Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File:                     WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier:          fUO5zsHlrcgbKwHkfbDsyuhQ7EbIU+fU0n+N6wAokAE=
Subject key identifier:   22:F3:69:E1:D8:F3:0B:3A:0F:56:1A:12:D9:83:12:59:70:22:6F:37
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer:       /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial:       01977D1EA1CBE504833C5643DD87B9343D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number:          02FA
Signing time:             Tue 17 Jun 2025 09:00:48 +0000
Manifest this update:     Tue 17 Jun 2025 09:00:48 +0000
Manifest next update:     Wed 18 Jun 2025 09:00:48 +0000
Files and hashes:         1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=)
                          2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: UGNiI12MXGp4NmUAvrpaMCwwZ/s20NcRtFy6e/QV9pM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:1e:a1:cb:e5:04:83:3c:56:43:dd:87:b9:34:3d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
        Validity
            Not Before: Jun 17 09:00:48 2025 GMT
            Not After : Jun 18 09:00:48 2025 GMT
        Subject: CN=22f369e1d8f30b3a0f561a12d983125970226f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:4a:32:79:38:29:08:9d:8c:00:06:a4:6c:
                    59:a9:13:df:52:90:f2:55:93:8f:0c:dd:84:20:47:
                    06:95:09:df:43:72:c6:df:fd:92:e3:59:5f:42:bb:
                    ce:81:0f:1b:a1:23:56:b2:6c:e8:bb:62:8c:68:12:
                    ab:c0:3b:36:13:e0:8a:14:20:73:b8:79:14:b1:0f:
                    a6:5e:d0:62:da:ae:0d:09:55:0e:d0:ff:94:86:52:
                    23:65:2a:46:d5:62:c6:72:54:bf:ee:5c:b6:5d:3b:
                    07:ae:f4:4b:9a:c5:c0:17:72:78:af:82:98:06:e7:
                    62:96:de:09:6c:0a:5e:ee:12:34:ea:53:16:4d:b9:
                    61:a8:d7:ba:4e:9f:47:c9:0d:ff:d8:1a:de:36:26:
                    8a:e7:f2:27:08:f9:ff:d1:6a:eb:84:9a:29:93:86:
                    a0:73:d3:05:7b:e6:76:eb:73:e5:a7:42:92:de:a5:
                    0b:c2:17:ef:87:62:05:c3:50:51:5f:88:55:c2:b2:
                    9f:fa:ba:1a:eb:11:82:9f:e1:ff:ec:51:3e:0f:94:
                    35:18:2f:98:06:6f:05:64:dd:df:d2:09:9c:c7:45:
                    30:d4:dd:a4:ac:66:8a:7b:44:a2:26:58:3d:a5:72:
                    60:ed:af:96:3c:e0:ba:ef:19:44:b1:52:38:63:6d:
                    a1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F3:69:E1:D8:F3:0B:3A:0F:56:1A:12:D9:83:12:59:70:22:6F:37
            X509v3 Authority Key Identifier:
                keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3d:60:bf:bb:7d:58:d4:8b:87:55:28:ee:61:75:ba:b9:bf:
         4f:a4:d3:0d:b7:21:8a:05:54:83:76:42:ad:6d:00:dc:45:b8:
         15:52:94:52:24:ad:03:a1:ff:ab:a8:7a:c9:c8:7e:9b:73:3a:
         26:ae:41:f7:f3:81:2f:a1:90:45:24:0f:38:65:32:b7:97:4d:
         6a:f9:56:5e:80:4b:26:bb:06:dc:4b:c9:46:74:5b:36:08:95:
         f5:fa:f4:81:c0:59:82:af:0a:28:2b:7a:49:65:4d:d6:c0:64:
         89:7f:a7:82:5c:3e:83:c0:41:0a:13:b5:d1:66:eb:25:37:16:
         09:4b:30:1f:da:53:16:5e:c3:80:90:48:a5:c1:54:4a:9c:9b:
         7a:23:bc:10:d2:57:3b:fe:8e:87:5a:b3:cb:52:4a:4a:f2:b9:
         cc:b3:1a:e4:28:86:7b:e6:6f:9b:ce:4f:e6:15:57:a3:13:ad:
         24:c7:3f:4d:06:af:9f:cd:89:3e:a5:a0:94:4a:17:22:8b:35:
         0a:b8:31:ed:a3:b9:ac:0f:6f:80:58:3d:85:55:f0:eb:99:c1:
         38:b4:2d:2c:2a:c7:76:34:3a:86:3a:11:db:47:db:ca:48:ec:
         7b:13:87:9e:fa:3b:f4:c3:a4:6d:f8:d8:79:2b:03:18:19:0e:
         07:6c:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:41:18 2025 by rpki-client