Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
File:                     w4KAxTALdIiKx-tL-mQX2aLnsL4.mft (raw, json)
Hash identifier:          Ct1pi7OJUx6robeMDCdQ3AH93/r4xRnX6RybhcfCrmE=
Subject key identifier:   63:5F:57:B3:CD:EB:23:43:DB:B6:81:4C:2D:D4:5F:EF:6E:EA:C7:27
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Certificate issuer:       /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial:       0197684E1F99B2785655A4763E7D13817EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
Manifest number:          0BB5
Signing time:             Fri 13 Jun 2025 08:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:39 +0000
Files and hashes:         1: 0z-oyc4dHY_OhKJUFJGi439A6u4.roa (hash: NoS84oJOqN7GlCU6CTbrKPZeTEFMMmSZpBMewedibtU=)
                          2: 3X5B_z_CHT9YiArtKHYnEy7SS1U.roa (hash: tIWfVACal3ac9CgPfVZfL2hoiDFlKQiV1Zl+vw5e/Tk=)
                          3: N_XMfZR0qwYiTnGGPBVzX1-VbCc.roa (hash: ouuNsheVqIbqR9RzkwdJ4+ZIgUll9Z5umbhEXmymXG0=)
                          4: SGMklr5AeE8jGTkv_5TNxH2UtBY.roa (hash: 5/gm3b3ZHQxuqtVGihJbcna/seeg7cLgU18tVnIiLhE=)
                          5: USwE4wLu1iKf2bHlBGwFFjjG1vg.roa (hash: Ey2Ue8FdBr88zEYn6fPGH7y6x0VhWBZL1dbsaxDL1Dw=)
                          6: fwidfOE9wLJVHvxvqo5WJpziTPQ.roa (hash: IACsOvvmqe0JcAwbYBZ0v3eyApUMtt8c8HlehAuYS/w=)
                          7: hN7zKkOexRQZr-KvvxJ68RRBR88.roa (hash: 83LMiX+7xkSI2TZz6xMtRRpAT0AOqOI9dFyBzIQNyH4=)
                          8: mkmzSBfTmh1927TwjKRzkGSilpo.roa (hash: ZpaUb66empT2T5gziJ4fvdd/emyVETapR7pDi9FUco0=)
                          9: mt3gB2c0raC2BMh6rEGbJNYm3Ug.roa (hash: OmreYbE9KnMOLnziJ5RPsRhv3maIT4ojXqoVqKrQUcA=)
                          10: nnCUhVImeKVSSHsPJ4bQMntIe0k.roa (hash: y/vliRYcabvic0DNd0VxC9usOOdHfTvNAxGNCa7L498=)
                          11: vRLj2XfIJCmd2h29ApFam8hZX5g.roa (hash: LIz+t7jd+u0aHEAgwFjWvD8d/UKc2KzNkRXqUvtjicM=)
                          12: w4KAxTALdIiKx-tL-mQX2aLnsL4.crl (hash: 9f98sPdBgzMn4rGMhsWzGoNxoFzUxdufCOzqEChjby8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:1f:99:b2:78:56:55:a4:76:3e:7d:13:81:7e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
        Validity
            Not Before: Jun 13 08:00:39 2025 GMT
            Not After : Jun 14 08:00:39 2025 GMT
        Subject: CN=635f57b3cdeb2343dbb6814c2dd45fef6eeac727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:86:6a:d4:f6:50:d5:0c:e2:a4:80:fd:3e:e5:
                    0a:0c:65:98:f8:7a:6c:36:ec:52:75:19:bb:33:b9:
                    bb:82:f5:d8:84:f2:06:c1:08:0f:81:f3:1a:d0:60:
                    0d:23:18:1f:10:72:73:17:d3:68:d9:ea:1b:9d:9a:
                    cb:e7:18:1d:7a:85:6e:0f:db:4f:8f:98:c7:73:56:
                    b6:bf:89:a4:9f:50:e5:f8:34:6a:b8:ea:52:62:6a:
                    4e:df:40:54:aa:f5:74:3f:e7:7d:30:d7:9b:3c:d5:
                    75:f1:6e:76:e3:37:ee:4b:ab:c3:02:49:62:f7:25:
                    88:72:70:e5:03:8c:fe:fa:08:e2:4f:44:50:c4:a7:
                    e1:46:1f:66:24:ce:b9:ca:d5:ff:de:45:c5:d7:86:
                    9a:9c:73:91:30:17:45:92:f1:e4:c7:00:ea:1b:39:
                    04:9e:a2:fe:a2:1e:60:9b:cb:5d:6f:95:d6:b8:dc:
                    6c:1c:db:c3:78:bb:c9:9d:41:e9:b6:ca:af:e1:03:
                    21:c0:16:61:44:70:7f:f2:96:d5:04:05:07:20:60:
                    e7:b2:a6:28:8d:4b:53:74:08:a4:17:73:8a:ce:a5:
                    d0:cd:1f:02:77:44:26:be:4e:66:8c:49:26:5c:d2:
                    e5:a8:54:57:43:5f:4c:f7:d8:6c:36:ec:b4:de:37:
                    ef:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:57:B3:CD:EB:23:43:DB:B6:81:4C:2D:D4:5F:EF:6E:EA:C7:27
            X509v3 Authority Key Identifier:
                keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:26:62:66:d6:fe:56:21:81:78:0c:ed:7c:19:b4:33:68:51:
         ab:23:6e:d3:54:6a:d2:ee:7b:07:8a:92:94:d0:ae:f0:a0:85:
         9c:ac:79:05:44:e5:79:ff:00:20:a6:95:c3:3f:89:44:24:29:
         d9:6a:5b:12:7f:2f:49:4f:e4:be:ac:b6:2b:31:34:10:2a:96:
         5c:1b:9d:6d:e3:61:3e:46:bd:f1:3b:11:fe:29:95:74:92:97:
         2c:52:81:e9:d6:41:22:27:84:ee:30:93:63:ec:3b:cb:1f:fb:
         c9:fe:4b:cf:80:c2:66:38:c9:43:be:e6:b2:66:4b:93:a4:05:
         d4:6f:a3:84:67:d6:6f:a4:ce:01:d3:fe:90:17:72:ba:06:c2:
         e9:ff:44:42:7c:80:7c:99:0e:98:26:1f:6b:50:5e:9e:ad:c4:
         8f:71:d6:6e:68:f6:fc:ef:65:e4:bc:3c:3e:4a:6c:96:f5:35:
         b4:09:47:63:dc:2d:c1:40:69:26:f4:54:09:4f:71:9c:39:42:
         51:92:e6:0b:8e:30:9f:1c:f7:f7:fe:9e:7f:25:30:ec:0f:0c:
         a5:a7:fb:8b:90:89:66:da:b9:de:00:66:bc:66:92:a3:72:08:
         a0:b9:ba:84:a2:b3:e5:29:fb:47:6a:03:d9:c1:2e:bc:c5:ad:
         e5:46:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:53 2025 by rpki-client