Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
File:                     WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft (raw, json)
Hash identifier:          qrWAqrainL7UKUx8syEyuConyPzS6VRppUPB6Nh3Gkw=
Subject key identifier:   76:CC:DA:6C:1D:CE:6C:A2:5A:04:5C:2B:5F:01:9C:8C:81:DF:5B:63
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Certificate issuer:       /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial:       019783C5FF2B352B9A856D05D98C52E2B883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
Manifest number:          159B
Signing time:             Wed 18 Jun 2025 16:01:20 +0000
Manifest this update:     Wed 18 Jun 2025 16:01:20 +0000
Manifest next update:     Thu 19 Jun 2025 16:01:20 +0000
Files and hashes:         1: WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl (hash: kIwcyv/bjrLqlUBtUQ1maXG+5Vg+SeMBAKWxYEUAROs=)
                          2: aiBw7mg-7iWQbjUD1MChAVL_Coo.roa (hash: KeivAY3qo56HW2nMzFcSP1tB4CHei3XM2+AGnhTVVP0=)
                          3: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (hash: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:c5:ff:2b:35:2b:9a:85:6d:05:d9:8c:52:e2:b8:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
        Validity
            Not Before: Jun 18 16:01:20 2025 GMT
            Not After : Jun 19 16:01:20 2025 GMT
        Subject: CN=76ccda6c1dce6ca25a045c2b5f019c8c81df5b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5b:84:5b:fd:36:69:4d:48:20:16:11:af:09:
                    19:7d:6e:2a:e3:78:1a:8e:3d:f6:6d:cb:36:45:d1:
                    6a:ab:43:9a:bc:1b:82:5b:87:30:fc:30:ed:d5:43:
                    ec:3b:68:50:d7:71:a6:06:fd:6d:f9:06:ad:04:07:
                    08:98:6a:43:7f:83:3b:e7:4c:51:49:cc:61:26:66:
                    2a:e7:55:fc:a9:f7:54:78:3f:78:b9:db:4b:4a:24:
                    c6:78:33:18:5e:01:95:4f:54:e2:59:99:79:92:e0:
                    ae:50:74:2f:09:d4:d2:a2:d4:11:02:89:18:41:ea:
                    15:08:f9:1a:23:eb:a6:08:63:54:ed:78:25:94:58:
                    16:ae:2c:08:c7:3e:83:ae:69:4c:49:94:91:a0:2e:
                    93:95:c0:80:fc:87:34:63:be:dc:a0:51:16:b3:23:
                    bf:3a:e2:16:be:0f:03:ce:46:f9:1f:36:49:83:7a:
                    35:80:68:cd:aa:88:ef:23:d4:00:e0:19:df:3f:a5:
                    27:64:e0:c1:ad:15:3a:a4:7b:ad:d8:55:1f:d3:05:
                    60:32:6a:e9:47:28:28:3d:74:cf:7d:fb:df:19:f4:
                    4a:39:d6:ec:51:e3:65:bc:f4:3b:6e:a8:fa:a2:90:
                    f0:87:33:03:02:8b:0b:0b:24:0d:00:41:1e:eb:bd:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CC:DA:6C:1D:CE:6C:A2:5A:04:5C:2B:5F:01:9C:8C:81:DF:5B:63
            X509v3 Authority Key Identifier:
                keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:47:3e:cd:34:be:df:63:c2:f5:d1:9f:9e:31:a3:4c:f0:ec:
         4e:a3:03:c6:48:03:4c:f6:8c:fb:76:c0:3e:f9:7e:6b:b8:11:
         00:bd:98:de:31:67:e1:bc:33:76:93:90:3b:63:3d:35:06:32:
         79:ce:59:3b:f3:36:01:3f:49:7f:dd:da:bd:33:ec:e9:36:39:
         c8:a7:26:30:73:4b:6f:79:a7:ac:83:f2:56:4e:86:65:f7:a9:
         dc:cd:13:58:23:bb:aa:6a:6e:d8:bc:4d:d1:66:2f:30:fd:7f:
         ad:e2:18:0e:a5:19:e7:c5:65:5e:56:6e:0d:76:d3:db:d2:1a:
         99:32:2f:b7:8d:d2:7c:91:08:aa:64:b3:51:2e:6d:bf:4b:e0:
         81:a6:81:e3:2d:66:97:29:65:77:40:c6:4f:3c:b5:6b:5d:0b:
         67:ad:92:5c:a5:8e:9f:f8:a5:37:27:d6:af:bd:32:3e:39:1f:
         70:c2:ec:46:36:51:11:ed:19:0e:6d:f6:cf:84:2d:fe:32:77:
         36:2b:01:77:55:fb:9b:2c:10:db:6d:27:0a:ec:c1:5e:55:4b:
         69:63:83:05:6f:d1:20:0b:12:3c:5b:af:ad:e9:30:5a:29:7a:
         5e:bf:27:6c:dd:51:57:b9:16:8b:30:e0:3a:64:54:c4:5b:26:
         c6:52:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:55:30 2025 by rpki-client