Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File:                     WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier:          V0QFLFKOTWQw6EaHApumHxE2Ec2ev1jf6WPOCmr/5Hk=
Subject key identifier:   3E:38:9F:DF:4A:84:03:B5:15:A4:91:BF:2F:E2:32:F4:A9:E2:AC:64
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer:       /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial:       01976BBCC738D98A8D1B0825A6A010D4771B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number:          C9
Signing time:             Sat 14 Jun 2025 00:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:23 +0000
Files and hashes:         1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=)
                          2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: DOfLMuqLgR9aS2UnwYbnMtQ51dkV5PZ+f+Jmss/MjoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:c7:38:d9:8a:8d:1b:08:25:a6:a0:10:d4:77:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
        Validity
            Not Before: Jun 14 00:00:23 2025 GMT
            Not After : Jun 15 00:00:23 2025 GMT
        Subject: CN=3e389fdf4a8403b515a491bf2fe232f4a9e2ac64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:e5:65:93:03:2f:62:95:41:72:f2:ac:fc:
                    05:79:01:02:00:37:99:9d:57:53:9d:08:7d:e5:1c:
                    b1:62:fd:fb:4f:b7:94:97:9f:5f:18:c3:f0:0e:1b:
                    59:8d:c4:a8:f3:06:53:af:3a:ca:24:c0:dd:8d:24:
                    a1:ae:4d:74:a0:07:48:02:57:9c:ab:0b:86:83:f1:
                    94:2f:9d:b3:cd:cd:ad:78:47:47:16:7c:49:fe:c5:
                    95:39:47:56:84:02:cd:4c:06:94:09:e4:be:5e:e0:
                    41:fd:d1:09:af:1c:50:82:f7:99:8e:4c:7e:0a:94:
                    d1:a4:15:1f:de:05:da:e7:c9:ce:d9:bd:de:e8:b9:
                    2e:7a:c9:44:62:19:c0:64:cd:f2:cd:2c:68:08:dd:
                    1e:79:44:f4:3e:e7:97:78:f8:c1:de:ac:c4:57:0f:
                    66:b7:0e:65:5e:1f:7b:08:6d:cb:d6:b1:8c:bb:83:
                    f9:af:a3:bc:e8:3b:4d:d0:fb:2d:27:0c:71:5f:ee:
                    38:4c:56:95:7f:a2:4e:da:27:80:d8:e4:d0:7c:5f:
                    3a:55:14:a1:ee:a2:eb:e6:06:e0:e6:71:2d:ee:60:
                    92:06:95:0c:f4:91:f0:23:e6:d7:77:c1:e7:e7:e0:
                    08:c4:1e:1c:50:e6:09:6b:2f:88:7d:44:88:54:ba:
                    25:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:38:9F:DF:4A:84:03:B5:15:A4:91:BF:2F:E2:32:F4:A9:E2:AC:64
            X509v3 Authority Key Identifier:
                keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:3e:ec:8b:85:45:fc:22:0b:95:45:92:a9:48:51:55:5e:
         23:a4:61:ac:0e:ad:c3:ee:3a:26:6e:07:01:23:16:8a:27:09:
         0e:3f:b8:90:50:d5:ac:45:33:1c:b6:e1:2b:a0:de:9d:87:27:
         f1:6e:66:de:aa:f8:3f:99:dd:cd:fe:00:37:dd:1d:a0:9c:3e:
         50:10:07:f1:84:e4:28:e2:ee:b6:21:ad:37:3b:ae:3d:0c:66:
         4e:c6:db:7f:22:42:63:b0:75:c5:1a:bf:e5:f0:0d:88:c7:fd:
         18:7b:1d:c8:8b:6e:3f:50:25:42:40:47:53:bb:63:2f:fe:d9:
         b7:41:97:d0:79:27:84:b0:58:bf:f2:66:91:e1:f5:b5:af:65:
         2c:c2:6f:03:b0:ef:25:58:c6:f7:f1:d5:5e:56:ef:d8:7f:13:
         b5:17:f1:e7:49:ed:8b:1a:34:de:c2:bd:b5:a4:e9:38:c8:64:
         35:b5:b4:59:f5:fb:29:2b:b9:8b:18:5f:ca:0b:ab:a0:ae:62:
         cc:23:ae:14:e3:dd:da:b9:6e:27:63:d4:2e:6f:a0:ec:70:4c:
         de:8e:27:67:c9:dc:0a:8e:03:51:6d:6c:ea:6d:2c:1d:1b:aa:
         f9:b9:03:e2:93:01:15:c7:b1:ac:fc:7b:6b:e6:7b:72:be:2a:
         4e:f8:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:28 2025 by rpki-client