Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
File:                     wmxJkkbYEuUuy6e39V4m7a71NG4.mft (raw, json)
Hash identifier:          MVO65r7luqVXCQvuuVVvdMXGmnc/1Ao4ZcPkbS/lf9Q=
Subject key identifier:   DC:EC:21:CC:6B:3F:76:CD:33:28:58:76:FD:7C:46:77:2C:C8:7B:AD
Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E
Certificate issuer:       /CN=c26c499246d812e52ecba7b7f55e26edaef5346e
Certificate serial:       01978C5A752C729603EA106AA4C206DB4A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
Manifest number:          0883
Signing time:             Fri 20 Jun 2025 08:00:27 +0000
Manifest this update:     Fri 20 Jun 2025 08:00:27 +0000
Manifest next update:     Sat 21 Jun 2025 08:00:27 +0000
Files and hashes:         1: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (hash: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=)
                          2: wmxJkkbYEuUuy6e39V4m7a71NG4.crl (hash: 6jTSuyc1Dc9tetDm5jDvOK8dwVHPDn7WiLmXHrKthH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Jun 2025 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8c:5a:75:2c:72:96:03:ea:10:6a:a4:c2:06:db:4a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e
        Validity
            Not Before: Jun 20 08:00:27 2025 GMT
            Not After : Jun 21 08:00:27 2025 GMT
        Subject: CN=dcec21cc6b3f76cd33285876fd7c46772cc87bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:dd:d7:f5:ef:ea:38:c8:07:e9:56:05:c0:
                    f5:02:dd:98:37:4f:90:88:26:dd:9e:3e:4c:91:44:
                    22:6e:db:48:45:95:ba:b5:57:e6:76:39:10:7a:e7:
                    c2:e5:cc:f6:73:f0:33:ed:c6:15:e3:d2:6d:49:d9:
                    7c:d6:fe:ae:4e:ae:2b:3b:14:02:01:d7:8a:38:2e:
                    85:c8:9b:7d:f1:bc:6d:2d:61:9f:d7:b5:d8:d8:40:
                    fe:55:05:2c:dc:76:ec:90:87:6c:c4:ae:e5:92:c5:
                    50:4b:2a:05:f3:97:9b:f2:1e:06:76:b2:aa:f0:f1:
                    83:9f:ce:17:b9:48:f9:78:07:e2:63:77:69:3d:f7:
                    e5:9f:18:1b:4e:f2:03:98:27:2e:98:1b:63:ae:2c:
                    b2:81:39:e9:7e:5b:2a:98:c5:4d:13:6e:67:33:df:
                    87:48:c5:07:6d:a5:74:6f:d2:0e:7f:90:87:21:61:
                    9c:0e:8f:f8:43:2f:d3:f6:9f:12:b4:88:eb:ee:74:
                    72:d1:af:58:5c:f1:9d:1c:af:ae:8a:19:61:5a:81:
                    f6:bc:44:22:50:8d:cf:5c:f0:09:1b:45:50:c9:57:
                    71:11:04:5e:d7:88:66:96:7b:79:d2:b9:96:70:2c:
                    04:43:4c:68:59:ec:d6:d7:03:98:bd:ad:1c:70:05:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EC:21:CC:6B:3F:76:CD:33:28:58:76:FD:7C:46:77:2C:C8:7B:AD
            X509v3 Authority Key Identifier:
                keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b3:c3:59:43:dc:67:87:07:16:bf:f5:92:57:05:e5:2a:6f:
         23:8e:d5:16:03:1f:7a:a4:92:00:48:ae:c5:66:e0:29:fa:cc:
         03:c5:be:47:03:b0:0d:4a:6b:7b:36:db:cc:8e:35:c9:1b:c2:
         41:fa:18:ab:c9:f3:6b:78:44:1e:62:77:c0:25:1e:41:4e:60:
         4a:e2:00:a4:cc:38:20:68:a7:6a:07:11:71:05:ec:ec:c6:f0:
         66:79:1d:ea:cf:83:40:63:96:9a:23:a0:96:69:dc:1a:fa:c9:
         b9:71:cc:c7:62:15:95:45:00:f8:12:71:34:66:f1:87:04:42:
         69:c3:b4:cb:ab:4a:f2:50:4d:de:78:0a:a5:ec:d3:49:e5:ed:
         d9:18:cc:9c:56:fb:cb:12:77:9a:27:b4:16:8f:43:b5:07:fd:
         01:00:dc:87:48:fe:06:be:60:94:0a:6e:db:4a:2f:9f:3b:d0:
         34:3b:c1:5d:b2:e9:aa:c3:62:15:8c:10:d1:00:4f:85:8d:b2:
         24:cb:b8:1f:9b:af:ba:ce:15:cd:42:d5:80:e7:ff:ad:bf:b1:
         3d:c2:71:7a:89:40:70:39:95:6c:0c:bd:52:32:15:d5:6c:5f:
         21:4b:99:51:89:8f:53:a8:58:e8:5e:ac:9d:06:02:7a:5b:87:
         1b:24:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:33:20 2025 by rpki-client