:2F:62:53:5C:57:46:58:00:E7
            X509v3 Authority Key Identifier:
                keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c4:91:3f:52:f6:e3:7e:4e:1d:40:09:8f:f4:3c:3c:aa:10:
         f6:7c:2e:b7:ea:af:fe:65:f4:ee:48:85:24:6f:5c:e2:45:09:
         4a:2b:a7:ef:42:98:12:52:db:64:c2:dd:ab:ae:78:9b:33:64:
         a3:04:7d:2b:bd:63:90:ea:8f:46:e0:48:bb:7d:10:0e:f3:f4:
         a6:25:19:99:90:47:0d:da:ce:13:09:35:c4:97:f7:e0:ac:7d:
         b2:2b:8b:f9:04:04:c7:e6:52:30:9f:30:37:6b:51:fe:f5:1b:
         fb:d4:9b:09:7c:34:a1:f7:75:b2:f7:32:b7:14:83:3a:cc:be:
         7d:16:39:f3:9a:1d:4e:aa:58:6c:37:61:15:11:cf:ff:4e:ab:
         6d:07:b8:46:d7:99:35:34:bf:47:92:83:bf:e5:53:31:b3:b8:
         71:41:f6:bd:0d:4a:72:a2:d9:ae:b1:d5:e2:97:c7:43:b4:5d:
         1d:c7:15:52:c4:a1:57:e4:06:6c:0d:02:95:f3:41:30:38:aa:
         73:c7:1d:4e:fc:c7:74:4a:73:72:d5:da:50:b6:ca:d2:d8:89:
         0f:b1:f6:3e:28:f5:3d:bf:76:7f:50:67:cc:b2:e4:77:db:0c:
         6e:02:20:b8:63:f3:44:61:25:a8:ba:e8:c0:01:1f:17:cb:c9:
         48:3e:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:16:10 2025 by rpki-client