Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
File:                     WSxpn4_svshH0zkLRljdPLIcUrM.mft (raw, json)
Hash identifier:          2LtiwezUg/wh7pOmOK8Gl9YiwBf07tIyZ6rlaWxqdyQ=
Subject key identifier:   C5:DD:C8:70:D6:0D:23:CF:45:15:3F:D9:77:98:1A:2B:4D:B0:2F:A9
Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
Certificate issuer:       /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Certificate serial:       019749316F3A28BA0E2EE4A9669EA07B7F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
Manifest number:          0328
Signing time:             Sat 07 Jun 2025 07:01:05 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:05 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:05 +0000
Files and hashes:         1: JGGUZFFW6mkhM2spC4Om8Sl5Ik0.roa (hash: dqTj/vaS7gUXIm5IFoD4OZy7eNLtptQVc2/Kh4P7oE4=)
                          2: WSxpn4_svshH0zkLRljdPLIcUrM.crl (hash: CnZhf0sRZK+xTSO/ZUj6Kruy2ZsAVMHezCGo4+JIVB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:6f:3a:28:ba:0e:2e:e4:a9:66:9e:a0:7b:7f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
        Validity
            Not Before: Jun  7 07:01:05 2025 GMT
            Not After : Jun  8 07:01:05 2025 GMT
        Subject: CN=c5ddc870d60d23cf45153fd977981a2b4db02fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:97:c2:f8:09:19:5e:b9:dc:fc:36:0d:9a:6c:
                    9b:98:a8:15:c0:90:19:e1:d6:02:34:78:ed:36:a3:
                    55:55:4c:86:0f:62:71:83:59:7a:82:a5:8e:1e:18:
                    9a:ae:98:e2:8c:dd:1c:3b:ef:e4:60:ff:c8:f9:0f:
                    4a:8b:7b:f2:8b:7a:b5:6d:aa:76:73:1a:25:69:4f:
                    2c:05:a3:43:c8:ea:5f:29:bd:45:45:8a:fb:9a:98:
                    16:a8:c5:bb:fc:22:e6:59:b3:35:8c:42:ca:58:d5:
                    69:10:1c:03:a0:8d:ca:a7:e0:b8:33:89:8a:a9:f3:
                    80:18:de:0f:f2:72:3a:23:3b:12:6e:73:5d:75:c1:
                    f7:d4:bf:b2:d2:f5:86:dd:57:e9:83:e3:ae:a0:1d:
                    75:98:74:51:63:11:78:83:ac:08:3e:c7:69:c7:dd:
                    6c:4e:54:d9:bb:7e:4e:cd:7c:9c:7e:b8:ed:da:c0:
                    6f:a1:aa:b1:21:8e:ee:c4:e4:b9:5d:83:7c:cf:ee:
                    12:59:99:f7:2a:81:7f:7d:a0:a1:eb:a2:de:75:6e:
                    72:c4:0e:27:f2:f9:82:a7:e9:d0:29:a8:4b:ed:1b:
                    cf:d9:78:d2:ca:03:c3:44:c7:59:9c:12:a0:7c:b0:
                    72:96:9e:4e:83:81:c8:55:2f:0f:2f:60:8a:3b:93:
                    87:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DD:C8:70:D6:0D:23:CF:45:15:3F:D9:77:98:1A:2B:4D:B0:2F:A9
            X509v3 Authority Key Identifier:
                keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:bd:eb:d2:b2:78:e9:dc:e5:56:2a:01:84:e2:08:94:58:bf:
         d7:c7:83:7c:a0:6d:c2:3d:5d:3c:85:0b:37:2e:a5:48:ee:eb:
         ad:bf:74:18:36:16:26:b4:55:3d:d6:ad:4d:52:d2:78:e7:78:
         ed:11:57:92:24:9a:87:58:50:2a:d7:30:39:56:8e:83:29:2c:
         88:ce:6a:5f:a8:d3:94:c4:3b:27:36:11:c1:e2:c4:f0:6b:aa:
         46:a5:cd:0d:57:ef:98:6b:b1:6b:7a:38:e4:82:74:7c:0c:d6:
         c8:2d:2c:7a:25:34:77:ce:d4:f1:e5:f6:3f:69:f3:f8:82:bd:
         7e:88:64:dc:9b:7c:3d:d2:f8:6d:8e:13:1e:5c:48:d8:03:63:
         82:b3:48:50:3b:2d:50:84:a3:0c:7a:34:51:b8:c1:72:84:a4:
         3d:b9:4a:7f:55:89:7e:c5:7b:13:b3:d4:74:e6:cb:9a:5f:21:
         97:78:d4:8e:82:c8:02:f8:ac:36:67:5f:74:17:c3:8a:fc:96:
         a8:96:50:b5:d6:26:42:8f:1c:d5:d4:61:dd:f8:13:28:34:00:
         61:a6:b5:c9:8c:a8:b3:30:53:0b:bf:64:93:ba:cb:eb:a8:94:
         41:ba:ae:87:42:b8:e3:d5:90:00:e6:3c:d2:b6:04:49:ea:35:
         8a:d5:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:34:47 2025 by rpki-client