Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File:                     W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier:          NePNx2eufOeORtRHJo/44dihKdCaSTyf2yaiB+zEahA=
Subject key identifier:   03:59:89:9B:58:12:73:26:CE:54:40:21:64:F1:AD:C6:35:F6:71:F8
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer:       /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial:       019749D5B0237BA708D1B809FD8CA1C652BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number:          0FA3
Signing time:             Sat 07 Jun 2025 10:00:30 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:30 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:30 +0000
Files and hashes:         1: BYEpO3dKB_ok3YL5Nvkz1BqvKfY.roa (hash: tzMMybSfOyrsE8fXw9tkAmX7iTeiSe2VTc77bmai8Ps=)
                          2: FvfQzenY4vuGvPjzUDTw1tjiG2s.roa (hash: zkGEFuUXYUubPgf+SgQqduDAgySAdGnP1m7nGCOsPPE=)
                          3: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: a99gx3hh1sniXOOEXpou6EDxa/A+XIYXZnV5WJUtVHE=)
                          4: YHhKqKllORo1YpLh6r99OV2fKdU.roa (hash: mexx1monVzWkvXW1/Ufj3sXVxDrM1B0b6uh/TwyrzYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:b0:23:7b:a7:08:d1:b8:09:fd:8c:a1:c6:52:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
        Validity
            Not Before: Jun  7 10:00:30 2025 GMT
            Not After : Jun  8 10:00:30 2025 GMT
        Subject: CN=0359899b58127326ce54402164f1adc635f671f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:e2:ae:4c:0e:08:eb:e5:7a:e8:77:86:fb:
                    a0:5e:70:19:57:61:22:90:d0:6d:80:fd:11:d1:27:
                    ae:f7:82:14:e9:4a:31:8b:e4:db:63:3f:a5:e8:fe:
                    8b:16:35:b2:e2:3c:57:46:f1:0a:00:f2:a5:c4:79:
                    86:65:33:e4:79:e3:0c:98:59:7e:35:8b:2d:c6:bd:
                    fb:8b:37:14:5c:1c:a7:a1:56:71:01:c4:ed:30:52:
                    49:ab:f0:e6:da:cd:24:28:3e:4b:84:9a:88:89:d2:
                    77:5d:37:fd:ab:a6:fa:ef:62:9a:e4:ed:8f:84:94:
                    96:7d:23:54:6f:cc:38:0b:83:2b:87:fa:7e:91:e6:
                    d2:c6:93:57:fc:12:a4:79:48:6a:50:04:b7:f9:96:
                    f2:e9:62:7d:a6:23:78:44:4e:e8:fb:62:b1:37:2c:
                    80:38:00:f5:16:a6:7c:2f:dd:8f:5b:69:fd:28:2e:
                    a7:e6:c3:57:1d:a1:9e:35:bb:f8:dd:c8:24:09:46:
                    40:89:2d:26:ae:3b:a7:e4:aa:5a:e9:70:62:3b:49:
                    15:cb:11:20:63:b6:a8:0d:0c:99:0c:43:4f:e7:03:
                    3f:d4:bd:c5:31:73:17:07:31:98:fe:38:a7:db:ea:
                    0c:3b:0e:c3:9a:2e:63:95:a9:93:4e:a7:16:36:1d:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:59:89:9B:58:12:73:26:CE:54:40:21:64:F1:AD:C6:35:F6:71:F8
            X509v3 Authority Key Identifier:
                keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:31:7f:13:99:81:9e:18:90:f8:d8:50:e9:5d:c6:33:4f:9c:
         23:09:d9:61:94:a0:38:dc:a9:18:96:38:1c:2b:cd:de:70:24:
         26:78:9c:92:75:a7:43:67:58:15:41:2c:18:5a:32:4d:a8:c1:
         b7:87:d7:36:35:08:62:09:cd:68:8f:c3:d6:20:10:ee:14:3b:
         11:9c:08:1a:06:02:1c:a5:dc:f3:64:7c:f2:3a:73:2c:a8:7d:
         9f:f8:6b:56:a6:3c:79:ff:19:62:e6:5f:40:39:89:7c:d6:e5:
         cc:82:e4:a3:69:75:7a:4c:05:56:7f:71:f1:50:e3:b3:63:81:
         b4:cf:ef:4d:24:79:8c:ee:69:26:a2:90:94:aa:d5:59:c3:6b:
         ba:32:5e:0f:bb:67:ac:40:59:ea:37:29:e4:ed:98:3b:84:5a:
         6f:4d:e7:22:29:51:19:2f:48:f9:40:a7:0d:4a:67:2c:f9:04:
         c9:6b:81:6c:f4:85:0a:02:10:bf:57:61:fc:b6:44:98:23:05:
         49:46:98:af:39:73:6a:c8:85:a3:9d:53:fc:7f:5f:7d:05:28:
         20:a9:43:b6:ef:02:e0:f0:fa:1b:7b:69:3b:90:25:8f:ae:7b:
         75:88:4c:45:98:c3:16:a4:7a:9a:29:71:94:11:2e:59:1d:66:
         3d:ce:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:59:08 2025 by rpki-client