Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          M8LQBJ5UKX+oX+eq/30uq8jgl/STUDb5+Cm79i8sF+0=
Subject key identifier:   00:1C:9D:58:E0:F0:E6:A5:5A:8D:56:E3:3D:F0:76:D3:D6:96:CD:95
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       019768BC4BAE504A8C8D6CAEF9483AFF2476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          0975
Signing time:             Fri 13 Jun 2025 10:00:59 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:59 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:59 +0000
Files and hashes:         1: DTuRKBc5DWAml25DkyA602e9E2c.roa (hash: 5dE22gWyeJTuF6kqg31h2vC+gEZF7bnxpO0rszd82sI=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: CuhLnKA1+RPcMPDnT9H/45aEJYWGy5yQ0NZ/cYgX/Ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:4b:ae:50:4a:8c:8d:6c:ae:f9:48:3a:ff:24:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: Jun 13 10:00:59 2025 GMT
            Not After : Jun 14 10:00:59 2025 GMT
        Subject: CN=001c9d58e0f0e6a55a8d56e33df076d3d696cd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:70:ff:69:6a:ed:a7:a2:76:10:f0:44:3a:66:
                    52:0b:89:dc:d1:c6:39:ee:70:8d:c1:49:a5:95:a6:
                    fe:e4:dc:99:92:04:7d:d1:08:3a:da:56:bc:70:b8:
                    8d:c6:77:11:30:1a:1b:e3:67:00:e3:59:a5:4d:87:
                    5a:10:f9:7f:a1:c1:cd:c0:69:61:27:76:4c:3f:49:
                    3a:4f:0e:ec:22:4d:10:40:5d:e7:d4:1e:58:cb:04:
                    4d:a7:bd:a5:02:8f:45:93:f4:8a:86:84:d2:60:9c:
                    1c:97:f4:4a:43:47:a8:ce:96:3c:2d:16:2b:76:30:
                    fd:d8:cf:05:d0:ec:2b:8e:5f:f6:14:0d:78:66:b9:
                    d6:16:e0:b7:2d:71:c3:88:7d:0c:3a:8c:26:ca:f5:
                    f2:5a:be:9a:31:f3:df:66:70:a3:3e:80:b3:bd:a5:
                    13:b8:f1:60:dd:19:f2:ec:e3:0e:21:f0:d3:85:14:
                    83:f7:56:63:62:18:6f:99:d1:29:10:87:d6:3a:8e:
                    88:95:ce:2e:0f:5a:fc:b7:a5:1b:22:78:91:47:87:
                    38:7d:5c:d6:31:2e:57:a8:a1:eb:cd:f7:0f:7e:35:
                    42:a6:72:99:e6:f9:00:07:4a:70:67:ac:5f:cf:f9:
                    a2:97:09:14:c9:65:df:19:59:44:db:bf:74:c0:d3:
                    73:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1C:9D:58:E0:F0:E6:A5:5A:8D:56:E3:3D:F0:76:D3:D6:96:CD:95
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:77:77:eb:4e:a8:48:f6:fb:16:03:61:a2:a1:f5:56:05:
         e5:e2:21:5a:83:91:5a:37:23:dc:f7:6b:0a:84:d5:80:7c:98:
         57:9e:23:6a:e9:92:e0:87:2e:6e:11:94:3d:37:b4:81:46:2a:
         34:52:7f:d7:b2:60:67:44:14:46:3e:a7:17:18:11:bb:f4:ea:
         2b:51:34:80:a5:bf:f3:db:fd:cd:b2:e1:4d:51:51:ee:cc:86:
         cd:1a:9d:74:74:0f:e7:a7:f6:63:6f:ff:b0:ee:41:98:49:6c:
         48:b5:00:43:05:be:c3:e6:bf:53:41:99:53:38:56:c5:12:ed:
         72:96:c4:21:74:b1:c6:e0:0e:a4:8d:1e:36:ff:d1:8b:91:80:
         1e:40:f0:2d:3d:23:c3:9a:e8:88:29:88:9f:d2:32:42:c3:96:
         f6:26:f6:b8:6a:fc:eb:18:05:6e:78:40:5f:d0:ac:2f:9d:8e:
         de:39:a6:d7:99:83:e0:c4:53:16:67:37:c9:8a:da:12:c9:e3:
         7d:ff:43:5b:dd:11:9d:04:46:b7:55:35:34:9d:1b:d7:18:6e:
         34:12:91:ea:11:7c:ee:b9:f8:7a:8d:8f:8c:5a:d6:95:da:0e:
         f1:2c:0c:95:bd:c9:93:ec:21:10:47:27:19:52:d5:2a:16:6b:
         11:b3:78:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:24 2025 by rpki-client