Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File:                     wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier:          pQx5NuDtCt5YlWQEuvgZHZLbJshPOiOtqRufQgPVO7E=
Subject key identifier:   35:08:D0:71:86:A2:CB:5A:0E:01:57:28:01:E6:4A:01:1D:D9:7A:E9
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer:       /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial:       01976D3DA50D62A8AABC90A9363A7212B762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number:          0805
Signing time:             Sat 14 Jun 2025 07:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:45 +0000
Files and hashes:         1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: 4g6D+xw0Iz+1jETuZhBmit1OfqRFBOEkYo3qiMTn5+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:a5:0d:62:a8:aa:bc:90:a9:36:3a:72:12:b7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
        Validity
            Not Before: Jun 14 07:00:45 2025 GMT
            Not After : Jun 15 07:00:45 2025 GMT
        Subject: CN=3508d07186a2cb5a0e01572801e64a011dd97ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:b2:25:27:d2:a1:14:83:94:14:ea:dc:54:
                    15:2e:a2:ab:24:c2:0c:d1:d1:55:8c:35:ff:66:84:
                    48:7a:96:c3:e8:a9:7d:0c:67:ee:d5:9c:13:5a:0f:
                    81:e9:61:dd:0e:94:b4:96:6c:50:25:d0:b9:42:d6:
                    5e:ab:da:16:b0:6c:9d:ed:28:7b:f6:74:b8:64:f2:
                    07:3e:46:b9:db:ab:36:19:a8:c2:68:0c:ad:7d:3d:
                    ba:e0:9f:a7:ac:18:29:80:cf:de:42:54:cc:48:45:
                    86:5b:45:9f:6f:3e:73:71:f1:cc:e8:de:39:f7:c0:
                    28:1e:2b:3b:bd:bd:c4:c9:3e:f4:b9:5c:f6:93:16:
                    03:0e:7a:b9:b3:8f:33:e7:bf:5b:9d:57:9b:91:26:
                    4e:d0:db:94:e7:df:80:98:ef:29:e1:43:00:60:45:
                    ca:2b:f8:9a:2b:74:c8:8e:fd:b2:86:73:ae:b4:6d:
                    85:ee:56:9a:ce:f5:36:1f:8b:b5:f3:f6:74:6b:77:
                    30:5a:87:d0:a1:8c:64:ba:e3:1a:dc:64:89:8f:9f:
                    c7:fc:39:ef:f6:20:ec:16:7f:e4:d9:f7:20:26:d0:
                    73:1d:3c:c9:25:9f:51:e9:9e:15:09:c3:c1:ff:fb:
                    7f:42:57:22:a4:9b:c0:56:78:16:34:46:f9:3c:5c:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:08:D0:71:86:A2:CB:5A:0E:01:57:28:01:E6:4A:01:1D:D9:7A:E9
            X509v3 Authority Key Identifier:
                keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:68:f9:5b:0d:35:c8:84:5b:30:cb:c4:fe:96:17:5f:f2:2b:
         c4:f8:dc:19:f4:5c:f5:84:81:86:d6:ff:4b:99:92:16:7a:fc:
         32:9d:cd:c2:3f:46:7e:84:d6:f9:4e:66:1c:4f:40:50:64:2e:
         e3:9b:94:79:c5:d6:40:09:73:e5:2a:0f:a9:bc:82:29:22:85:
         96:47:65:33:88:44:9b:e0:e5:d3:18:87:c6:d9:b9:e5:d8:66:
         73:cb:90:b6:16:f2:31:ad:94:f1:f8:5d:25:be:84:15:49:9c:
         d3:d9:7d:15:ec:b9:01:9d:db:2e:5c:1c:ac:b7:31:6b:4a:3d:
         22:02:78:bd:23:03:64:1e:93:aa:72:8b:5b:49:df:65:e9:a6:
         ca:6c:48:fb:05:38:1e:1e:f9:6c:56:8b:bc:49:01:29:b3:65:
         e1:39:d7:77:6b:fc:25:3c:ef:21:e3:b0:0d:ce:6c:cf:96:32:
         19:c8:94:13:b2:75:cc:0f:5d:de:31:3e:cf:cf:de:c6:1c:c4:
         b4:48:95:2f:9e:95:b0:9a:7f:44:1b:28:83:d9:3d:d4:9a:a2:
         cc:4b:cc:e4:08:6c:92:29:0c:25:4b:c9:e1:ba:71:a7:6c:ab:
         de:e3:58:0e:ee:85:82:bd:91:a0:a5:48:f2:13:6d:66:b5:81:
         72:1f:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:36 2025 by rpki-client