Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File:                     wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier:          J13UvS4IOpU8SpYZTVVCHFxyPa+8GylQW6NNUynVHBw=
Subject key identifier:   BD:A8:FA:6B:C1:02:90:D0:CC:88:BF:8C:2D:59:30:FF:03:77:64:47
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer:       /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial:       01976F9A7A8AC7AECD5BEE16C86A88745E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 18:01:24 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:24 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:24 +0000
Files and hashes:         1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=)
                          2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: FssakSS7JBZC8lvAgTDC5HFdiEA/axDT0PBR7TbFpsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:7a:8a:c7:ae:cd:5b:ee:16:c8:6a:88:74:5e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Validity
            Not Before: Jun 14 18:01:24 2025 GMT
            Not After : Jun 15 18:01:24 2025 GMT
        Subject: CN=bda8fa6bc10290d0cc88bf8c2d5930ff03776447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:66:18:9d:4b:41:8f:d6:42:f0:cf:e7:8f:1c:
                    22:71:3a:70:19:cc:00:bc:bc:83:9d:5b:31:52:61:
                    50:f9:0b:25:8f:dd:54:e3:05:58:5e:0f:d0:66:93:
                    62:02:1e:a9:63:79:19:4b:fe:92:4a:0d:42:aa:d1:
                    25:e1:e5:84:e7:45:f5:05:4f:a3:47:a8:71:3f:a1:
                    7a:5d:b1:7e:6b:be:87:42:e1:0b:f1:be:27:10:33:
                    e1:3a:58:8d:fe:37:1e:f2:8c:e8:fb:b0:80:06:e4:
                    4f:1f:46:69:5d:53:bc:79:c4:a0:38:b1:87:d2:cc:
                    d5:e5:81:66:63:5b:25:c1:3d:89:49:29:f1:bb:2f:
                    e2:c0:dd:8a:a8:37:77:3a:18:06:38:0e:e1:6a:95:
                    8f:c7:70:49:94:39:a4:6b:33:54:5f:4e:34:69:85:
                    97:a7:9f:9d:e7:4c:01:e1:d0:d9:3a:92:84:79:73:
                    92:54:0f:be:51:b1:1e:49:f0:03:22:91:1c:41:87:
                    1c:61:8b:3b:ec:4c:c4:b8:6c:49:56:49:8d:a5:66:
                    1d:27:11:ec:72:75:79:05:3d:6b:f4:de:5a:28:a1:
                    66:c6:f8:70:41:b5:9c:92:c7:b8:7a:67:11:d4:d1:
                    67:91:53:d4:c9:f4:4c:9f:32:33:78:ed:6b:d6:45:
                    64:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A8:FA:6B:C1:02:90:D0:CC:88:BF:8C:2D:59:30:FF:03:77:64:47
            X509v3 Authority Key Identifier:
                keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:29:aa:eb:f8:6a:a0:5a:4e:b8:d2:a1:2e:d3:9d:28:18:6b:
         e2:24:72:fa:fa:7e:70:89:3f:1f:cc:15:d6:37:ad:8b:a0:7d:
         2c:5e:e8:f7:ce:72:d2:57:d5:d8:31:ec:42:fe:11:48:f5:a5:
         91:80:c9:4e:47:23:72:ec:37:6f:53:8b:d5:c7:e6:f6:e6:14:
         52:a3:db:26:45:d0:b4:bc:4a:56:8a:02:b5:2e:20:22:42:ad:
         c3:0b:d7:97:78:cc:67:81:aa:6c:7c:81:ae:a1:29:6e:58:fa:
         70:1b:ca:c5:df:b2:8a:d3:2f:e6:33:fc:0b:1e:9d:d8:d2:cd:
         87:39:7c:56:20:aa:d2:11:e8:ab:ad:99:ec:84:bb:54:00:e7:
         60:2d:d8:7a:55:89:76:31:8f:c8:92:0b:89:b6:4d:c9:10:21:
         57:f6:f2:64:07:41:11:12:37:49:85:6b:b5:b6:73:62:0e:b7:
         e8:04:1e:e5:a8:03:c0:ba:fb:b0:57:12:01:64:dc:5b:d3:0e:
         26:5d:a0:4a:de:7b:29:bf:f7:02:a0:73:75:7f:7d:aa:d9:63:
         b6:b5:08:fe:66:d0:46:b5:9e:eb:88:80:a5:31:c1:09:9a:bf:
         f9:5b:df:40:80:4a:5d:88:48:1e:49:76:6c:6f:6d:a4:d0:fd:
         dc:b9:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:07:55 2025 by rpki-client