Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
File:                     wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json)
Hash identifier:          1mnWUXSmSDxDlI9XKjorvNaX2rVm4vH/K5UphWv1oKo=
Subject key identifier:   AD:E5:8A:7E:18:BD:6B:1B:47:4A:75:11:E7:84:64:B6:67:C7:9F:D9
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Certificate issuer:       /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial:       01976F997A745D7A26691021004F57B02F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
Manifest number:          037E
Signing time:             Sat 14 Jun 2025 18:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:18 +0000
Files and hashes:         1: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (hash: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=)
                          2: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: JSGtPvO9FshJU81oUOkC9nnxzvGqkw8OSLwKlZb3OaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:7a:74:5d:7a:26:69:10:21:00:4f:57:b0:2f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
        Validity
            Not Before: Jun 14 18:00:18 2025 GMT
            Not After : Jun 15 18:00:18 2025 GMT
        Subject: CN=ade58a7e18bd6b1b474a7511e78464b667c79fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:82:74:44:1d:f0:95:3c:34:dc:37:95:6f:
                    d9:48:51:7e:24:81:13:9b:e2:93:d6:1b:00:c2:ad:
                    59:18:9f:55:3f:4a:f0:1b:ba:97:48:8a:ba:5c:e1:
                    00:a2:56:58:5f:63:34:70:ab:97:80:59:4c:40:a6:
                    be:27:df:ed:ec:2e:eb:35:d4:b5:fd:9f:0a:b0:e0:
                    c3:95:ee:8b:88:de:0e:cb:3a:7d:be:e0:2b:6c:56:
                    b3:6d:fb:0c:4c:5b:7d:bb:ba:68:bd:94:56:36:d4:
                    08:7c:80:a2:db:51:00:80:79:57:13:fa:c5:e3:ba:
                    03:ae:15:cf:2c:19:dd:77:d5:df:dc:07:fb:70:f8:
                    12:4e:14:20:30:c3:53:a2:34:b6:07:51:92:91:1a:
                    6a:f7:58:43:d9:d2:fb:ed:61:61:a2:10:ab:9d:3e:
                    81:d4:ee:22:b5:76:67:b2:7a:56:7f:7c:c3:a2:87:
                    98:59:45:dc:75:54:fb:b1:59:99:70:dc:0e:85:92:
                    a9:47:15:b9:cb:7c:86:d2:0f:9d:3e:00:c8:81:ca:
                    3c:1b:6a:ce:99:37:c3:c1:10:9c:d4:22:d6:1a:69:
                    2e:3b:5c:62:0f:5c:eb:0c:1d:f0:22:d6:31:a3:86:
                    29:6c:02:9c:67:e8:42:f5:0a:dc:c3:6d:5c:2b:5c:
                    11:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E5:8A:7E:18:BD:6B:1B:47:4A:75:11:E7:84:64:B6:67:C7:9F:D9
            X509v3 Authority Key Identifier:
                keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:5d:af:12:bb:96:72:c2:0b:1f:04:94:ae:c6:11:20:cb:
         52:8e:a6:73:76:b7:d7:58:4b:35:12:47:82:27:cf:2a:4d:a8:
         02:3f:e1:bf:54:2e:87:12:4b:96:9d:26:16:2e:d0:df:5e:31:
         0e:ff:1d:e6:f2:c1:71:42:1e:95:1f:71:3e:a5:d6:c5:d2:46:
         ed:b3:9c:e9:e0:38:9a:80:1c:8a:f5:88:8e:ee:27:e9:fb:df:
         bc:03:9e:20:d4:0d:6f:da:10:dc:25:85:e9:64:e5:e5:5f:b2:
         0b:96:d5:03:d5:2d:30:c3:fc:df:8a:0a:74:64:12:80:c6:17:
         e0:89:aa:50:a1:ad:fb:8f:52:2a:34:ed:65:45:59:5e:f0:67:
         0d:9e:68:e8:73:b0:2a:0b:97:13:13:df:f6:29:58:14:74:ad:
         54:80:76:6a:80:ba:f1:b3:bd:38:af:cb:96:41:ae:f3:1d:0e:
         25:6f:d4:8b:31:72:86:47:54:0c:40:d0:de:4a:9d:44:db:57:
         d9:a7:d0:ef:52:ab:fa:aa:8c:23:4b:38:c3:50:95:8e:7b:d1:
         14:51:78:ea:d6:ef:cf:ee:18:19:09:2f:62:49:88:78:92:c3:
         0c:49:30:cb:5a:b7:e6:c3:5c:e9:11:a2:3b:3f:ad:20:e8:05:
         78:b5:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:10:19 2025 by rpki-client