Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File:                     wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier:          X2U+GQCia6uO6aXmcfT8FWfAzVqThdJu1dI/S581PSk=
Subject key identifier:   82:2D:F7:60:B9:C2:C1:A1:52:E6:D4:D2:B6:FE:08:7D:66:69:C2:1B
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer:       /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial:       01976CCFAB3FDCE007B4A409F48E380EE5AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number:          0504
Signing time:             Sat 14 Jun 2025 05:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:38 +0000
Files and hashes:         1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
                          2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: 45+XNZ0ZL+szbGt13L1GW1OonoubLIOYeJpTdLOJ3gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:ab:3f:dc:e0:07:b4:a4:09:f4:8e:38:0e:e5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
        Validity
            Not Before: Jun 14 05:00:38 2025 GMT
            Not After : Jun 15 05:00:38 2025 GMT
        Subject: CN=822df760b9c2c1a152e6d4d2b6fe087d6669c21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:16:2c:8b:45:18:ee:5f:ca:35:4a:54:e9:dc:
                    88:cf:02:14:52:e9:e0:95:6a:71:4a:f1:4a:0c:9b:
                    94:0a:ea:0a:f5:5a:c1:af:ea:33:1f:37:62:b7:5d:
                    6d:e7:84:fc:4c:45:b7:44:9d:c4:90:ee:8f:40:fc:
                    c7:1d:91:ab:e9:b0:21:9e:0a:6d:ab:41:c2:ed:d6:
                    76:e6:4b:19:2c:19:73:5f:98:3a:d2:c9:c4:29:a5:
                    ea:2f:e4:1f:9d:55:19:3c:56:e7:cd:5b:9e:7d:db:
                    f7:9e:dd:69:e0:81:f8:69:16:8d:67:d8:ad:a9:f6:
                    bc:42:fd:e0:02:12:db:0f:68:2f:b2:e4:ba:6c:44:
                    a2:91:8c:a5:b5:a7:82:8f:9d:5a:9a:bc:13:99:2b:
                    6f:d7:29:2e:d7:7f:a1:2a:50:b2:29:8d:83:20:ef:
                    cc:c9:49:4a:21:1d:27:42:15:0c:a3:46:7a:ab:e7:
                    bb:fe:0b:29:fc:90:8c:a9:a9:93:89:d4:1a:1c:b0:
                    6f:d5:7d:18:4f:b6:37:c7:1b:c6:16:0f:37:6b:61:
                    92:3e:55:61:65:b6:17:0e:75:e7:e7:96:95:be:15:
                    ac:24:d4:3d:d2:18:85:7d:75:ef:e3:4d:5f:3a:36:
                    e3:2f:2c:c4:b0:b5:a8:f6:89:a6:b7:f6:4c:b4:54:
                    50:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2D:F7:60:B9:C2:C1:A1:52:E6:D4:D2:B6:FE:08:7D:66:69:C2:1B
            X509v3 Authority Key Identifier:
                keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:70:20:29:0f:48:8d:dd:a0:0f:e8:9d:30:7b:8a:22:b8:c0:
         0d:ef:36:be:0d:cb:9c:82:be:fc:20:31:50:ef:49:2a:4a:4e:
         29:0d:33:99:99:66:bd:5d:2f:c6:6c:e1:6b:58:47:b1:fd:14:
         3a:24:8a:93:16:5f:54:9d:82:82:b7:41:1a:a8:a8:33:ff:33:
         99:4c:27:06:80:9f:07:8e:0a:47:58:17:62:69:d0:d3:15:2b:
         0c:e9:c1:3f:b8:ae:48:4a:66:14:d0:af:30:9f:03:59:9e:8a:
         99:04:f9:17:b3:10:4f:d8:37:da:bf:a7:43:c7:d7:b4:09:ec:
         6f:40:e3:0e:31:b3:04:61:8d:91:6d:3e:a4:41:d6:59:20:4a:
         60:9c:f7:14:e5:5d:0a:d9:14:bd:60:b6:b9:ac:ec:30:b1:5e:
         40:6e:9c:e2:51:22:96:cd:1b:66:56:0d:73:8e:5a:d5:b2:79:
         fd:9c:15:28:f1:b2:cc:16:69:11:6d:bb:da:b8:76:d4:5a:01:
         b2:f0:6d:78:ce:29:25:fb:ca:47:d0:90:7c:da:16:94:d5:8c:
         ab:a7:58:45:60:f1:b7:e5:2a:cc:b0:0c:74:b5:20:47:3a:0f:
         00:c4:2e:a1:f9:5a:d0:13:96:ba:00:2e:a3:d5:e9:7e:37:e0:
         66:95:81:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz6s/3OAHtKQJ9I44DuWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjBhYmU2ODg3NTQ1MTBiYzk2YzdmMWIxNTk0OTI0Njlm
ZGE2YTcwHhcNMjUwNjE0MDUwMDM4WhcNMjUwNjE1MDUwMDM4WjAzMTEwLwYDVQQD
Eyg4MjJkZjc2MGI5YzJjMWExNTJlNmQ0ZDJiNmZlMDg3ZDY2NjljMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxYsi0UY7l/KNUpU6dyIzwIUUung
lWpxSvFKDJuUCuoK9VrBr+ozHzdit11t54T8TEW3RJ3EkO6PQPzHHZGr6bAhngpt
q0HC7dZ25ksZLBlzX5g60snEKaXqL+QfnVUZPFbnzVuefdv3nt1p4IH4aRaNZ9it
qfa8Qv3gAhLbD2gvsuS6bESikYyltaeCj51amrwTmStv1yku13+hKlCyKY2DIO/M
yUlKIR0nQhUMo0Z6q+e7/gsp/JCMqamTidQaHLBv1X0YT7Y3xxvGFg83a2GSPlVh
ZbYXDnXn55aVvhWsJNQ90hiFfXXv401fOjbjLyzEsLWo9ommt/ZMtFRQ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIt92C5wsGhUubU0rb+CH1macIbMB8GA1UdIwQY
MBaAFMDwq+aIdUUQvJbH8bFZSSRp/aanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mOGIxYmItYzc0Ny00MTU4LTg3OTIt
ODY0MTQxNWViYzgyLzEvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mOGIxYmItYzc0Ny00MTU4LTg3OTItODY0MTQxNWViYzgy
LzEvd1BDcjVvaDFSUkM4bHNmeHNWbEpKR245cHFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnAgKQ9I
jd2gD+idMHuKIrjADe82vg3LnIK+/CAxUO9JKkpOKQ0zmZlmvV0vxmzha1hHsf0U
OiSKkxZfVJ2CgrdBGqioM/8zmUwnBoCfB44KR1gXYmnQ0xUrDOnBP7iuSEpmFNCv
MJ8DWZ6KmQT5F7MQT9g32r+nQ8fXtAnsb0DjDjGzBGGNkW0+pEHWWSBKYJz3FOVd
CtkUvWC2uazsMLFeQG6c4lEils0bZlYNc45a1bJ5/ZwVKPGyzBZpEW272rh21FoB
svBteM4pJfvKR9CQfNoWlNWMq6dYRWDxt+UqzLAMdLUgRzoPAMQuofla0BOWugAu
o9XpfjfgZpWBFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:41:53 2025 by rpki-client