Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File:                     wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier:          3xysvsFsCw52/K+CapYGGaItejK9XhbmOu2cGF4WPr0=
Subject key identifier:   29:3B:79:36:2E:D9:2D:57:E3:5D:52:C0:5B:99:DF:1D:90:FF:D9:4C
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer:       /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial:       019771F674D80ACEA001A3B89A8A600403E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number:          0E65
Signing time:             Sun 15 Jun 2025 05:01:06 +0000
Manifest this update:     Sun 15 Jun 2025 05:01:06 +0000
Manifest next update:     Mon 16 Jun 2025 05:01:06 +0000
Files and hashes:         1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
                          2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: v8Ct8t2k+s2hONygFPwy0DmcP+5bgE2UpCHeox9x+hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:74:d8:0a:ce:a0:01:a3:b8:9a:8a:60:04:03:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
        Validity
            Not Before: Jun 15 05:01:06 2025 GMT
            Not After : Jun 16 05:01:06 2025 GMT
        Subject: CN=293b79362ed92d57e35d52c05b99df1d90ffd94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:92:72:e5:a6:1e:0c:4b:c6:1b:2b:af:7f:
                    7f:9c:48:2b:7b:74:a3:6e:e3:04:05:04:af:7d:0a:
                    61:0e:93:94:79:76:92:9d:b4:89:c5:b0:e1:13:50:
                    68:bb:fa:cf:16:7f:76:31:9d:b1:8e:2b:fb:db:75:
                    3b:26:07:f6:f2:2d:43:80:0f:7a:5c:54:72:fd:0b:
                    15:8a:e6:c8:53:cd:00:39:99:f6:ec:7c:be:b5:b6:
                    aa:a3:a5:73:9f:ce:1d:a9:f9:0d:ef:ef:e7:23:ef:
                    38:e1:f7:9d:f2:fc:ad:67:5d:7c:dd:8f:eb:82:ab:
                    48:bf:34:ca:47:49:f9:10:88:8c:85:c4:1f:70:29:
                    a7:ea:ff:b4:14:20:83:28:81:7a:c7:68:b9:0d:19:
                    f8:f3:a4:ee:0b:4a:b1:f7:38:a9:2a:58:9a:8f:2d:
                    b5:0a:23:84:0c:2d:32:bb:ae:ba:a0:a8:fe:a2:bf:
                    59:7c:a5:c3:e4:aa:fb:7e:46:e5:bc:e6:84:b9:45:
                    fd:ef:7c:99:f1:8b:dc:98:1b:6c:60:f1:27:6a:71:
                    a9:8b:9d:e2:64:4a:93:b9:0f:ed:fe:43:e0:cb:8b:
                    8c:9c:01:ac:eb:64:08:68:9c:77:9e:5a:76:79:cc:
                    4b:5f:75:f5:4e:5e:ec:5f:ef:ad:98:7a:72:01:f3:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3B:79:36:2E:D9:2D:57:E3:5D:52:C0:5B:99:DF:1D:90:FF:D9:4C
            X509v3 Authority Key Identifier:
                keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:21:b0:f3:c6:ff:78:23:84:1f:1c:8a:52:f9:77:fc:a2:87:
         4d:b5:9d:95:ed:e4:61:ba:78:9b:fd:6c:86:a1:db:ff:e3:11:
         de:20:53:45:00:89:64:df:ed:56:65:21:46:ed:2e:68:7b:cd:
         ad:3a:ba:5a:54:15:45:69:48:6f:29:b1:a1:2e:b1:ee:30:36:
         37:59:4a:a4:63:9f:31:32:1f:ff:b1:a4:4c:ec:4f:16:45:72:
         8a:dd:62:05:e3:71:00:6a:80:c7:74:b4:be:ce:08:2d:3f:02:
         ae:f3:98:9f:bd:5a:b0:d3:83:66:bc:cd:85:f1:97:d3:10:83:
         12:af:df:89:fb:14:60:1e:19:42:b4:52:df:33:48:e9:0b:dd:
         45:15:3d:d1:31:42:0f:9e:d1:79:cd:1f:d9:2a:c0:20:37:35:
         80:36:87:ed:74:26:b5:0a:8e:98:7e:09:51:5a:de:22:a4:97:
         ab:c6:8a:1e:8e:87:6a:ed:cc:47:2c:ee:bd:4b:32:1b:34:ec:
         ad:9d:8c:dc:41:ae:4c:59:0d:35:d6:5e:ca:f4:e9:fb:aa:22:
         5c:f7:98:37:39:bf:23:64:e6:df:62:73:24:33:c0:5e:40:b7:
         e1:ff:3d:1a:71:ef:a6:65:8e:94:86:ae:15:aa:ce:28:e9:32:
         87:d9:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:01 2025 by rpki-client