Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File:                     Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier:          aJH52L7UfpwBYBA+1JYFt3SCuvPWOKYZ7HKpuYXvuPk=
Subject key identifier:   D5:BB:C3:3F:CC:18:83:58:FA:EB:90:CF:79:CE:11:26:6E:2E:B2:F7
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer:       /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial:       01977075BDAC68FDC616D4AB5CE8D05E4383
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number:          05F0
Signing time:             Sat 14 Jun 2025 22:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:53 +0000
Files and hashes:         1: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: yDk1EwpDrQwJRp0IB2dRdoJbPNXJpBqH1U+zqkAcbVU=)
                          2: zfiw5E-qnyxqvOsxLYX9MrFyy84.roa (hash: 1/skm9ZEWKwE055qHT9FApOuyUCgE73YdLdPkqaA0Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:bd:ac:68:fd:c6:16:d4:ab:5c:e8:d0:5e:43:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
        Validity
            Not Before: Jun 14 22:00:53 2025 GMT
            Not After : Jun 15 22:00:53 2025 GMT
        Subject: CN=d5bbc33fcc188358faeb90cf79ce11266e2eb2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:6f:0c:7a:92:d4:09:db:07:4e:fc:f1:24:
                    fa:05:ac:c4:f4:33:f3:c6:74:6b:32:22:5e:5f:02:
                    62:98:a3:de:b4:31:cd:13:18:80:c3:be:31:5b:ed:
                    34:51:7e:f0:14:67:7a:fa:53:7c:56:16:d4:24:b1:
                    1b:1f:17:71:8e:d2:89:2b:a0:59:00:14:76:6a:5b:
                    b2:72:41:a3:ff:2a:35:d5:f8:14:ad:5e:ff:d5:19:
                    34:3a:0f:31:3a:b0:37:c2:3c:78:eb:2b:78:65:b0:
                    33:01:8c:16:6b:65:db:92:18:64:61:67:17:61:2b:
                    f9:79:25:4a:fb:58:4f:b9:38:8a:3a:43:8f:f6:b6:
                    a6:9d:71:88:7a:fd:b6:16:06:08:01:90:68:75:a9:
                    d9:8d:e1:51:1c:27:43:7c:43:7c:a7:c2:83:b1:43:
                    a5:38:a4:2e:04:bd:65:44:38:b5:3f:7a:57:46:be:
                    8e:cd:44:95:ac:f7:84:1d:4c:87:8f:fe:b8:d9:51:
                    83:31:0a:e5:ca:f0:a4:64:b8:9f:63:00:e4:bd:20:
                    ac:f2:df:09:e6:65:44:2d:eb:b1:fa:91:cf:77:09:
                    75:d7:8f:ed:70:e4:24:d3:d0:82:77:69:00:e2:cd:
                    09:97:52:fe:ae:a0:bb:ae:3c:32:d4:b1:df:f6:be:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BB:C3:3F:CC:18:83:58:FA:EB:90:CF:79:CE:11:26:6E:2E:B2:F7
            X509v3 Authority Key Identifier:
                keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:51:a8:07:34:8d:3d:75:46:96:d3:56:a0:5c:4b:4a:38:98:
         12:7f:b1:7d:26:8f:46:f0:d6:b6:f9:a6:53:28:a2:4b:99:df:
         7e:6b:11:7d:73:18:9a:0f:bd:a6:c5:e9:07:3e:ee:b3:92:cd:
         eb:c4:9a:c2:10:9e:79:06:2e:cd:9b:12:3c:9b:d9:64:cb:44:
         8c:7e:34:2d:30:1b:a8:9e:b4:6b:84:a7:0f:75:84:da:4b:d5:
         6d:8b:db:9e:fe:3a:ad:b3:a1:c0:94:ba:6d:bb:c4:63:6d:ed:
         9c:ce:81:4a:ad:be:da:99:7d:1f:61:a8:81:6c:89:ca:50:93:
         63:cd:e0:72:14:56:05:65:38:1c:0b:f1:d6:dd:e2:69:26:41:
         30:54:1d:d3:1b:08:cc:17:ff:f8:02:a8:89:ff:5d:73:3c:ed:
         4a:32:06:25:92:da:df:e8:28:af:a9:15:4b:9d:c1:75:97:32:
         3d:b2:10:11:0b:78:8d:78:48:f6:de:78:e5:bf:33:0d:d5:80:
         8a:34:83:aa:5b:7f:cc:80:3e:a2:b2:21:ab:64:d6:5c:b4:0f:
         24:45:84:8d:8b:89:97:14:2f:d2:27:c0:42:b5:40:6f:16:76:
         cf:d6:5f:4a:b7:83:f6:77:c0:16:fe:b7:57:c3:35:c1:8c:58:
         2c:52:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:14 2025 by rpki-client