Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File:                     wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier:          rBed4DDqN7yb4Q+NmhSEDtPXFTrEEfZTS3ATVo/yRCM=
Subject key identifier:   9B:6B:3C:60:47:3F:E1:6E:D2:1F:B4:7B:C8:78:7F:B8:E9:97:5C:1C
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer:       /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial:       01976D3E2010EAB2D5FC0681DEF175CDAB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 07:01:17 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:17 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:17 +0000
Files and hashes:         1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: wrI+nRkjQ6t/3vEn9/DTD76x/OTD30xLMxIQQjDXv1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:20:10:ea:b2:d5:fc:06:81:de:f1:75:cd:ab:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
        Validity
            Not Before: Jun 14 07:01:17 2025 GMT
            Not After : Jun 15 07:01:17 2025 GMT
        Subject: CN=9b6b3c60473fe16ed21fb47bc8787fb8e9975c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f8:bc:51:cf:19:f5:8a:1c:6b:a3:1f:64:99:
                    ec:f0:2b:2c:4e:8b:83:30:77:55:b0:48:d4:61:75:
                    e0:f1:08:04:1d:7d:f1:28:9f:59:99:c5:78:1e:1c:
                    5f:72:81:f0:72:b4:af:9c:96:05:f2:51:b5:72:0c:
                    db:0d:de:82:0c:40:0c:81:54:f5:89:2e:8a:47:ab:
                    67:29:d8:ca:c9:99:90:05:2c:3f:85:99:44:e7:50:
                    88:bf:c6:ad:ac:0b:f6:03:d0:a4:d8:c0:d5:a0:0b:
                    b8:e1:1f:ed:ca:ca:ba:5f:be:78:dc:83:2e:b0:85:
                    ae:33:00:65:84:32:b6:66:b4:2f:99:d6:ae:5b:a1:
                    3b:ce:08:39:83:c2:b4:70:9e:cd:73:8b:f2:b4:0e:
                    68:dd:c1:63:f5:c3:9c:30:a6:6f:a3:d1:4d:18:ff:
                    73:f5:37:44:5f:00:67:7b:5b:f7:66:25:d6:53:c0:
                    6e:57:2a:3e:07:2b:73:48:a1:73:9b:dd:23:71:63:
                    0a:79:11:65:26:5e:03:0a:e0:7a:b2:45:d1:ee:43:
                    d4:ea:d2:11:b3:6b:27:4e:f8:eb:7a:b0:4f:4c:7b:
                    07:d4:24:af:94:6d:9b:45:94:c5:a7:7e:ee:c0:be:
                    6c:19:a0:14:4f:4d:56:67:11:91:9f:57:34:90:bb:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6B:3C:60:47:3F:E1:6E:D2:1F:B4:7B:C8:78:7F:B8:E9:97:5C:1C
            X509v3 Authority Key Identifier:
                keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:01:f0:69:ee:72:ad:a8:28:21:53:bd:42:54:ee:ff:c4:3e:
         3e:f3:72:81:09:61:28:a2:08:53:e4:b6:88:36:b0:9e:92:2c:
         54:7f:10:99:40:0c:e0:f6:65:ae:6c:90:2f:52:94:13:0d:88:
         c2:0d:ef:43:ee:d0:dd:53:f1:3e:6c:33:c8:61:bf:f3:30:6e:
         ca:27:3c:96:f9:29:21:6c:b8:e7:af:ee:16:ef:01:3c:30:b0:
         21:f7:83:30:90:a6:75:71:a0:93:c4:6a:07:11:97:1d:80:b8:
         d1:54:b1:b6:e4:9e:94:7a:1b:dd:c1:af:cf:4d:b0:4c:df:4e:
         57:8a:73:e7:71:71:09:b9:5b:a7:2a:ff:33:92:8c:6f:2b:af:
         51:51:25:9a:73:e4:50:e7:3c:ff:d9:48:f0:92:2a:e3:15:4b:
         de:66:86:82:e1:95:a5:f9:2f:41:9d:d0:37:3e:93:61:56:b1:
         75:2a:4c:5d:07:81:71:e4:78:c8:7f:76:7e:be:59:9f:aa:7c:
         23:e0:1d:d2:3d:e6:04:47:b5:71:7a:d4:bf:37:64:13:94:fb:
         1d:55:6b:5f:97:6c:02:00:0c:e3:be:16:eb:85:55:fe:c2:46:
         4a:11:49:c6:ca:04:e5:52:25:38:05:01:99:e6:9d:8d:c1:c3:
         43:1e:07:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:32 2025 by rpki-client