Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
File:                     wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft (raw, json)
Hash identifier:          MkNLgXtp7dYxEmxlrC4NF97i261zYt7rEq0iEdSaUsQ=
Subject key identifier:   1C:98:C4:E6:E1:15:D4:08:CD:4B:88:D1:B7:4D:07:1D:F5:78:F7:77
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Certificate issuer:       /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial:       01976DAB22E662CEE773F6E965733D4606C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 09:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:21 +0000
Files and hashes:         1: BQLlzRf92AV-wOpCiU3Uf7zFDTE.roa (hash: ojPLMpm1/7UXMtqHbqCurY3+N3TkMNGJ/j/f6zcsUls=)
                          2: E00rNsoiT3py_3yapmHFtC_Nhrg.roa (hash: NbpIiEieVkToVn1q+xbEvBZtrUTnRwlkypf+PLwHZU0=)
                          3: Vk7acJCttlxBVWzc1q7a4nWM7rQ.roa (hash: jqcFx2BzSJp7wY2CXpCRm4It9qRY3jR3QXLHSWI1gbo=)
                          4: W7hm1v1BZSRkI-g-Q988i-QfQmg.roa (hash: tTl/U0i8KKl6mpPXvqkEhYGwVtb5LDrDTJXxu7tcm3E=)
                          5: wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl (hash: XBlmtgKZYozpuIGOruOVxsmR2S3/tZ1PHKu1QtQHEm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:22:e6:62:ce:e7:73:f6:e9:65:73:3d:46:06:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
        Validity
            Not Before: Jun 14 09:00:21 2025 GMT
            Not After : Jun 15 09:00:21 2025 GMT
        Subject: CN=1c98c4e6e115d408cd4b88d1b74d071df578f777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:28:e4:d2:f1:86:5b:b6:76:a9:d5:98:7d:
                    54:99:c4:1f:d2:b9:6b:5e:8e:fb:6a:af:d3:ac:7d:
                    74:77:43:4d:bc:25:0b:d2:f3:2b:f4:e3:aa:2c:4e:
                    82:06:45:09:f4:0b:28:3d:f3:6f:be:01:28:6d:16:
                    96:ed:3d:ff:1a:b6:52:af:98:51:cb:bd:e7:da:8d:
                    83:de:49:6e:1c:30:c4:1a:ee:c4:e5:aa:8a:37:21:
                    7e:69:48:7c:69:1d:de:c8:b3:1c:45:bc:f3:65:c4:
                    83:0d:97:9e:cb:8d:b5:91:63:0d:cb:6f:94:e0:3c:
                    2c:c6:ae:70:84:55:5f:b4:2b:a5:25:1d:83:35:65:
                    a1:ff:9a:87:9b:67:d8:04:d2:19:f1:a3:a2:7f:98:
                    c1:5b:32:0e:99:85:2f:dd:83:ac:9f:d0:32:04:8c:
                    04:15:aa:10:61:3a:60:a8:c4:b3:8c:4d:99:d1:7a:
                    32:13:67:8e:5d:e8:b7:a5:cc:63:9f:a9:11:91:5e:
                    d5:ca:be:5a:65:c9:b6:b1:8b:b8:8a:ac:ce:46:c9:
                    a0:b2:2c:3b:7b:1b:87:d4:a4:66:67:31:3d:4d:06:
                    a2:00:be:43:7d:9a:4b:7e:c7:7d:26:0e:96:49:cd:
                    b8:0f:29:9b:13:7b:f0:de:c7:e7:7e:9f:74:a5:35:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:98:C4:E6:E1:15:D4:08:CD:4B:88:D1:B7:4D:07:1D:F5:78:F7:77
            X509v3 Authority Key Identifier:
                keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:e3:e7:e8:3a:ea:60:3d:85:38:71:87:2e:54:46:52:31:
         51:6f:2c:58:38:69:3a:10:61:ab:f4:73:f8:d7:9d:2b:56:1f:
         f5:ac:6c:60:23:b8:fe:b4:48:ba:cc:8c:af:24:73:e8:bd:0e:
         a2:d6:c5:82:ce:ed:5b:97:e0:af:04:8b:f3:26:ef:0f:38:fa:
         23:48:6c:85:b9:4a:2e:b1:e7:df:4b:89:61:71:c2:88:89:7e:
         72:02:44:61:31:86:a1:b9:e7:19:c6:a6:dd:fb:dc:87:3e:61:
         d6:bc:f7:a2:9f:53:be:5f:73:e3:f8:6c:79:f2:5c:70:e6:79:
         a3:0e:18:1a:5f:fe:9f:ee:0d:4d:31:c0:32:4c:33:94:fa:f2:
         6c:52:fc:89:54:6e:c8:2a:eb:d9:08:c4:e0:dc:2d:fd:9c:27:
         9d:b3:67:7c:42:e1:3d:c1:6b:89:c3:8e:af:ee:64:10:90:b5:
         3f:de:7a:0b:c7:19:09:10:49:89:14:c3:93:75:f3:18:51:46:
         c0:83:37:ce:3e:0e:1d:38:a8:d5:38:6b:cd:a8:a5:a0:40:33:
         a2:f1:41:02:18:17:05:d7:0f:a5:1b:b6:37:3e:55:95:ef:85:
         81:2e:73:46:0c:ed:26:fc:36:48:7d:b7:67:a2:02:69:da:3b:
         1a:89:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:09:55 2025 by rpki-client