Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File:                     wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier:          ZbUJmrnj2elaaFm4UnW+cRGIGinFjodBoEqg2ZaGpzs=
Subject key identifier:   59:2F:7C:DA:36:86:86:5C:7D:D9:67:A2:9D:CA:CD:9E:5F:17:4B:58
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer:       /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial:       019749313F85B1B892ED3B716F7967926CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 07:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:53 +0000
Files and hashes:         1: fpbdoc2TI64xJycuwiFh9Gomr6A.roa (hash: cljwIs+0uajrjK0gVgOImyvI4O/zMxkT1vLqnWwJwe0=)
                          2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: Yz+jPFkTNB8HnO2NCmh/fLK+xHGyPPFlknvrOFhrx64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:3f:85:b1:b8:92:ed:3b:71:6f:79:67:92:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
        Validity
            Not Before: Jun  7 07:00:53 2025 GMT
            Not After : Jun  8 07:00:53 2025 GMT
        Subject: CN=592f7cda3686865c7dd967a29dcacd9e5f174b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:09:51:6d:dd:60:9e:fb:c2:9c:68:97:11:
                    41:db:a1:be:04:6a:06:7c:0b:7d:bb:cb:ca:5e:72:
                    7a:23:73:3e:53:ea:da:10:eb:11:19:8f:0a:86:35:
                    68:17:7f:55:e6:9a:c0:9e:08:02:54:46:16:e5:7c:
                    e2:20:08:33:2f:59:35:86:2d:06:44:52:c7:c0:25:
                    db:76:b5:c9:28:6e:91:34:b7:3f:ed:72:10:a1:77:
                    f4:9d:14:99:e2:b4:7d:91:fc:28:05:c9:b5:9e:a8:
                    79:d4:12:db:bc:a3:1b:cb:fb:d2:17:7a:89:9b:0a:
                    63:e2:a1:aa:90:fb:47:a7:f6:2f:8a:86:3e:5c:c0:
                    51:1a:68:b9:25:40:13:8e:79:92:33:b5:48:bf:b1:
                    2a:0e:6e:37:2e:d2:57:78:0f:4f:c6:f3:7d:8d:16:
                    26:b4:0a:89:b8:6a:8f:bf:af:66:e0:9a:b2:d6:c1:
                    3d:7c:c2:f8:7e:11:97:c6:82:54:b7:8d:13:e7:91:
                    85:96:be:77:68:21:63:8f:b4:7a:52:82:14:3d:9d:
                    43:b1:d7:26:86:4f:2e:09:c9:0f:cb:bd:d7:9a:6b:
                    47:eb:38:72:dc:2f:00:c5:f7:bb:02:29:91:02:08:
                    13:ad:7a:86:05:7f:fb:0d:87:78:3b:82:36:2c:dc:
                    6b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:2F:7C:DA:36:86:86:5C:7D:D9:67:A2:9D:CA:CD:9E:5F:17:4B:58
            X509v3 Authority Key Identifier:
                keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:8e:97:0f:ef:5c:69:55:40:b2:e8:ae:1b:e4:89:a0:f6:
         88:04:02:7a:07:02:f9:93:f1:c7:b7:51:e7:4e:c3:92:20:07:
         03:d6:37:f7:b9:b4:2f:33:7a:8b:8c:0e:48:7f:74:f5:28:6a:
         4b:51:e4:b3:de:c7:76:ca:d8:3f:8c:15:dc:b9:58:da:16:92:
         77:05:1c:03:7f:40:aa:6c:b2:e8:87:b0:7c:60:07:d7:ab:ef:
         66:ec:22:11:2c:5c:0a:27:e5:a5:5d:ac:06:af:f3:15:1c:9d:
         d5:d9:0d:bc:c9:91:0f:87:40:45:ce:84:08:5a:53:de:84:46:
         e3:f1:29:97:53:14:00:7c:38:d8:07:8c:eb:30:89:a2:a1:c4:
         a2:e4:e9:e7:32:67:71:eb:19:99:cc:91:14:13:f4:ee:0f:b2:
         95:c0:d4:b4:fd:e2:fb:db:45:7e:63:83:2c:6f:8b:e0:95:d5:
         14:9d:20:16:81:ce:88:6e:d3:98:51:5f:cb:f5:b2:21:d1:67:
         f1:43:e0:0b:b7:9e:81:fe:cc:53:21:20:cb:1c:94:84:8d:7d:
         af:0a:53:9c:2b:4a:22:b8:b5:8c:d8:b4:35:da:c7:ac:76:df:
         94:23:87:6b:5e:4b:f7:45:0d:54:91:64:40:e1:46:79:f7:c0:
         32:6e:57:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:09:42 2025 by rpki-client