Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File:                     wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier:          rPE9u4YZjV2zooU/68/1DenIksXXMOh0DM2QGW5LAeE=
Subject key identifier:   6F:AD:09:DD:F3:05:AF:D1:4E:A6:F2:98:0E:FA:A0:03:0A:8B:07:8B
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer:       /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial:       01976F2CC3BD61DF7DBAFDADE6F6D3C6FB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number:          14E6
Signing time:             Sat 14 Jun 2025 16:01:34 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:34 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:34 +0000
Files and hashes:         1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
                          2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: 5afhVsqMeUJAWHyVf34Y3v5imrOgNwj1Y5/+15pawgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:c3:bd:61:df:7d:ba:fd:ad:e6:f6:d3:c6:fb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
        Validity
            Not Before: Jun 14 16:01:34 2025 GMT
            Not After : Jun 15 16:01:34 2025 GMT
        Subject: CN=6fad09ddf305afd14ea6f2980efaa0030a8b078b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:ca:c5:5c:8e:2b:5f:d2:f7:9a:4a:ed:04:
                    97:89:0f:2c:9d:94:70:59:ea:08:79:15:d0:36:00:
                    fe:fc:88:14:34:a6:b8:bf:9d:15:76:c6:62:65:4b:
                    fd:c5:9a:d4:5b:3b:cf:6a:ee:56:b3:99:31:f3:29:
                    ab:3a:a0:dd:64:36:df:48:6a:77:f1:d4:8a:02:15:
                    74:d1:a1:0b:43:f6:11:67:ce:94:dd:6b:97:02:23:
                    62:fb:6d:90:57:b9:fc:ef:9d:42:66:6a:5f:ab:da:
                    7e:b1:58:8a:65:1f:e0:d7:5f:7c:c5:63:d6:4f:6c:
                    2a:43:a6:c4:66:06:d2:4c:c4:77:89:7b:e6:43:10:
                    47:d5:59:a7:32:57:fc:b3:3f:ef:ec:1c:08:2f:76:
                    a8:60:e2:10:49:02:9c:6b:e9:3d:e9:49:a3:0a:15:
                    75:9e:6a:ae:f6:90:b9:ee:76:35:f5:28:24:46:16:
                    02:71:4f:eb:88:21:97:54:bb:eb:4b:78:ef:ca:6a:
                    36:dd:dc:0d:74:f9:e9:63:e8:d4:2b:4a:8a:1b:bd:
                    0c:a3:77:81:c0:7e:01:68:09:0c:61:6a:d1:bf:9f:
                    bd:e3:ce:25:0c:8e:d6:1b:b6:3e:0d:e3:25:4b:3b:
                    90:78:59:0e:17:de:97:50:ee:0d:fd:d0:0b:77:80:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AD:09:DD:F3:05:AF:D1:4E:A6:F2:98:0E:FA:A0:03:0A:8B:07:8B
            X509v3 Authority Key Identifier:
                keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cc:c7:50:12:72:3c:58:54:b1:ae:7d:8e:67:fd:d2:67:bf:
         97:de:a8:6f:1f:a6:e1:66:aa:c3:3a:4d:ab:2b:6f:b1:30:78:
         47:fe:3a:a4:42:39:78:67:b1:5c:2e:c5:b4:4c:9f:8b:4f:a8:
         b8:8f:e2:09:e8:d3:c7:07:16:36:e2:07:c8:b1:f7:a8:94:84:
         59:41:5b:9a:31:8e:ea:de:8a:d8:11:af:14:1e:3e:6a:ba:73:
         8f:4f:9d:eb:1b:36:9e:31:d0:83:70:f4:0e:2e:70:a5:ff:83:
         a5:f6:fd:11:10:f6:27:f6:0d:9e:fb:2f:6d:73:25:59:e7:a0:
         a8:e1:69:5a:30:e6:5b:59:7f:c3:1f:f3:0d:56:a1:23:ce:4c:
         c4:26:05:ab:05:d3:68:62:fe:ac:4d:23:53:65:bd:5c:24:48:
         a0:8e:3c:e0:10:42:5a:b8:db:72:d4:77:5f:4b:c7:43:73:d6:
         4d:2f:70:29:ac:3e:2f:4a:cf:1c:3c:76:fc:50:a1:a9:5e:1a:
         2e:32:fe:6b:2f:6f:3e:f1:51:c5:16:5c:a3:23:f3:73:72:f0:
         17:e8:76:fc:f2:b8:ae:48:68:3e:e4:0c:ec:75:22:bc:65:a0:
         9b:43:2c:90:3b:39:e0:51:e0:c6:0b:c0:bc:22:d7:25:15:c6:
         b2:24:55:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:59:19 2025 by rpki-client