Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          aQvMEq5vJg/zRFUROD8uCgahaWR1Zc+0jhiMR98hwWk=
Subject key identifier:   E1:0D:A3:34:81:51:81:C1:9B:C4:1C:F1:B5:E1:45:D0:1A:36:9E:15
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       019786617766C4908354F4203DB69828BD70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          1385
Signing time:             Thu 19 Jun 2025 04:10:23 +0000
Manifest this update:     Thu 19 Jun 2025 04:10:23 +0000
Manifest next update:     Fri 20 Jun 2025 04:10:23 +0000
Files and hashes:         1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=)
                          2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=)
                          3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: 6DQR24eDyYuJhRiv0gjNwIeOB/xHt0/dc7FwRAFzHOU=)
                          4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=)
                          5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=)
                          6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 04:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:61:77:66:c4:90:83:54:f4:20:3d:b6:98:28:bd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Jun 19 04:10:23 2025 GMT
            Not After : Jun 20 04:10:23 2025 GMT
        Subject: CN=e10da334815181c19bc41cf1b5e145d01a369e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:f0:f0:cc:be:c0:e5:5e:4c:21:bc:c0:66:
                    f3:9c:93:f1:3d:f6:61:e6:8b:44:5b:7e:10:14:f6:
                    69:43:a5:cb:5f:37:a6:40:47:9f:ad:cc:1c:92:e5:
                    9c:dd:c2:35:d0:d1:6e:ec:33:ee:14:3e:01:dc:fc:
                    ff:fc:50:70:c8:5e:b2:58:27:b7:28:ea:19:fb:1e:
                    d8:24:2b:3d:66:40:e5:0c:ac:53:19:77:b9:a4:0c:
                    9f:d1:ef:e9:2f:74:5b:e8:f5:01:77:cc:ba:df:e2:
                    b7:d2:20:f2:bd:94:07:5e:f8:ea:30:19:60:38:f2:
                    31:c6:38:1f:d1:fa:8e:64:87:ff:69:f2:37:75:5f:
                    d0:47:80:bc:cc:5a:a2:26:3b:4c:6e:a4:f5:23:d5:
                    48:f0:69:3c:f6:a2:fe:78:4e:1d:49:46:0d:2f:42:
                    96:d5:61:b9:a8:b5:c3:f1:5a:2d:03:3f:17:8f:c1:
                    ed:4f:b5:e0:f1:6c:3a:72:3a:24:07:96:b1:91:23:
                    a6:7e:82:05:50:32:7a:fa:fe:44:cd:01:02:ee:b5:
                    12:5a:96:5d:ad:e2:c6:a7:f1:1a:79:29:60:04:5d:
                    88:bd:66:4c:9b:70:ae:e6:df:9d:15:35:ab:3b:01:
                    3a:08:63:5a:90:a2:50:d1:d6:dd:fd:f4:09:40:73:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0D:A3:34:81:51:81:C1:9B:C4:1C:F1:B5:E1:45:D0:1A:36:9E:15
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:06:19:f0:13:88:0d:f0:12:d4:f3:bb:82:f7:67:53:e9:
         3b:24:c0:29:d7:37:2a:2d:8b:4c:05:3a:60:b1:47:11:37:24:
         ae:4e:2b:48:6d:a3:d7:a9:c6:2c:43:6b:af:2a:98:ff:7d:74:
         51:d9:13:03:56:9e:e3:51:39:20:d9:5b:59:28:0a:f0:03:aa:
         35:71:aa:b2:d8:bc:53:24:ff:51:44:e3:d1:b5:be:e5:ef:cb:
         49:53:90:2a:8e:09:34:9f:64:46:cd:3d:63:21:35:6d:b6:e6:
         f7:69:d2:b8:33:96:38:4e:11:03:84:14:2a:60:f9:f6:7b:14:
         34:97:f8:02:8a:f4:40:10:7c:34:a1:c1:e4:27:df:3a:e5:e6:
         1c:d0:1e:62:7d:4e:78:2f:f5:0b:10:de:1d:06:27:a9:26:8e:
         9a:54:55:48:a1:b3:d5:3a:72:1f:ff:95:01:5e:75:83:a1:ff:
         e4:35:18:9e:43:c2:68:5f:8c:1b:db:7a:bc:52:01:ab:c8:ec:
         6a:c3:71:47:4b:4f:3a:d1:02:bf:4f:2e:ef:ca:4d:1c:c1:39:
         7c:03:a9:12:29:57:02:55:17:e0:b9:de:ea:3a:28:08:20:59:
         ea:db:7e:0e:8e:95:ab:97:a8:08:99:63:af:e9:e8:15:ec:04:
         d1:d4:ed:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:28:25 2025 by rpki-client