Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File:                     W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier:          1A9UvMiykMM6356+gmawpCf6F599PNewgfp5y9tMteA=
Subject key identifier:   BF:78:1C:49:95:3B:B8:57:14:48:32:4A:BC:1A:78:13:48:C4:78:59
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer:       /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial:       01976D3D81B8BE5886FA879A95C35DF52322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 07:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:36 +0000
Files and hashes:         1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: Lu+0X2+Fe/lWkiAy7K93CTmzHGBj+Z9jVeReXpw2RZU=)
                          2: gtNjwWIklt9RQOUEEkHBnNPLSqM.roa (hash: vH0Ya4SYvhAbrE7j6LOzzc7/NQSUnPHlrM/bMm0UTx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:81:b8:be:58:86:fa:87:9a:95:c3:5d:f5:23:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
        Validity
            Not Before: Jun 14 07:00:36 2025 GMT
            Not After : Jun 15 07:00:36 2025 GMT
        Subject: CN=bf781c49953bb8571448324abc1a781348c47859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:cb:cf:36:a8:4a:ae:80:6e:28:22:6c:f8:
                    38:6f:38:e3:92:6d:fb:23:b1:f7:52:a9:9c:19:d6:
                    e0:95:94:91:4a:01:34:e1:d0:ec:d7:11:7a:f7:4b:
                    b1:aa:e2:db:b4:27:24:bc:50:7c:f2:73:60:67:5c:
                    af:48:08:9f:d5:26:ef:d5:56:38:6c:b1:e5:47:e4:
                    51:40:e5:29:28:6f:bd:64:6b:7f:fc:da:d8:dd:35:
                    4d:b1:0d:fe:4b:a5:11:75:76:cb:37:6d:87:9a:b4:
                    b1:0f:0f:2f:5c:48:d7:0c:01:64:03:6e:bc:b0:ff:
                    20:c7:e8:12:dd:cb:d1:30:84:5c:b6:e7:19:fa:9c:
                    8d:60:a1:14:69:33:ad:15:b3:72:c2:8d:a4:c1:e4:
                    ac:a2:4a:b9:8d:49:7a:0e:21:1d:f7:7a:51:75:6e:
                    92:e3:a4:25:d9:92:cd:e6:b2:44:fd:66:3f:de:ff:
                    82:29:8c:eb:19:59:42:e5:cc:94:6d:13:95:25:26:
                    b0:6a:1f:57:fc:7f:78:ac:df:5b:c8:66:74:e8:10:
                    dc:68:df:7e:5d:07:ad:f5:f2:d1:80:ab:0b:b4:f8:
                    0d:ce:8f:63:d7:d0:46:2d:ab:e0:b6:a2:df:62:22:
                    b3:63:57:d8:06:fa:a2:ac:14:95:4e:a1:36:29:b2:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:1C:49:95:3B:B8:57:14:48:32:4A:BC:1A:78:13:48:C4:78:59
            X509v3 Authority Key Identifier:
                keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:db:04:f7:0b:d8:ca:43:e9:5c:04:be:84:30:b4:9a:c0:1f:
         22:c4:1a:9d:4e:2c:98:30:d5:40:73:65:26:3e:f9:da:6d:6a:
         24:22:56:b1:2d:cb:7d:da:b7:77:4d:fc:d1:6f:ca:dc:b9:ae:
         45:90:bf:f5:95:bd:72:ea:f2:2f:7d:2b:19:78:b0:de:15:9c:
         1f:9f:e6:c1:30:13:80:f9:95:44:7b:9d:86:39:b2:d5:4b:d9:
         be:f1:8d:11:b9:86:bf:60:43:59:e9:46:9f:fe:4e:f0:98:8c:
         01:b6:56:bf:9c:4e:b1:bc:94:8d:d8:20:e6:39:86:4f:89:6c:
         18:f8:4c:4c:7d:ec:5b:1c:f0:42:e8:87:30:da:63:4c:ab:a3:
         50:24:9e:ec:b7:f8:52:a9:4e:55:13:e3:27:75:07:0d:ef:d0:
         cd:91:83:57:9c:f4:4a:74:d8:c8:ed:60:9c:b0:0e:0a:58:2a:
         67:15:af:88:67:83:6e:c6:40:e4:31:51:f7:33:91:a3:43:36:
         d7:23:39:ba:04:61:88:b8:82:54:0a:6b:04:b7:69:11:73:ba:
         8e:de:88:bb:5f:54:fc:84:d7:c8:b1:a9:76:1b:9d:13:85:e9:
         c0:e6:f8:2a:e2:23:0c:c2:b6:06:92:b6:09:ca:1a:16:f9:b6:
         58:d8:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:29 2025 by rpki-client